1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x1e000000, 0x4) 05:18:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r4, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000001380)={0x0, 0x0, {0x0, 0x1, 0x0, 0x2}, 0x5}) dup3(r5, r1, 0x0) tkill(r3, 0x13) 05:18:32 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:18:32 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x302, 0x7f, 0x0, 0x20, 0x1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r2 = gettid() gettid() r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) process_vm_readv(0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/12, 0xc}], 0x1, &(0x7f0000002480)=[{&(0x7f00000001c0)}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/250, 0xfa}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000002400)=""/119, 0x77}], 0x5, 0x0) ptrace$cont(0x7, r3, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000300)="ce57c124b59f3ff010f6f77d0101891628051f8cdd819bbfac668654c9de20bfb04b552a729b73cb80f53a1e2ffdd03a08762bda3f06595f474dd283baec91ef2f4ec42a1dddd1823ae1f6321d0a42eb10c14dac4aef178e33294dd5d00653d2bd7607e043dd8a218b545e57d5e6cf3bde63e7aa1acfd1e2908747fcd361fc0c0b6276a4cb406c07bcffc372a464ccc4b6c91cc441beee46643813aefb48e3c8b0b856de0fcaa0886f4bb06ec7f8c1382e100f40df0f2d4ef6431329ef17cd2c2ac0bccaddfd83af9edd8f02e70eff52244f51c022ca9e6a8003ffaa3271ac400d80a419c94a9997609148b9b72128bc3b4f40a2ff5bf0005f5e7664b6efe782dd23504716b8a4610c96cf866f6ddf65afb6dba13149f47f98f90856c036468a61f3ef529310f33ff0416ea32e0df32a589a8eac3e42682f3904fc2377e5b2b7efc4f7149bf082f2de04529a93a18da9e142742f2f4070b792d155e757323a802fdc708fe1940cf37edb216c707f2b7ad3ab6de45adf565aa3bdc0d2ee818cad9d27ea191a3e71d4a62df53ebcc97bbfe9052802e8a510e69e46227609b38fc007985d33c051320582353ce79546e577ea9d90e1f890a153ad777bde2d3bb6173c208d0b4a7d43a31a10646c4885a9fd6931dd4eb827bea5ce93badccd22c61b4b0fbdc055fba86e1b284a6e17c7c4ca35ffe33593bb56de8f961726030718e6317d02477ac6365144c07f52825ee2334ba5b37678ad0b3108a7d15b2f948ec8f084d06b3988d616144bfd72a23363095a7becd12eaffeaedd7027396fb628773b57b82efde5714b8dbca007e8f1ce4d1644af9dc7c4502b714407c16875d85c00a26629ce6e3080ad8a4f56e9e14962854e694d107d54b9590530ea4b903fdbc629d6e080ceabd74fdedcefcfbebc9423c8012a1f739db82178b0af2b4db8ab0dad3046e0b9274ac8947840804b9f9f815544a722d7df652ed00b0cede818a3edf27ed3be82b12da70bcf50c5fd77947b23cba7da1c5fd32a610c37cd4492b45fdfd6a88f242e7aa492055e4099e77ce467d3ff7f43410da62ed746b6fa9074828cdef2003344c6294005de1ec54046f641bde156a8142d9457ea6e6a4f8b0df3086f9174fc5daa0e98aab9692ee7b2184244f235d7f3571914f52fe34e747189ff94b61cc8465e3f262ade5a987264c67cf9b789ede6d1aa032157f7d073ac70668cc5566b255dc240ca762f47da8712dc449873c3eec97ab6e10f8d2f6baa5675a1fc5e04bc44fbc8a95ff83eba987655d61422e9fee5db4b0153d58276ab591bdc9d1aa1657cbd74134351b9f79aed81dd5f875071ba1c1e7cd073bacccf7cf1e4253c2fcb5e41503d7b8b1863ec4f5bd6d9b215dd55ea68debdd251ab14bc653ce5e54cf105011fa0c90049047bba88e1be4e9f0bccc1c7080f12cf59ee14429b9450b148c443e2156c8c9c727a12126dd783a187f13da41e3319d5dd7c67844c085f994b2e3ef9c332f4134df43fd05628b833a12b3dc87477dc2f4a32c1d5029aeede450e7f64820cf7a719a9706d35277273a6d6f5574c2ee6737fa4e1c9c4747ec03f2a912956a3b5d903bf5124dd0573629c2e04949bf90bbd10cb0be3477d204ada021477288442f039c6254246cfac5cb29ab52201181521b5f6f02e83d3fa93358ba17c52ea44a4cf8cf008b9a4616bcdd7c0c5367bb92915f73c53ababcdb8d11f456b7565b1bc1d511ee53ff5a291e92563723b880ccbf42a15253b57a75dec2c33c658ae7c8fe6cfdcbe905c598305127eb1cfcb16b9f41129eacec17876ead4613a08895bb16fdb4459eabd6c301777944eee0355a5405f6d91e52b5935ce2ffd0df5e430906a589f322b2725be6d76904b31917786c8acd41579e54de7ae46be4327b510c3ac2f9a95d581de2febec3d56aa3807871c9b354f5f355bb639cf16fa366bf326b976e59eab1a1d92eed4827b97c0f341e7f6c7c1b65201d00cabc6af4d0528f26f290d50d57d5414a1f3160aa70cd2b661c2c5baf86297f3bbf2c0e0015cb188857c73e9e60dc0e064df8fc2d349bab85040f27cce0f1086c98f178b3c65c393b128d480eb1f6fbb814bd5277b02951c6773c6bfe29df95fd5e4ed0dd134c7c7636a7feb3a5e40a543c878341a2d30f23b3feab95caafebf00c28791f520850e53e293064a5512e93106f2dd0a7b432780ebcd297e27ed378e58c8d2ca7a1cb8928fbb436a9841368ab997dbcac835dba527bddc18117316c36f96301432db7b028235b6d3c78558b46f0ec75339856ab2c0713529263327f32ece53c337d579022faea326e3d6e2a87773352d5041d0a221fa32a70ab468c12ccd45ae8cd3403526c71eea6e85a3fc4a743b262934722431ff0febc35b9a23215898169fb3ec60d22ffbe26ad63dc9b0490d0ee7cf302c6745375e65ceff0bf608e5668923bd78a264d0814171adb5ce23b3844722d35ebd0b1bfe0c6949be95c3feabbef3cee28db50d8f8ef9acf98b07ee26e6557dbd539903bf35f17531e445cb1f5ed1007e2b47a35ebd16cb97c187bd0cae4a9a0590363eb2170de40876726843bb3860789ed10c1e21b8d65cf2cb035bd64511e3a8b5f79a12f62e63bd80ef8946571baa81e64e3872957828412066fc2bebd08c2c6c04784b3d6f2d16a91650aeeaf446f6195bf396564a9e887cbd5618dd15d96fc194cf8018a512a58469195de1ab284253255accc922df5277fed725139bed093b4004375633e9bb8e9bf037ede0a1bec6d491c9f34687607803d11e26d08796218f303d210f0de0aa7f78010d89a61206f1517bf7bdd38d72a0a65aca0ab43f631a2283127e587b7d71b8ad3992fd6c0de09853210b3dd59f6b0b7e745591a847ae702682b49eba6b084ad76edbf9303d80107f165654c1a71815d917224071a815b36e44df5aaf4cc422d042fbc2da11225d21d38e2fde9dee6ad8d89fd33f5eb3a918818ebb49ff9c37229ea97b6294ef55dbb839f6dbf29a1db939935a953b42f93631953bb0d3158781393fb21f32b65a8a346e7620f4b39194d56be0131f9882e0cde5a3665a473873d16fa594b32c2c10b6a25fa9804e314f3986d3e61f6c37cee28c9176828c30b2a0151e22bf0f0889900ba3f782e2d475a29fa113f3f0fac4f0e67455b43b3aa6972900363948720720c9868115d7cfbad2b0aaa145adfb06e4b9eaa1d3202c799a00307c5e4d89a7260fc9ccb6a39aed1f5dc3fc7cf9a4f4ee442c956db60abe6ad527c1a3291846644c65e7c77aef1a089b423f679ce5df7f214d5da70ea138978fc4a5422a57251bfaad7e62d10b45a3a0b8cdf50f2ec76b9124f2dd49ac5ea7ba2d894ded42a3c47a1ac23825838d9f5bfc156553254750e91e3ba611f9efbab7bfa23999000f01c956c36ddfc3d11b3fd0e85ee5ce686e3de5e888376fcaf54e0ab11f3eba3bb72ad86e6ab51e7d84b4175a8c4d3e233e1a5fdf990a95896be408b93457decd470bceb2dc7fb71c832c428a26375a45f8bd214c0dd390bf6ae895bb6ee686500f8f6ef1130b5317bc7198c1ca09c88aad326e0bea2f35b165faf2fec79f79c429c40b619fab453f1588096cbd6285e0db10ca5867a7db87cec11c8ad00dc3973b75a4a4993fd4318ff26b4950d4673955722c0f67407bfda3afae4830b917dd9c53aebffd4d686c434bcf27c064ad69a374752bef1a7e44d7a10dc6ae8e634fd2a867c45de8c720b338637437bd14c458633585cb83fdf268988c399576d33b9da5aac554bbeb1011fa2968b7ed0844ef5c78a38790af06ccde19e10bbc07a2f79e1b83d6f3104769c98e6965c8573cc97374d80aa1d7bc260016ab4ae129f65c35f5527ab6c4ce1cc67943fb2d8e106382bba2c86400f05c354c744181c28fb46ede15009f67662b4afbb553f1c75436b2f6c9394b7e248661064bedf7197f2d0cdcef591b7f6e3739e1126afe6d5c51bb3a8eedd05de65533aac97bc5eb15eb7e084c3a3c1c7d276fd4107bcad2b37eb0cb58e0d3e66c5a8f28a592c3db8803dcf342e637fa4ead4d50f3f62cc0fc9686f582e02ac7026c74c82d75490cd4786d402cce8a089ea29a9d89bf53835193ff3ed47a68a731f6dbf9079e50037810bd4bfc00ba9d068eabd8f4d57b55535ceb0252d3f6f482a0d59f6b920f12233f9ddada7492d553a685ab0ef1398372331b90f8cc8351b8029652db56a76c1cb7e335acfe8e2e771723167cfe6f2879e07a709c6473a57e86dc68b3ddfb3d90d9b94629818c351c2f2c1eaa5a10e931cc9957674d6f695cb535fc1bf40e2d7e7f0f20607e57c903d89ebc92992c1a57998dec75faefa5ea523ff2156949ccb567206d170da5ece11297bed101d60ae3d30dcb151fcbfb8665bd2a43f7021be243eda1de6433eba2def251f2ae5a4e88bb71e7dd721be86048a04b17936ff1e9c0a2e8942d256add8a76e0858ffa2ae7e543c5a8d4a912d65fbe256d9682ebbec638a3d7144f99362362244adc058a59eb3dccb23c7cb840b53cf409aeed58f1a60aaa009f3b6238ce6ffd5fd04078b697b4c8caf5f3d7acf4b34b5a9d5589551a9adfeee093a404f0660b8a986a6bc47fec69002ffb80970fa45dacf2d1aac61e8b40c5574f84b779af4420a0e6402ced525dcdb9319202fb480e296661b2e0cfe71c2e5a5eb7d325439e61e34b4af6f2f3e72b025613f003ef490673c222768d8edf662cbebdc1b0cc83ee43f85a2f3723c2357b0e9548175f0c0052c365bf52b123cbb5873126d161727e35be56529439b6db29e2587204e43e3feac8d97b95976141f9f18a209929b3b61601cc43a5fb30d6658b0bbf1035405c4a7a0f1566ed8f00e4f127394533cea0386936696e919184abfabcf3c64b08b60eb78e8d35de7fb3ea37ca668d062fea356ee9ef789b8c8b2a663ecfac969c73a9dc15f123d8e19654fd917947913d0bad20a61d55586f5a5787c49adfea6daada9ce37c81cae869bbcd020e43e8983227472406b121dd13bb4cd1248c191bd62fb20a7fc9c82cd2608f853887a6570063ead3e6fb5fe0e8b1ab16b96a781ff5094f6701da27a0e5b931cd2b13196b48769c3c03f1fe2b44dad23d439e197f61e9818934e97d4c44c1b12bc575350a66103cf43258a918703b1fe3e65cce7c668c623dd661b49a3532f3e53110c077d86b04207209810d5b309edbdc5f8b3f1c00e2b6336412133e7b516c1e57cf074132555ee2233103afcbe0788cf67076c5a3544b7a571070f5b8969c9ae6173eb6115c4049ff1dbbf1cfd3971207d91ec35a2758aa926030bab19443c9458d1b2c6dd3c4fa34e980b54066d4f0376dffd48e98df6d56f93084a9f0bee8fc043449af65f5ceb94d7d25e5740db84b37f146207f39cb115c217d4f1e84a0948a79eb17a868a234929222c5373b79ecd301f555ed40ee81db4ec07b55b0071f7602b8607514e7ed4428d0e13ac9ddcf70c55e1a20625b8e31c383935e89b6f3e2391f472aad7686464b067653b3260e835f71c8c31cc41a74d772cff2f3092afb3060b2d7582fc948e09c8b45e3e9215ac7eb9a8d7bad01e9e73a19ed608ca8e37983155a11ee5727488f4c119a837e63d05a059714b09446fcb836fc0749ee68eeab84faa6e0b30deb9ad81009a07f2556297fead8d5e1605eb5e259f3303cba9034c4266afda6c2369545bd5454ff85e966a67de92ae7c4e965a7679f1924060e373dc5024dfee77ddb7e66e4843404bb42013ef22bac3901675cafda9bbe7a2226", &(0x7f00000000c0)="b1679ee74ce38eee313631fd22c82c9a8c7a1628e71f56b1830b2adfae16fb0a9546f136a54840ef90f18d20dd5543f195b1d6ade49de3490cc568a3eda53e27147c6b457fcf658316cf0fb869d151aa773eb218ac95fb8c3bcd6683c35b9ba91823fa5d891ee5ab5e814af139b019"}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x13) 05:18:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:33 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x4000005) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0xf, 0x2, @thr={&(0x7f0000000080)="f472bbd9decfeccad4830251afc500c677803a10d397364067c8ebbc5eea321f9e6eafc020960d25e0e047", &(0x7f00000000c0)="141541b7a9e15df49de59318f992a4b2bee4e1321f8529cc230e6048cc815267f09a5075ebcf6370a7637428e19850a94c5dca3e29d57cb44bdf363500eceb2868b1f658494dc382345a0ff460ccb4d0b6f55257a3abb14d68e3ff784650ab326af3674809b5457bbc80f0f39b3ab778176951a61e0d2a2e24ff9c041102a3b80c5bc4492d9d56357c57b9a9b804e8dfb60e935f6173d0ed0d6befff423c34494267480b52f3467a8a5df15068d80e3576bf"}}, &(0x7f0000000280)) r4 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$FIONCLEX(r4, 0x5450) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) tkill(r3, 0x13) 05:18:33 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2796.077919] attempt to access beyond end of device [ 2796.077938] loop3: rw=1, want=293, limit=63 [ 2796.761265] attempt to access beyond end of device [ 2796.761280] loop3: rw=2049, want=78, limit=63 [ 2796.761291] buffer_io_error: 14 callbacks suppressed [ 2796.761300] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2796.761341] attempt to access beyond end of device [ 2796.761351] loop3: rw=2049, want=79, limit=63 [ 2796.761362] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2796.761408] attempt to access beyond end of device [ 2796.761418] loop3: rw=2049, want=80, limit=63 [ 2796.761428] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2796.761460] attempt to access beyond end of device [ 2796.761470] loop3: rw=2049, want=81, limit=63 [ 2796.761481] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2796.761528] attempt to access beyond end of device [ 2796.761538] loop3: rw=2049, want=114, limit=63 [ 2796.761549] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2796.765376] attempt to access beyond end of device [ 2796.765389] loop3: rw=2049, want=115, limit=63 [ 2796.765401] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2796.765441] attempt to access beyond end of device [ 2796.765451] loop3: rw=2049, want=116, limit=63 [ 2796.765462] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2796.765498] attempt to access beyond end of device [ 2796.765508] loop3: rw=2049, want=117, limit=63 [ 2796.765518] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2796.765554] attempt to access beyond end of device [ 2796.765563] loop3: rw=2049, want=130, limit=63 [ 2796.765574] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2796.765609] attempt to access beyond end of device [ 2796.765618] loop3: rw=2049, want=131, limit=63 [ 2796.765629] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2796.765664] attempt to access beyond end of device [ 2796.765674] loop3: rw=2049, want=132, limit=63 [ 2796.765712] attempt to access beyond end of device [ 2796.765721] loop3: rw=2049, want=133, limit=63 [ 2796.765804] attempt to access beyond end of device [ 2796.765814] loop3: rw=2049, want=157, limit=63 [ 2796.813371] attempt to access beyond end of device [ 2796.813386] loop3: rw=2049, want=3949, limit=63 05:18:39 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 05:18:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x1f000000, 0x4) 05:18:39 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0002e000"}}, 0xfffffc41) 05:18:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:18:39 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000400)="6653070000053c27bc3376003639405cb4aed12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bcee00a06dc9d8e99adaf81dcfc6afd983f79e65199615607676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb53455560c8ef00fca4fafa924edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f480800b100000000050000be5d2dd15b6210d53eed19bca008388e736e518b98d91c22def1125d7b1e821039a95ad8b91cea", 0xf3}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x3}}}, 0x78) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x21}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) 05:18:39 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:18:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:18:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2803.101041] attempt to access beyond end of device [ 2803.101056] loop3: rw=1, want=457, limit=63 05:18:40 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2803.809378] attempt to access beyond end of device [ 2803.809393] loop3: rw=2049, want=78, limit=63 [ 2803.809403] buffer_io_error: 2 callbacks suppressed [ 2803.809412] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2803.809450] attempt to access beyond end of device [ 2803.809460] loop3: rw=2049, want=79, limit=63 [ 2803.809471] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2803.809503] attempt to access beyond end of device [ 2803.809513] loop3: rw=2049, want=80, limit=63 [ 2803.809525] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2803.809558] attempt to access beyond end of device [ 2803.809567] loop3: rw=2049, want=81, limit=63 [ 2803.809576] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2803.809625] attempt to access beyond end of device [ 2803.809634] loop3: rw=2049, want=130, limit=63 [ 2803.809643] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2803.809678] attempt to access beyond end of device [ 2803.809687] loop3: rw=2049, want=131, limit=63 [ 2803.809699] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2803.809735] attempt to access beyond end of device [ 2803.809744] loop3: rw=2049, want=132, limit=63 [ 2803.809756] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2803.809789] attempt to access beyond end of device [ 2803.809798] loop3: rw=2049, want=133, limit=63 [ 2803.809809] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2803.809843] attempt to access beyond end of device [ 2803.809853] loop3: rw=2049, want=142, limit=63 [ 2803.809864] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2803.809898] attempt to access beyond end of device [ 2803.809908] loop3: rw=2049, want=143, limit=63 [ 2803.809918] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2803.813689] attempt to access beyond end of device [ 2803.813703] loop3: rw=2049, want=144, limit=63 [ 2803.813746] attempt to access beyond end of device [ 2803.813755] loop3: rw=2049, want=145, limit=63 [ 2803.813840] attempt to access beyond end of device [ 2803.813849] loop3: rw=2049, want=161, limit=63 [ 2803.862162] attempt to access beyond end of device 05:18:40 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0003e000"}}, 0xfffffc41) [ 2804.498310] loop3: rw=2049, want=4345, limit=63 [ 2805.055716] audit: type=1800 audit(1592371121.625:185): pid=23048 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=15977 res=0 05:18:46 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 05:18:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:18:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x20000000, 0x4) 05:18:46 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000f000"}}, 0xfffffc41) 05:18:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000001380)={0x0, 0x0, {0x0, 0x1, 0x0, 0x2}, 0x5}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x13) ptrace$peek(0x1, r4, &(0x7f0000000080)) 05:18:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000001380)={0x0, 0x0, {0x0, 0x1, 0x0, 0x2}, 0x5}) vmsplice(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)="1f6084ff821ceac19fa80658d004dcac4a1f92ec2cfc92c7932de511b28bf793abcbeae9f4ea0d20e99cd939756e3ccf7be1dadfb8cc0e379e6bd36add376446451671b0229ce70b84e7e8f5f1fc2721f4008d2479b9faea3d79ac6a4516bd9bdb53018cf9a371e918410a3a3e65cd20d1d9fc2af17c7171dde510c5f903e65872e0b07a0d76ef1518582af1a307f5c0289629fb66936c14532f3038a063ca7e76ebab2d7fd9df667a602e9a7cab99afa4211d2e948d4a8c0b413f02339f1742a9", 0xc1}, {&(0x7f0000000300)="be645944252ef243a953e051a3569b9a973124a07ca8c94e9d0cc4d4d5a4a1272dea1c048347b3b55ec60e74c111b8890be3b1367cf01673575c9af55d2d7fd43c0b12e8ccc1e50c0986f3099ef9c941442c9673793676e27ce7b578e8d74dd4d04f324e28d8dae76ba3cd6d5bbb8d5527f7af44a6c899caf86ca9dd92e43bb1ca5bf270a39c3ff4c307d5d109f2fabeba6b", 0x92}, {&(0x7f00000003c0)="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", 0xff}], 0x3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = gettid() r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ptrace$cont(0x7, r4, 0x800, 0x6) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x13) 05:18:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:46 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = gettid() timer_create(0x4, &(0x7f0000000000)={0x0, 0x12, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x13) 05:18:46 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:18:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:47 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2809.961370] attempt to access beyond end of device [ 2809.961386] loop3: rw=1, want=389, limit=63 [ 2810.652674] attempt to access beyond end of device [ 2810.652691] loop3: rw=2049, want=78, limit=63 [ 2810.652702] buffer_io_error: 2 callbacks suppressed [ 2810.652712] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2810.652750] attempt to access beyond end of device [ 2810.652761] loop3: rw=2049, want=79, limit=63 [ 2810.652773] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2810.652807] attempt to access beyond end of device [ 2810.652817] loop3: rw=2049, want=80, limit=63 [ 2810.652828] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2810.652861] attempt to access beyond end of device [ 2810.652871] loop3: rw=2049, want=81, limit=63 [ 2810.652882] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2810.652930] attempt to access beyond end of device [ 2810.652939] loop3: rw=2049, want=114, limit=63 [ 2810.652950] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2810.652984] attempt to access beyond end of device [ 2810.652994] loop3: rw=2049, want=115, limit=63 [ 2810.653005] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2810.653148] attempt to access beyond end of device [ 2810.653159] loop3: rw=2049, want=116, limit=63 [ 2810.653170] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2810.653205] attempt to access beyond end of device [ 2810.653215] loop3: rw=2049, want=117, limit=63 [ 2810.653225] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2810.653260] attempt to access beyond end of device [ 2810.653270] loop3: rw=2049, want=130, limit=63 [ 2810.653280] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2810.653315] attempt to access beyond end of device [ 2810.653325] loop3: rw=2049, want=131, limit=63 [ 2810.653336] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2810.653380] attempt to access beyond end of device [ 2810.653390] loop3: rw=2049, want=132, limit=63 [ 2810.653428] attempt to access beyond end of device [ 2810.653437] loop3: rw=2049, want=133, limit=63 [ 2810.653519] attempt to access beyond end of device [ 2810.653529] loop3: rw=2049, want=157, limit=63 [ 2810.693625] attempt to access beyond end of device [ 2810.693641] loop3: rw=2049, want=4341, limit=63 05:18:53 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 05:18:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x21000000, 0x4) 05:18:53 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0001f000"}}, 0xfffffc41) 05:18:53 executing program 0: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:18:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000300)={{0xa, 0x0, 0x0, 0xd20, 'syz1\x00', 0x4}, 0x0, [0x4, 0x3, 0x8, 0x1f8870b4, 0xa76b, 0x100000001, 0xfffffffffffffffc, 0x4998, 0x1641, 0xffc, 0x7, 0xa5, 0x4, 0xa7, 0xb6a5, 0x0, 0x6, 0x0, 0x9, 0x0, 0x7, 0x6, 0x7aed, 0x76, 0x81, 0x0, 0xfe6, 0x5, 0x7fff, 0x8000, 0x3, 0x10e2, 0x10000, 0x9, 0x4, 0x100000001, 0xcd, 0xa00000000000000, 0x8, 0x5, 0x1f, 0x0, 0x44fb, 0x1, 0x401, 0xe410, 0x7, 0x8, 0x3, 0x101, 0x0, 0x3, 0xf4, 0x4, 0x100000000, 0x7ff, 0x20, 0x20, 0x80000001, 0xfffffffffffffffc, 0x4, 0x568, 0x0, 0x93, 0x5, 0x5, 0x66d, 0x3, 0x3ff, 0x4, 0x72d, 0x8, 0x862e, 0xffff, 0x6, 0x8d, 0x24, 0xac8, 0x80000001, 0x7ff, 0xfffffffffffffffa, 0x8, 0x1, 0x4, 0x401, 0x10000, 0x8000, 0x4, 0x7f, 0x1f, 0x7, 0x1, 0x8001, 0xfffffffffffffeff, 0x1, 0x80000000, 0x0, 0x9, 0x0, 0x9, 0x8, 0x1, 0x8d, 0x501b, 0x1, 0x6, 0x8, 0x7, 0x69, 0x3, 0x8, 0x1, 0x3db, 0x1, 0x8c, 0x7f, 0x10001, 0x4, 0x2, 0x4e8, 0x4, 0x2, 0xe8a, 0x400, 0x5, 0x601718bc, 0x9, 0x1ff]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x13) 05:18:53 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) tkill(r3, 0x2c) 05:18:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000080)={0x81, 0x1, 0x3, 0x7fff, 0x2, "c4440c717a9a0ae9"}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r5, 0x13) 05:18:53 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:18:54 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x30a, 0x0, 0x0, 0x20, 0x2}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000080), 0x10, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x13) 05:18:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:18:54 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2817.084747] attempt to access beyond end of device [ 2817.084763] loop3: rw=1, want=361, limit=63 [ 2817.784510] attempt to access beyond end of device [ 2817.784524] loop3: rw=2049, want=78, limit=63 [ 2817.784535] buffer_io_error: 2 callbacks suppressed [ 2817.784545] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2817.784582] attempt to access beyond end of device [ 2817.784591] loop3: rw=2049, want=79, limit=63 [ 2817.784602] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2817.784633] attempt to access beyond end of device [ 2817.784642] loop3: rw=2049, want=80, limit=63 [ 2817.784652] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2817.784684] attempt to access beyond end of device [ 2817.784693] loop3: rw=2049, want=81, limit=63 [ 2817.784703] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2817.784839] attempt to access beyond end of device [ 2817.784850] loop3: rw=2049, want=130, limit=63 [ 2817.784863] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2817.784895] attempt to access beyond end of device [ 2817.784904] loop3: rw=2049, want=131, limit=63 [ 2817.784914] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2817.784946] attempt to access beyond end of device [ 2817.784955] loop3: rw=2049, want=132, limit=63 [ 2817.784965] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2817.785002] attempt to access beyond end of device [ 2817.785012] loop3: rw=2049, want=133, limit=63 [ 2817.785021] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2817.785052] attempt to access beyond end of device [ 2817.785062] loop3: rw=2049, want=142, limit=63 [ 2817.785071] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2817.785107] attempt to access beyond end of device [ 2817.785116] loop3: rw=2049, want=143, limit=63 [ 2817.785126] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2817.785158] attempt to access beyond end of device [ 2817.785167] loop3: rw=2049, want=144, limit=63 [ 2817.785204] attempt to access beyond end of device [ 2817.810380] loop3: rw=2049, want=145, limit=63 [ 2817.810499] attempt to access beyond end of device [ 2817.810511] loop3: rw=2049, want=161, limit=63 [ 2817.853961] attempt to access beyond end of device [ 2817.853976] loop3: rw=2049, want=4457, limit=63 [ 2817.872437] attempt to access beyond end of device [ 2817.872452] loop3: rw=2049, want=5017, limit=63 05:19:00 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 05:19:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x22000000, 0x4) 05:19:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:00 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0002f000"}}, 0xfffffc41) 05:19:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x301, 0xfd, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000740)={0xc0, 0x3, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0xe95fdd4e83bf2d71, 0x9, 0x0, 0x0, 0x7, 0x0, "1c3c10df"}, 0x9, 0x3, @planes=&(0x7f0000000700)={0x2d80, 0x6, @mem_offset=0x40, 0x8}, 0xfb0e, 0x0, r6}) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000007c0)=0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x13) [ 2823.681699] attempt to access beyond end of device 05:19:00 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) [ 2823.729292] loop3: rw=1, want=525, limit=63 05:19:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="000400000000000000db", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xffffff0f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x21000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2b2f}, @IFLA_LINK={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x1d, r6}, 0x10, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r7, 0x13) 05:19:00 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) [ 2823.911375] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified 05:19:00 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 05:19:00 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:00 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2700, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="ff3c9eb1018d1ef0", @ANYRES32=0x0], 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r4, 0x9}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f00000000c0)={r4, 0x8}, &(0x7f0000000100)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r7, 0x13) [ 2824.367692] attempt to access beyond end of device [ 2824.378575] loop3: rw=2049, want=78, limit=63 [ 2824.389346] buffer_io_error: 2 callbacks suppressed [ 2824.389357] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2824.427942] attempt to access beyond end of device [ 2824.439069] loop3: rw=2049, want=79, limit=63 [ 2824.448181] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2824.465002] attempt to access beyond end of device [ 2824.478991] loop3: rw=2049, want=80, limit=63 [ 2824.493082] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2824.512558] attempt to access beyond end of device [ 2824.536784] loop3: rw=2049, want=81, limit=63 [ 2824.567576] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2824.575537] attempt to access beyond end of device [ 2824.591217] loop3: rw=2049, want=114, limit=63 [ 2824.605874] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2824.613751] attempt to access beyond end of device [ 2824.625958] loop3: rw=2049, want=115, limit=63 [ 2824.630555] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2824.655675] attempt to access beyond end of device [ 2824.663218] loop3: rw=2049, want=116, limit=63 [ 2824.676399] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2824.686429] attempt to access beyond end of device [ 2824.691374] loop3: rw=2049, want=117, limit=63 [ 2824.711353] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2824.727477] attempt to access beyond end of device [ 2824.732419] loop3: rw=2049, want=130, limit=63 [ 2824.745904] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2824.753784] attempt to access beyond end of device [ 2824.765903] loop3: rw=2049, want=131, limit=63 [ 2824.770497] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2824.795969] attempt to access beyond end of device [ 2824.800914] loop3: rw=2049, want=132, limit=63 [ 2824.805532] attempt to access beyond end of device [ 2824.825945] loop3: rw=2049, want=133, limit=63 [ 2824.830639] attempt to access beyond end of device [ 2824.835570] loop3: rw=2049, want=157, limit=63 05:19:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x23000000, 0x4) 05:19:01 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 05:19:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:01 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000100)) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f0000000080)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000180)) tkill(r4, 0x13) 05:19:01 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0003f000"}}, 0xfffffc41) [ 2824.871524] attempt to access beyond end of device [ 2824.884124] loop3: rw=2049, want=4621, limit=63 [ 2824.894443] attempt to access beyond end of device [ 2824.899923] loop3: rw=2049, want=5773, limit=63 05:19:01 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 05:19:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:01 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x13) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000001380)={0x0, 0x0, {0x0, 0x1, 0x0, 0x2}, 0x5}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000140)={{0x2, 0x0, @descriptor="d2802f0991979394"}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000001380)={0x0, 0x0, {0x0, 0x1, 0x0, 0x2}, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) fcntl$lock(r4, 0x7, &(0x7f0000000100)={0x2, 0x4, 0x5, 0x1, r6}) 05:19:01 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x0) 05:19:01 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2825.480288] attempt to access beyond end of device [ 2825.512613] loop3: rw=1, want=377, limit=63 [ 2826.221175] attempt to access beyond end of device [ 2826.226937] loop3: rw=2049, want=78, limit=63 [ 2826.231486] attempt to access beyond end of device [ 2826.282335] loop3: rw=2049, want=79, limit=63 [ 2826.287003] attempt to access beyond end of device [ 2826.291937] loop3: rw=2049, want=80, limit=63 [ 2826.302699] attempt to access beyond end of device [ 2826.307741] loop3: rw=2049, want=81, limit=63 [ 2826.312300] attempt to access beyond end of device [ 2826.362574] loop3: rw=2049, want=130, limit=63 [ 2826.367317] attempt to access beyond end of device [ 2826.372251] loop3: rw=2049, want=131, limit=63 [ 2826.422565] attempt to access beyond end of device [ 2826.427635] loop3: rw=2049, want=132, limit=63 [ 2826.432261] attempt to access beyond end of device [ 2826.460781] loop3: rw=2049, want=133, limit=63 [ 2826.465432] attempt to access beyond end of device [ 2826.470463] loop3: rw=2049, want=142, limit=63 [ 2826.475091] attempt to access beyond end of device [ 2826.501961] loop3: rw=2049, want=143, limit=63 [ 2826.506698] attempt to access beyond end of device [ 2826.511634] loop3: rw=2049, want=144, limit=63 [ 2826.535406] attempt to access beyond end of device [ 2826.565444] loop3: rw=2049, want=145, limit=63 [ 2826.570243] attempt to access beyond end of device [ 2826.575179] loop3: rw=2049, want=161, limit=63 [ 2826.589619] attempt to access beyond end of device [ 2826.594575] loop3: rw=2049, want=4473, limit=63 05:19:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x24000000, 0x4) 05:19:03 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x0) 05:19:03 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000001380)={0x0, 0x0, {0x0, 0x1, 0x0, 0x2}, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x20}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000000200), 0x10, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r6, 0x13) 05:19:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:03 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000000100"}}, 0xfffffc41) [ 2826.612292] attempt to access beyond end of device [ 2826.622237] loop3: rw=2049, want=8569, limit=63 [ 2826.630857] attempt to access beyond end of device [ 2826.640855] loop3: rw=2049, want=10185, limit=63 05:19:03 executing program 1: mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x0) 05:19:03 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) 05:19:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:03 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:03 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:03 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2827.572542] attempt to access beyond end of device [ 2827.612908] loop3: rw=1, want=581, limit=63 [ 2828.260261] attempt to access beyond end of device [ 2828.265250] loop3: rw=2049, want=78, limit=63 [ 2828.279312] attempt to access beyond end of device [ 2828.293192] loop3: rw=2049, want=79, limit=63 [ 2828.303115] attempt to access beyond end of device [ 2828.331811] loop3: rw=2049, want=80, limit=63 [ 2828.341969] attempt to access beyond end of device [ 2828.351222] loop3: rw=2049, want=81, limit=63 [ 2828.358370] attempt to access beyond end of device [ 2828.363379] loop3: rw=2049, want=114, limit=63 [ 2828.373080] attempt to access beyond end of device [ 2828.380545] loop3: rw=2049, want=115, limit=63 [ 2828.385235] attempt to access beyond end of device [ 2828.394823] loop3: rw=2049, want=116, limit=63 [ 2828.404042] attempt to access beyond end of device [ 2828.413224] loop3: rw=2049, want=117, limit=63 [ 2828.420482] attempt to access beyond end of device [ 2828.431743] loop3: rw=2049, want=130, limit=63 [ 2828.443239] attempt to access beyond end of device [ 2828.459627] loop3: rw=2049, want=131, limit=63 [ 2828.473447] attempt to access beyond end of device [ 2828.496408] loop3: rw=2049, want=132, limit=63 [ 2828.501147] attempt to access beyond end of device [ 2828.513509] loop3: rw=2049, want=133, limit=63 [ 2828.518884] attempt to access beyond end of device [ 2828.523901] loop3: rw=2049, want=157, limit=63 [ 2828.539762] attempt to access beyond end of device [ 2828.544776] loop3: rw=2049, want=4677, limit=63 [ 2828.564197] attempt to access beyond end of device [ 2828.574274] loop3: rw=2049, want=8773, limit=63 [ 2828.591523] attempt to access beyond end of device [ 2828.597477] loop3: rw=2049, want=12461, limit=63 05:19:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x25000000, 0x4) 05:19:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:05 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:05 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000000200"}}, 0xfffffc41) 05:19:05 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:05 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:05 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:06 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2829.754550] attempt to access beyond end of device [ 2829.786222] loop3: rw=1, want=509, limit=63 [ 2830.430619] attempt to access beyond end of device [ 2830.442340] loop3: rw=2049, want=78, limit=63 [ 2830.453802] buffer_io_error: 26 callbacks suppressed [ 2830.453812] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2830.482222] attempt to access beyond end of device [ 2830.492815] loop3: rw=2049, want=79, limit=63 [ 2830.498114] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2830.506511] attempt to access beyond end of device [ 2830.511540] loop3: rw=2049, want=80, limit=63 [ 2830.517472] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2830.525291] attempt to access beyond end of device [ 2830.531307] loop3: rw=2049, want=81, limit=63 [ 2830.537135] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2830.553803] attempt to access beyond end of device [ 2830.564528] loop3: rw=2049, want=114, limit=63 [ 2830.575214] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2830.592770] attempt to access beyond end of device [ 2830.605191] loop3: rw=2049, want=115, limit=63 [ 2830.615948] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2830.633165] attempt to access beyond end of device [ 2830.645008] loop3: rw=2049, want=116, limit=63 [ 2830.654792] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2830.664685] attempt to access beyond end of device [ 2830.670232] loop3: rw=2049, want=117, limit=63 [ 2830.675004] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2830.684446] attempt to access beyond end of device [ 2830.691160] loop3: rw=2049, want=130, limit=63 [ 2830.696367] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2830.704296] attempt to access beyond end of device [ 2830.710464] loop3: rw=2049, want=131, limit=63 [ 2830.715142] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2830.725021] attempt to access beyond end of device [ 2830.740556] loop3: rw=2049, want=132, limit=63 [ 2830.755470] attempt to access beyond end of device [ 2830.767597] loop3: rw=2049, want=133, limit=63 [ 2830.777573] attempt to access beyond end of device [ 2830.789173] loop3: rw=2049, want=157, limit=63 [ 2830.808651] attempt to access beyond end of device [ 2830.820375] loop3: rw=2049, want=4605, limit=63 [ 2830.847100] attempt to access beyond end of device [ 2830.859270] loop3: rw=2049, want=8701, limit=63 [ 2830.880505] attempt to access beyond end of device [ 2830.892219] loop3: rw=2049, want=11085, limit=63 05:19:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x26000000, 0x4) 05:19:07 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000000300"}}, 0xfffffc41) 05:19:07 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:07 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:07 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:08 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:08 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2832.042435] attempt to access beyond end of device [ 2832.089921] loop3: rw=1, want=381, limit=63 05:19:08 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:08 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2832.693604] attempt to access beyond end of device [ 2832.710954] loop3: rw=2049, want=78, limit=63 [ 2832.735771] attempt to access beyond end of device [ 2832.740729] loop3: rw=2049, want=79, limit=63 [ 2832.770346] attempt to access beyond end of device [ 2832.781901] loop3: rw=2049, want=80, limit=63 [ 2832.793224] attempt to access beyond end of device [ 2832.815920] loop3: rw=2049, want=81, limit=63 [ 2832.820617] attempt to access beyond end of device [ 2832.845191] loop3: rw=2049, want=114, limit=63 [ 2832.849878] attempt to access beyond end of device [ 2832.854901] loop3: rw=2049, want=115, limit=63 [ 2832.875235] attempt to access beyond end of device [ 2832.880219] loop3: rw=2049, want=116, limit=63 [ 2832.884844] attempt to access beyond end of device [ 2832.898299] loop3: rw=2049, want=117, limit=63 [ 2832.902942] attempt to access beyond end of device [ 2832.911774] loop3: rw=2049, want=130, limit=63 [ 2832.919237] attempt to access beyond end of device [ 2832.924182] loop3: rw=2049, want=131, limit=63 [ 2832.931764] attempt to access beyond end of device [ 2832.945398] loop3: rw=2049, want=132, limit=63 [ 2832.950041] attempt to access beyond end of device [ 2832.954975] loop3: rw=2049, want=133, limit=63 [ 2832.967082] attempt to access beyond end of device [ 2832.972029] loop3: rw=2049, want=157, limit=63 [ 2832.987574] attempt to access beyond end of device [ 2832.992520] loop3: rw=2049, want=4477, limit=63 [ 2833.003910] attempt to access beyond end of device [ 2833.025934] loop3: rw=2049, want=4981, limit=63 05:19:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x27000000, 0x4) 05:19:09 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000000400"}}, 0xfffffc41) 05:19:09 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000180)) 05:19:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000180)) 05:19:09 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000180)) 05:19:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, 0x0) [ 2833.618223] attempt to access beyond end of device 05:19:10 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2833.670471] loop3: rw=1, want=349, limit=63 05:19:10 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, 0x0) [ 2834.288810] attempt to access beyond end of device [ 2834.293954] loop3: rw=2049, want=78, limit=63 [ 2834.303338] attempt to access beyond end of device [ 2834.317749] loop3: rw=2049, want=79, limit=63 [ 2834.322296] attempt to access beyond end of device [ 2834.350189] loop3: rw=2049, want=80, limit=63 [ 2834.354746] attempt to access beyond end of device [ 2834.390082] loop3: rw=2049, want=81, limit=63 [ 2834.394760] attempt to access beyond end of device [ 2834.402500] loop3: rw=2049, want=114, limit=63 [ 2834.415179] attempt to access beyond end of device [ 2834.420118] loop3: rw=2049, want=115, limit=63 [ 2834.424742] attempt to access beyond end of device [ 2834.445120] loop3: rw=2049, want=116, limit=63 [ 2834.449760] attempt to access beyond end of device [ 2834.454689] loop3: rw=2049, want=117, limit=63 [ 2834.475557] attempt to access beyond end of device [ 2834.480512] loop3: rw=2049, want=130, limit=63 [ 2834.502329] attempt to access beyond end of device [ 2834.512895] loop3: rw=2049, want=131, limit=63 [ 2834.529553] attempt to access beyond end of device [ 2834.545947] loop3: rw=2049, want=132, limit=63 [ 2834.557156] attempt to access beyond end of device [ 2834.575657] loop3: rw=2049, want=133, limit=63 [ 2834.584851] attempt to access beyond end of device [ 2834.601320] loop3: rw=2049, want=157, limit=63 [ 2834.620778] attempt to access beyond end of device 05:19:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x28000000, 0x4) 05:19:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, 0x0) 05:19:11 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000000500"}}, 0xfffffc41) 05:19:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2834.645108] loop3: rw=2049, want=4445, limit=63 [ 2834.653975] attempt to access beyond end of device [ 2834.675055] loop3: rw=2049, want=6157, limit=63 05:19:11 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:11 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:11 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:12 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2835.495254] attempt to access beyond end of device 05:19:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2835.552336] loop3: rw=1, want=309, limit=63 [ 2836.195432] attempt to access beyond end of device [ 2836.200433] loop3: rw=2049, want=78, limit=63 [ 2836.214963] buffer_io_error: 26 callbacks suppressed [ 2836.214990] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2836.236657] attempt to access beyond end of device [ 2836.255501] loop3: rw=2049, want=79, limit=63 [ 2836.260011] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2836.285010] attempt to access beyond end of device [ 2836.290039] loop3: rw=2049, want=80, limit=63 [ 2836.294534] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2836.315010] attempt to access beyond end of device [ 2836.319946] loop3: rw=2049, want=81, limit=63 [ 2836.324444] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2836.354994] attempt to access beyond end of device [ 2836.359935] loop3: rw=2049, want=114, limit=63 [ 2836.364516] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2836.373781] attempt to access beyond end of device [ 2836.379278] loop3: rw=2049, want=115, limit=63 [ 2836.383873] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2836.394816] attempt to access beyond end of device [ 2836.400432] loop3: rw=2049, want=116, limit=63 [ 2836.405638] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2836.413502] attempt to access beyond end of device [ 2836.419525] loop3: rw=2049, want=117, limit=63 [ 2836.424119] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2836.432879] attempt to access beyond end of device [ 2836.438377] loop3: rw=2049, want=130, limit=63 [ 2836.442966] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2836.451864] attempt to access beyond end of device [ 2836.457587] loop3: rw=2049, want=131, limit=63 [ 2836.462176] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2836.475430] attempt to access beyond end of device [ 2836.480365] loop3: rw=2049, want=132, limit=63 [ 2836.494950] attempt to access beyond end of device [ 2836.499887] loop3: rw=2049, want=133, limit=63 [ 2836.504559] attempt to access beyond end of device [ 2836.524978] loop3: rw=2049, want=157, limit=63 [ 2836.534092] attempt to access beyond end of device [ 2836.554915] loop3: rw=2049, want=4405, limit=63 [ 2836.563994] attempt to access beyond end of device 05:19:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x29000000, 0x4) 05:19:13 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:13 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000000600"}}, 0xfffffc41) 05:19:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2836.594908] loop3: rw=2049, want=6237, limit=63 05:19:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:13 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:13 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:13 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2837.372298] attempt to access beyond end of device [ 2837.420502] loop3: rw=1, want=457, limit=63 [ 2838.055849] attempt to access beyond end of device [ 2838.060812] loop3: rw=2049, want=78, limit=63 [ 2838.075973] attempt to access beyond end of device [ 2838.080922] loop3: rw=2049, want=79, limit=63 [ 2838.104875] attempt to access beyond end of device [ 2838.109823] loop3: rw=2049, want=80, limit=63 [ 2838.114356] attempt to access beyond end of device [ 2838.134802] loop3: rw=2049, want=81, limit=63 [ 2838.139371] attempt to access beyond end of device [ 2838.144304] loop3: rw=2049, want=130, limit=63 [ 2838.164881] attempt to access beyond end of device [ 2838.169823] loop3: rw=2049, want=131, limit=63 [ 2838.174441] attempt to access beyond end of device [ 2838.213237] loop3: rw=2049, want=132, limit=63 [ 2838.222492] attempt to access beyond end of device [ 2838.240285] loop3: rw=2049, want=133, limit=63 [ 2838.259964] attempt to access beyond end of device [ 2838.277338] loop3: rw=2049, want=142, limit=63 [ 2838.293556] attempt to access beyond end of device [ 2838.304170] loop3: rw=2049, want=143, limit=63 [ 2838.319606] attempt to access beyond end of device [ 2838.331254] loop3: rw=2049, want=144, limit=63 [ 2838.346043] attempt to access beyond end of device [ 2838.364032] loop3: rw=2049, want=145, limit=63 [ 2838.373362] attempt to access beyond end of device [ 2838.390068] loop3: rw=2049, want=161, limit=63 [ 2838.409680] attempt to access beyond end of device [ 2838.425468] loop3: rw=2049, want=4553, limit=63 05:19:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2a000000, 0x4) [ 2838.453911] attempt to access beyond end of device [ 2838.465056] loop3: rw=2049, want=7257, limit=63 05:19:15 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:15 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\a\x00'}}, 0xfffffc41) 05:19:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:15 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:15 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:15 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2839.322349] attempt to access beyond end of device [ 2839.342828] loop3: rw=1, want=441, limit=63 05:19:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) syz_open_dev$tty1(0xc, 0x4, 0x1) [ 2839.940394] attempt to access beyond end of device [ 2839.945421] loop3: rw=2049, want=78, limit=63 [ 2839.949974] attempt to access beyond end of device [ 2839.985021] loop3: rw=2049, want=79, limit=63 [ 2839.989674] attempt to access beyond end of device [ 2840.002071] loop3: rw=2049, want=80, limit=63 [ 2840.008102] attempt to access beyond end of device [ 2840.013050] loop3: rw=2049, want=81, limit=63 [ 2840.023538] attempt to access beyond end of device [ 2840.028797] loop3: rw=2049, want=130, limit=63 [ 2840.033981] attempt to access beyond end of device [ 2840.044382] loop3: rw=2049, want=131, limit=63 [ 2840.059625] attempt to access beyond end of device [ 2840.064567] loop3: rw=2049, want=132, limit=63 [ 2840.069691] attempt to access beyond end of device [ 2840.081637] loop3: rw=2049, want=133, limit=63 [ 2840.086710] attempt to access beyond end of device [ 2840.091649] loop3: rw=2049, want=142, limit=63 [ 2840.101731] attempt to access beyond end of device [ 2840.107003] loop3: rw=2049, want=143, limit=63 [ 2840.111765] attempt to access beyond end of device [ 2840.136911] loop3: rw=2049, want=144, limit=63 [ 2840.147481] attempt to access beyond end of device [ 2840.160104] loop3: rw=2049, want=145, limit=63 [ 2840.170465] attempt to access beyond end of device [ 2840.183713] loop3: rw=2049, want=161, limit=63 [ 2840.193860] attempt to access beyond end of device [ 2840.200849] loop3: rw=2049, want=4537, limit=63 [ 2840.217452] attempt to access beyond end of device [ 2840.228384] loop3: rw=2049, want=6809, limit=63 05:19:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2b000000, 0x4) 05:19:16 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) syz_open_dev$tty1(0xc, 0x4, 0x1) 05:19:16 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:16 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:16 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\b\x00'}}, 0xfffffc41) 05:19:16 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:17 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:17 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2841.038646] attempt to access beyond end of device [ 2841.070630] loop3: rw=1, want=385, limit=63 05:19:17 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2841.720322] attempt to access beyond end of device [ 2841.729813] loop3: rw=2049, want=78, limit=63 [ 2841.734330] buffer_io_error: 26 callbacks suppressed [ 2841.734341] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2841.791607] attempt to access beyond end of device [ 2841.804409] loop3: rw=2049, want=79, limit=63 [ 2841.814279] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2841.842975] attempt to access beyond end of device [ 2841.858103] loop3: rw=2049, want=80, limit=63 [ 2841.875124] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2841.882919] attempt to access beyond end of device [ 2841.894668] loop3: rw=2049, want=81, limit=63 [ 2841.899231] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2841.911647] attempt to access beyond end of device [ 2841.918023] loop3: rw=2049, want=130, limit=63 [ 2841.922619] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2841.947796] attempt to access beyond end of device [ 2841.952744] loop3: rw=2049, want=131, limit=63 [ 2841.966522] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2841.985642] attempt to access beyond end of device [ 2841.997401] loop3: rw=2049, want=132, limit=63 [ 2842.016985] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2842.037149] attempt to access beyond end of device [ 2842.048784] loop3: rw=2049, want=133, limit=63 [ 2842.059522] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2842.087959] attempt to access beyond end of device [ 2842.092902] loop3: rw=2049, want=142, limit=63 [ 2842.107426] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2842.127216] attempt to access beyond end of device [ 2842.138081] loop3: rw=2049, want=143, limit=63 [ 2842.157817] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2842.177445] attempt to access beyond end of device [ 2842.189300] loop3: rw=2049, want=144, limit=63 [ 2842.200367] attempt to access beyond end of device [ 2842.212228] loop3: rw=2049, want=145, limit=63 [ 2842.218715] attempt to access beyond end of device [ 2842.223734] loop3: rw=2049, want=161, limit=63 [ 2842.234608] attempt to access beyond end of device [ 2842.239617] loop3: rw=2049, want=4481, limit=63 [ 2842.256796] attempt to access beyond end of device 05:19:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2c000000, 0x4) 05:19:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:18 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000040800"}}, 0xfffffc41) 05:19:18 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:18 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) syz_open_dev$tty1(0xc, 0x4, 0x1) 05:19:18 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2842.267331] loop3: rw=2049, want=6577, limit=63 05:19:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:19 executing program 1: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:19 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) close(0xffffffffffffffff) r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r3, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) 05:19:19 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:19 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2843.243528] attempt to access beyond end of device [ 2843.286674] loop3: rw=1, want=545, limit=63 [ 2843.906196] attempt to access beyond end of device [ 2843.911167] loop3: rw=2049, want=78, limit=63 [ 2843.921800] attempt to access beyond end of device [ 2843.934381] loop3: rw=2049, want=79, limit=63 [ 2843.943339] attempt to access beyond end of device [ 2843.954836] loop3: rw=2049, want=80, limit=63 [ 2843.959495] attempt to access beyond end of device [ 2843.965962] loop3: rw=2049, want=81, limit=63 [ 2843.970570] attempt to access beyond end of device [ 2843.977031] loop3: rw=2049, want=130, limit=63 [ 2843.981655] attempt to access beyond end of device [ 2843.987930] loop3: rw=2049, want=131, limit=63 [ 2843.992551] attempt to access beyond end of device [ 2844.002235] loop3: rw=2049, want=132, limit=63 [ 2844.014437] attempt to access beyond end of device [ 2844.019377] loop3: rw=2049, want=133, limit=63 [ 2844.023994] attempt to access beyond end of device [ 2844.054782] loop3: rw=2049, want=142, limit=63 [ 2844.059444] attempt to access beyond end of device [ 2844.066515] loop3: rw=2049, want=143, limit=63 [ 2844.071141] attempt to access beyond end of device [ 2844.089618] loop3: rw=2049, want=144, limit=63 [ 2844.102119] attempt to access beyond end of device [ 2844.119004] loop3: rw=2049, want=145, limit=63 [ 2844.132312] attempt to access beyond end of device [ 2844.148478] loop3: rw=2049, want=161, limit=63 05:19:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2d000000, 0x4) 05:19:20 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:20 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) 05:19:20 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000800800"}}, 0xfffffc41) 05:19:20 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(0x0, 0x2, 0x2800) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2844.168005] attempt to access beyond end of device [ 2844.179640] loop3: rw=2049, want=4641, limit=63 [ 2844.198201] attempt to access beyond end of device [ 2844.203209] loop3: rw=2049, want=7377, limit=63 05:19:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:21 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:21 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:19:21 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2844.847955] attempt to access beyond end of device [ 2844.925040] loop3: rw=1, want=433, limit=63 05:19:21 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2845.517451] attempt to access beyond end of device [ 2845.532017] loop3: rw=2049, want=78, limit=63 [ 2845.543779] attempt to access beyond end of device [ 2845.562209] loop3: rw=2049, want=79, limit=63 [ 2845.583374] attempt to access beyond end of device [ 2845.608335] loop3: rw=2049, want=80, limit=63 [ 2845.616930] attempt to access beyond end of device [ 2845.636728] loop3: rw=2049, want=81, limit=63 [ 2845.645040] attempt to access beyond end of device [ 2845.655416] loop3: rw=2049, want=130, limit=63 [ 2845.665751] attempt to access beyond end of device [ 2845.670696] loop3: rw=2049, want=131, limit=63 [ 2845.684728] attempt to access beyond end of device [ 2845.695044] loop3: rw=2049, want=132, limit=63 [ 2845.699719] attempt to access beyond end of device [ 2845.714581] loop3: rw=2049, want=133, limit=63 [ 2845.720924] attempt to access beyond end of device [ 2845.736916] loop3: rw=2049, want=142, limit=63 [ 2845.750542] attempt to access beyond end of device [ 2845.763942] loop3: rw=2049, want=143, limit=63 [ 2845.772213] attempt to access beyond end of device [ 2845.780084] loop3: rw=2049, want=144, limit=63 [ 2845.788414] attempt to access beyond end of device [ 2845.793594] loop3: rw=2049, want=145, limit=63 [ 2845.801061] attempt to access beyond end of device [ 2845.808805] loop3: rw=2049, want=161, limit=63 [ 2845.821470] attempt to access beyond end of device [ 2845.829039] loop3: rw=2049, want=4529, limit=63 05:19:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2e000000, 0x4) 05:19:22 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:19:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:22 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:22 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\t\x00'}}, 0xfffffc41) [ 2845.842363] attempt to access beyond end of device [ 2845.849990] loop3: rw=2049, want=5569, limit=63 05:19:22 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:22 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:23 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 05:19:23 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2846.595317] attempt to access beyond end of device [ 2846.626059] loop3: rw=1, want=305, limit=63 05:19:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2847.324826] attempt to access beyond end of device [ 2847.329798] loop3: rw=2049, want=78, limit=63 [ 2847.373423] buffer_io_error: 26 callbacks suppressed [ 2847.373433] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2847.404315] attempt to access beyond end of device [ 2847.409270] loop3: rw=2049, want=79, limit=63 [ 2847.425110] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2847.454155] attempt to access beyond end of device [ 2847.459146] loop3: rw=2049, want=80, limit=63 [ 2847.463648] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2847.481788] attempt to access beyond end of device [ 2847.494074] loop3: rw=2049, want=81, limit=63 [ 2847.498619] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2847.524686] attempt to access beyond end of device [ 2847.529681] loop3: rw=2049, want=130, limit=63 [ 2847.536050] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2847.543939] attempt to access beyond end of device [ 2847.551686] loop3: rw=2049, want=131, limit=63 [ 2847.556862] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2847.565345] attempt to access beyond end of device [ 2847.570285] loop3: rw=2049, want=132, limit=63 [ 2847.575934] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2847.583817] attempt to access beyond end of device [ 2847.589931] loop3: rw=2049, want=133, limit=63 [ 2847.595189] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2847.603060] attempt to access beyond end of device [ 2847.619614] loop3: rw=2049, want=142, limit=63 [ 2847.624998] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2847.632845] attempt to access beyond end of device [ 2847.654093] loop3: rw=2049, want=143, limit=63 [ 2847.658699] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2847.668011] attempt to access beyond end of device [ 2847.672958] loop3: rw=2049, want=144, limit=63 [ 2847.685131] attempt to access beyond end of device [ 2847.694692] loop3: rw=2049, want=145, limit=63 [ 2847.699386] attempt to access beyond end of device [ 2847.714044] loop3: rw=2049, want=161, limit=63 05:19:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2f000000, 0x4) 05:19:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:24 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:24 executing program 0: mkdir(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) 05:19:24 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\n\x00'}}, 0xfffffc41) 05:19:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2847.723193] attempt to access beyond end of device [ 2847.729932] loop3: rw=2049, want=4097, limit=63 05:19:24 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) close(0xffffffffffffffff) r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) io_submit(r4, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7}]) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) syz_genetlink_get_family_id$tipc(0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') 05:19:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2848.187069] attempt to access beyond end of device 05:19:24 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2848.236729] loop3: rw=1, want=229, limit=63 05:19:24 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x2, 0x2800) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r1, r2, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1, r0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2848.893274] attempt to access beyond end of device [ 2848.910619] loop3: rw=2049, want=78, limit=63 [ 2848.927579] attempt to access beyond end of device [ 2848.950256] loop3: rw=2049, want=79, limit=63 [ 2848.970689] attempt to access beyond end of device [ 2848.989041] loop3: rw=2049, want=80, limit=63 [ 2849.002862] attempt to access beyond end of device [ 2849.034680] loop3: rw=2049, want=81, limit=63 [ 2849.039267] attempt to access beyond end of device [ 2849.045362] loop3: rw=2049, want=114, limit=63 [ 2849.050020] attempt to access beyond end of device [ 2849.064192] loop3: rw=2049, want=115, limit=63 [ 2849.068863] attempt to access beyond end of device [ 2849.073797] loop3: rw=2049, want=116, limit=63 [ 2849.094099] attempt to access beyond end of device [ 2849.099034] loop3: rw=2049, want=117, limit=63 [ 2849.103650] attempt to access beyond end of device [ 2849.110171] loop3: rw=2049, want=130, limit=63 [ 2849.116614] attempt to access beyond end of device [ 2849.121586] loop3: rw=2049, want=131, limit=63 [ 2849.127233] attempt to access beyond end of device [ 2849.132168] loop3: rw=2049, want=132, limit=63 [ 2849.137766] attempt to access beyond end of device [ 2849.142703] loop3: rw=2049, want=133, limit=63 [ 2849.148445] attempt to access beyond end of device [ 2849.153383] loop3: rw=2049, want=157, limit=63 [ 2849.169297] attempt to access beyond end of device [ 2849.174952] loop3: rw=2049, want=4325, limit=63 [ 2849.186661] attempt to access beyond end of device 05:19:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x30000000, 0x4) 05:19:25 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) 05:19:25 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:25 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\v\x00'}}, 0xfffffc41) [ 2849.191605] loop3: rw=2049, want=7461, limit=63 05:19:26 executing program 0: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00eeea7cee0000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', r3}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000000ec00eeea7cee0000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}]}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=0x0, @ANYBLOB="74d92bbd7000fddbdf251d00000008000300", @ANYRES32=0x0, @ANYBLOB="1c00238008001c000300000000001500d7000000050007000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900020000000200000008000300", @ANYRES32=r4, @ANYBLOB="1400238008000b000500000005000800050000001c00238005000700fe000000060010000400000006000a000600000008000300", @ANYRES32=r8, @ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x24, 0x100, 0x70bd25, 0x25dfdbfb, {0x20}, [@nested={0x1e, 0x3b, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @generic, @generic="564af96963be"]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x34040040) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x30, r9, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd93}]}, 0x30}, 0x1, 0x6c}, 0x0) 05:19:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:26 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000180)) 05:19:26 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000180)) [ 2849.575989] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 05:19:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2849.656652] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. 05:19:26 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2849.778735] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified [ 2849.898198] attempt to access beyond end of device [ 2849.907415] loop3: rw=1, want=477, limit=63 [ 2850.555200] attempt to access beyond end of device [ 2850.560162] loop3: rw=2049, want=78, limit=63 [ 2850.592803] attempt to access beyond end of device [ 2850.603395] loop3: rw=2049, want=79, limit=63 [ 2850.629427] attempt to access beyond end of device [ 2850.639219] loop3: rw=2049, want=80, limit=63 [ 2850.653979] attempt to access beyond end of device [ 2850.658929] loop3: rw=2049, want=81, limit=63 [ 2850.663482] attempt to access beyond end of device [ 2850.693867] loop3: rw=2049, want=114, limit=63 [ 2850.698494] attempt to access beyond end of device [ 2850.703421] loop3: rw=2049, want=115, limit=63 [ 2850.738905] attempt to access beyond end of device [ 2850.745922] loop3: rw=2049, want=116, limit=63 [ 2850.750567] attempt to access beyond end of device [ 2850.779756] loop3: rw=2049, want=117, limit=63 [ 2850.799645] attempt to access beyond end of device [ 2850.805259] loop3: rw=2049, want=130, limit=63 [ 2850.809888] attempt to access beyond end of device [ 2850.838887] loop3: rw=2049, want=131, limit=63 [ 2850.843524] attempt to access beyond end of device [ 2850.864761] loop3: rw=2049, want=132, limit=63 [ 2850.869391] attempt to access beyond end of device [ 2850.894719] loop3: rw=2049, want=133, limit=63 [ 2850.904128] attempt to access beyond end of device [ 2850.916187] loop3: rw=2049, want=157, limit=63 [ 2850.936687] attempt to access beyond end of device [ 2850.948391] loop3: rw=2049, want=4573, limit=63 05:19:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x31000000, 0x4) 05:19:27 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000180)) 05:19:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendfile(r1, r2, 0x0, 0x800000080004103) 05:19:27 executing program 4: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:27 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\f\x00'}}, 0xfffffc41) 05:19:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2850.968816] attempt to access beyond end of device [ 2850.973961] loop3: rw=2049, want=8669, limit=63 [ 2850.982921] attempt to access beyond end of device [ 2850.988739] loop3: rw=2049, want=10237, limit=63 05:19:27 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, 0x0) 05:19:27 executing program 4: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:27 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, 0x0) 05:19:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:28 executing program 1: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x100000000000c333, 0x0) 05:19:28 executing program 4: perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) [ 2851.856924] attempt to access beyond end of device [ 2851.856940] loop3: rw=1, want=309, limit=63 05:19:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x32000000, 0x4) 05:19:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendfile(r1, r2, 0x0, 0x800000080004103) [ 2852.533434] attempt to access beyond end of device [ 2852.533448] loop3: rw=2049, want=78, limit=63 [ 2852.533461] buffer_io_error: 26 callbacks suppressed [ 2852.533471] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2852.533510] attempt to access beyond end of device [ 2852.533521] loop3: rw=2049, want=79, limit=63 [ 2852.533532] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2852.538042] attempt to access beyond end of device [ 2852.538057] loop3: rw=2049, want=80, limit=63 [ 2852.538071] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2852.538116] attempt to access beyond end of device [ 2852.538126] loop3: rw=2049, want=81, limit=63 [ 2852.538138] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2852.538191] attempt to access beyond end of device [ 2852.538201] loop3: rw=2049, want=114, limit=63 [ 2852.538212] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2852.538248] attempt to access beyond end of device [ 2852.538257] loop3: rw=2049, want=115, limit=63 [ 2852.538268] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2852.538302] attempt to access beyond end of device [ 2852.538311] loop3: rw=2049, want=116, limit=63 [ 2852.538322] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2852.538356] attempt to access beyond end of device [ 2852.538366] loop3: rw=2049, want=117, limit=63 [ 2852.538377] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2852.538415] attempt to access beyond end of device [ 2852.538424] loop3: rw=2049, want=130, limit=63 [ 2852.538434] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2852.538469] attempt to access beyond end of device [ 2852.538478] loop3: rw=2049, want=131, limit=63 [ 2852.538489] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2852.538525] attempt to access beyond end of device [ 2852.538535] loop3: rw=2049, want=132, limit=63 [ 2852.538571] attempt to access beyond end of device [ 2852.538581] loop3: rw=2049, want=133, limit=63 [ 2852.538667] attempt to access beyond end of device [ 2852.538677] loop3: rw=2049, want=157, limit=63 [ 2852.564103] attempt to access beyond end of device [ 2852.564119] loop3: rw=2049, want=4405, limit=63 [ 2852.596353] attempt to access beyond end of device [ 2852.596367] loop3: rw=2049, want=8501, limit=63 [ 2852.604559] attempt to access beyond end of device [ 2852.604573] loop3: rw=2049, want=9181, limit=63 [ 2853.064213] attempt to access beyond end of device [ 2853.375116] loop3: rw=1, want=617, limit=63 [ 2853.768724] attempt to access beyond end of device [ 2853.768738] loop3: rw=2049, want=78, limit=63 [ 2853.768775] attempt to access beyond end of device [ 2853.768791] loop3: rw=2049, want=79, limit=63 [ 2853.768822] attempt to access beyond end of device [ 2853.768848] loop3: rw=2049, want=80, limit=63 [ 2853.768881] attempt to access beyond end of device [ 2853.768889] loop3: rw=2049, want=81, limit=63 [ 2853.768937] attempt to access beyond end of device [ 2853.768946] loop3: rw=2049, want=130, limit=63 [ 2853.768980] attempt to access beyond end of device [ 2853.768988] loop3: rw=2049, want=131, limit=63 [ 2853.769021] attempt to access beyond end of device [ 2853.769029] loop3: rw=2049, want=132, limit=63 [ 2853.769064] attempt to access beyond end of device [ 2853.769072] loop3: rw=2049, want=133, limit=63 [ 2853.769104] attempt to access beyond end of device [ 2853.769113] loop3: rw=2049, want=142, limit=63 [ 2853.769143] attempt to access beyond end of device [ 2853.769152] loop3: rw=2049, want=143, limit=63 [ 2853.769184] attempt to access beyond end of device [ 2853.769192] loop3: rw=2049, want=144, limit=63 [ 2853.769224] attempt to access beyond end of device [ 2853.769232] loop3: rw=2049, want=145, limit=63 [ 2853.769303] attempt to access beyond end of device [ 2853.769312] loop3: rw=2049, want=161, limit=63 [ 2853.782008] attempt to access beyond end of device [ 2853.782023] loop3: rw=2049, want=4713, limit=63 [ 2853.808730] attempt to access beyond end of device [ 2853.808743] loop3: rw=2049, want=8809, limit=63 [ 2853.831239] attempt to access beyond end of device [ 2853.831254] loop3: rw=2049, want=12905, limit=63 [ 2853.842805] attempt to access beyond end of device [ 2853.842818] loop3: rw=2049, want=12929, limit=63 05:19:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendfile(r1, r2, 0x0, 0x800000080004103) 05:19:35 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:35 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:35 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\r\x00'}}, 0xfffffc41) 05:19:35 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x33000000, 0x4) 05:19:35 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:35 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:35 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2859.047204] attempt to access beyond end of device [ 2859.047220] loop3: rw=1, want=377, limit=63 05:19:36 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:19:36 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x34000000, 0x4) [ 2859.732240] attempt to access beyond end of device [ 2859.732257] loop3: rw=2049, want=78, limit=63 [ 2859.732281] buffer_io_error: 14 callbacks suppressed [ 2859.732291] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2859.732328] attempt to access beyond end of device [ 2859.732337] loop3: rw=2049, want=79, limit=63 [ 2859.732347] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2859.732380] attempt to access beyond end of device [ 2859.732389] loop3: rw=2049, want=80, limit=63 [ 2859.732399] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2859.732533] attempt to access beyond end of device [ 2859.732542] loop3: rw=2049, want=81, limit=63 [ 2859.732552] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2859.732598] attempt to access beyond end of device [ 2859.732608] loop3: rw=2049, want=130, limit=63 [ 2859.732619] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2859.732652] attempt to access beyond end of device [ 2859.732661] loop3: rw=2049, want=131, limit=63 [ 2859.732671] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2859.732703] attempt to access beyond end of device [ 2859.732712] loop3: rw=2049, want=132, limit=63 [ 2859.732723] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2859.732755] attempt to access beyond end of device [ 2859.732763] loop3: rw=2049, want=133, limit=63 [ 2859.732773] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2859.732806] attempt to access beyond end of device [ 2859.732815] loop3: rw=2049, want=142, limit=63 [ 2859.732825] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2859.732857] attempt to access beyond end of device [ 2859.732866] loop3: rw=2049, want=143, limit=63 [ 2859.732895] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2859.732928] attempt to access beyond end of device [ 2859.732938] loop3: rw=2049, want=144, limit=63 [ 2859.732974] attempt to access beyond end of device [ 2859.732983] loop3: rw=2049, want=145, limit=63 [ 2859.743246] attempt to access beyond end of device [ 2859.743267] loop3: rw=2049, want=161, limit=63 [ 2859.790523] attempt to access beyond end of device [ 2859.790538] loop3: rw=2049, want=4241, limit=63 [ 2860.386423] attempt to access beyond end of device [ 2860.386438] loop3: rw=1, want=477, limit=63 [ 2861.072192] attempt to access beyond end of device [ 2861.072207] loop3: rw=2049, want=78, limit=63 [ 2861.072251] attempt to access beyond end of device [ 2861.072262] loop3: rw=2049, want=79, limit=63 [ 2861.072299] attempt to access beyond end of device [ 2861.072309] loop3: rw=2049, want=80, limit=63 [ 2861.072362] attempt to access beyond end of device [ 2861.072371] loop3: rw=2049, want=81, limit=63 [ 2861.072422] attempt to access beyond end of device [ 2861.072431] loop3: rw=2049, want=114, limit=63 [ 2861.072468] attempt to access beyond end of device [ 2861.072477] loop3: rw=2049, want=115, limit=63 [ 2861.072513] attempt to access beyond end of device [ 2861.072522] loop3: rw=2049, want=116, limit=63 [ 2861.072558] attempt to access beyond end of device [ 2861.072573] loop3: rw=2049, want=117, limit=63 [ 2861.074946] attempt to access beyond end of device [ 2861.074959] loop3: rw=2049, want=130, limit=63 [ 2861.074997] attempt to access beyond end of device [ 2861.075007] loop3: rw=2049, want=131, limit=63 [ 2861.075045] attempt to access beyond end of device [ 2861.075055] loop3: rw=2049, want=132, limit=63 [ 2861.075091] attempt to access beyond end of device [ 2861.075101] loop3: rw=2049, want=133, limit=63 [ 2861.075195] attempt to access beyond end of device [ 2861.075205] loop3: rw=2049, want=157, limit=63 [ 2861.089662] attempt to access beyond end of device [ 2861.089676] loop3: rw=2049, want=4573, limit=63 [ 2861.114345] attempt to access beyond end of device [ 2861.114358] loop3: rw=2049, want=7221, limit=63 05:19:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendfile(r1, r2, 0x0, 0x800000080004103) 05:19:43 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000000e00"}}, 0xfffffc41) 05:19:43 executing program 5: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:43 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x35000000, 0x4) 05:19:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:19:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:19:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:19:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) dup(r0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:19:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:44 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:44 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2867.159137] attempt to access beyond end of device [ 2867.159152] loop3: rw=1, want=265, limit=63 [ 2867.856587] attempt to access beyond end of device [ 2867.856602] loop3: rw=2049, want=78, limit=63 [ 2867.856612] buffer_io_error: 14 callbacks suppressed [ 2867.856621] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2867.856660] attempt to access beyond end of device [ 2867.856669] loop3: rw=2049, want=79, limit=63 [ 2867.856680] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2867.856713] attempt to access beyond end of device [ 2867.856723] loop3: rw=2049, want=80, limit=63 [ 2867.856733] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2867.856767] attempt to access beyond end of device [ 2867.856776] loop3: rw=2049, want=81, limit=63 [ 2867.856786] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2867.856834] attempt to access beyond end of device [ 2867.856843] loop3: rw=2049, want=130, limit=63 [ 2867.856853] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2867.856887] attempt to access beyond end of device [ 2867.856896] loop3: rw=2049, want=131, limit=63 [ 2867.856907] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2867.856940] attempt to access beyond end of device [ 2867.856954] loop3: rw=2049, want=132, limit=63 [ 2867.858232] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2867.858280] attempt to access beyond end of device [ 2867.858291] loop3: rw=2049, want=133, limit=63 [ 2867.858302] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2867.858334] attempt to access beyond end of device [ 2867.858344] loop3: rw=2049, want=142, limit=63 [ 2867.858355] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2867.858389] attempt to access beyond end of device [ 2867.858398] loop3: rw=2049, want=143, limit=63 [ 2867.858409] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2867.858442] attempt to access beyond end of device [ 2867.858451] loop3: rw=2049, want=144, limit=63 [ 2867.858487] attempt to access beyond end of device [ 2867.858496] loop3: rw=2049, want=145, limit=63 [ 2867.858585] attempt to access beyond end of device [ 2867.858594] loop3: rw=2049, want=161, limit=63 [ 2867.889625] attempt to access beyond end of device [ 2867.889640] loop3: rw=2049, want=4361, limit=63 [ 2867.901393] attempt to access beyond end of device [ 2867.901405] loop3: rw=2049, want=4745, limit=63 05:19:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendfile(r1, r2, 0x0, 0x800000080004103) 05:19:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:50 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x36000000, 0x4) 05:19:50 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000000f00"}}, 0xfffffc41) 05:19:50 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:19:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2874.558453] attempt to access beyond end of device 05:19:51 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:51 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)) 05:19:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2874.600968] loop3: rw=1, want=441, limit=63 [ 2875.269301] attempt to access beyond end of device [ 2875.269316] loop3: rw=2049, want=78, limit=63 [ 2875.269327] buffer_io_error: 2 callbacks suppressed [ 2875.269336] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2875.269373] attempt to access beyond end of device [ 2875.269383] loop3: rw=2049, want=79, limit=63 [ 2875.269394] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2875.269432] attempt to access beyond end of device [ 2875.269442] loop3: rw=2049, want=80, limit=63 [ 2875.269453] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2875.269486] attempt to access beyond end of device [ 2875.269496] loop3: rw=2049, want=81, limit=63 [ 2875.269506] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2875.274995] attempt to access beyond end of device [ 2875.275008] loop3: rw=2049, want=130, limit=63 [ 2875.275021] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2875.275064] attempt to access beyond end of device [ 2875.275074] loop3: rw=2049, want=131, limit=63 [ 2875.275084] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2875.275120] attempt to access beyond end of device [ 2875.275186] loop3: rw=2049, want=132, limit=63 [ 2875.275196] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2875.275230] attempt to access beyond end of device [ 2875.275239] loop3: rw=2049, want=133, limit=63 [ 2875.275249] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2875.275281] attempt to access beyond end of device [ 2875.275290] loop3: rw=2049, want=142, limit=63 [ 2875.275298] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2875.279144] attempt to access beyond end of device [ 2875.279159] loop3: rw=2049, want=143, limit=63 [ 2875.279173] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2875.280269] attempt to access beyond end of device [ 2875.280282] loop3: rw=2049, want=144, limit=63 [ 2875.280329] attempt to access beyond end of device [ 2875.280340] loop3: rw=2049, want=145, limit=63 [ 2875.280424] attempt to access beyond end of device [ 2875.280434] loop3: rw=2049, want=161, limit=63 [ 2875.327063] attempt to access beyond end of device [ 2875.327076] loop3: rw=2049, want=4097, limit=63 05:19:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:19:58 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x0, &(0x7f0000000180)) 05:19:58 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001000"}}, 0xfffffc41) 05:19:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x37000000, 0x4) 05:19:58 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') socket$inet_icmp_raw(0x2, 0x3, 0x1) sendfile(r1, r2, 0x0, 0x800000080004103) 05:19:58 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x0, &(0x7f0000000180)) 05:19:58 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:19:58 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x0, &(0x7f0000000180)) 05:19:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:58 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x100000000000c333, 0x0) 05:19:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:19:58 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x100000000000c333, 0x0) [ 2881.852556] attempt to access beyond end of device [ 2881.852570] loop3: rw=1, want=469, limit=63 [ 2882.535649] attempt to access beyond end of device [ 2882.535663] loop3: rw=2049, want=78, limit=63 [ 2882.535673] buffer_io_error: 2 callbacks suppressed [ 2882.535681] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2882.535718] attempt to access beyond end of device [ 2882.535725] loop3: rw=2049, want=79, limit=63 [ 2882.535733] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2882.535758] attempt to access beyond end of device [ 2882.535764] loop3: rw=2049, want=80, limit=63 [ 2882.535772] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2882.535796] attempt to access beyond end of device [ 2882.535803] loop3: rw=2049, want=81, limit=63 [ 2882.535810] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2882.535853] attempt to access beyond end of device [ 2882.535862] loop3: rw=2049, want=114, limit=63 [ 2882.535873] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2882.535905] attempt to access beyond end of device [ 2882.535915] loop3: rw=2049, want=115, limit=63 [ 2882.535925] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2882.535957] attempt to access beyond end of device [ 2882.535966] loop3: rw=2049, want=116, limit=63 [ 2882.535977] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2882.536011] attempt to access beyond end of device [ 2882.536020] loop3: rw=2049, want=117, limit=63 [ 2882.536030] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2882.536063] attempt to access beyond end of device [ 2882.536072] loop3: rw=2049, want=130, limit=63 [ 2882.536083] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2882.536117] attempt to access beyond end of device [ 2882.536126] loop3: rw=2049, want=131, limit=63 [ 2882.536135] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2882.536167] attempt to access beyond end of device [ 2882.536176] loop3: rw=2049, want=132, limit=63 [ 2882.536210] attempt to access beyond end of device [ 2882.536219] loop3: rw=2049, want=133, limit=63 [ 2882.536302] attempt to access beyond end of device [ 2882.536312] loop3: rw=2049, want=157, limit=63 [ 2882.565691] attempt to access beyond end of device [ 2882.565713] loop3: rw=2049, want=4565, limit=63 [ 2882.582786] attempt to access beyond end of device [ 2882.582800] loop3: rw=2049, want=4965, limit=63 05:20:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) 05:20:05 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) io_setup(0x100000000000c333, 0x0) 05:20:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x38000000, 0x4) 05:20:05 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001100"}}, 0xfffffc41) 05:20:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:05 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:05 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:05 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:05 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:05 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 2888.907642] attempt to access beyond end of device [ 2888.907657] loop3: rw=1, want=593, limit=63 [ 2889.576047] attempt to access beyond end of device [ 2889.576062] loop3: rw=2049, want=78, limit=63 [ 2889.576075] buffer_io_error: 2 callbacks suppressed [ 2889.576084] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2889.576124] attempt to access beyond end of device [ 2889.576136] loop3: rw=2049, want=79, limit=63 [ 2889.576147] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2889.576181] attempt to access beyond end of device [ 2889.576192] loop3: rw=2049, want=80, limit=63 [ 2889.576203] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2889.576238] attempt to access beyond end of device [ 2889.576248] loop3: rw=2049, want=81, limit=63 [ 2889.576259] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2889.576309] attempt to access beyond end of device [ 2889.576319] loop3: rw=2049, want=130, limit=63 [ 2889.576331] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2889.576365] attempt to access beyond end of device [ 2889.576375] loop3: rw=2049, want=131, limit=63 [ 2889.576386] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2889.576421] attempt to access beyond end of device [ 2889.576430] loop3: rw=2049, want=132, limit=63 [ 2889.576440] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2889.576476] attempt to access beyond end of device [ 2889.576486] loop3: rw=2049, want=133, limit=63 [ 2889.576496] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2889.576531] attempt to access beyond end of device [ 2889.576541] loop3: rw=2049, want=142, limit=63 [ 2889.576551] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2889.576594] attempt to access beyond end of device [ 2889.576603] loop3: rw=2049, want=143, limit=63 [ 2889.576613] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2889.576647] attempt to access beyond end of device [ 2889.576657] loop3: rw=2049, want=144, limit=63 [ 2889.576697] attempt to access beyond end of device [ 2889.576707] loop3: rw=2049, want=145, limit=63 [ 2889.576790] attempt to access beyond end of device [ 2889.576800] loop3: rw=2049, want=161, limit=63 [ 2889.596913] attempt to access beyond end of device [ 2889.596928] loop3: rw=2049, want=4689, limit=63 [ 2889.599107] attempt to access beyond end of device [ 2889.830594] loop3: rw=2049, want=4753, limit=63 05:20:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) 05:20:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140), 0x0, 0x8}, {&(0x7f0000000180)="20165cfb7556d607cefb4439d15d711e95c37b468882859a3cbf67a9efa2dcfb260b93df45ebf71e0cd4c094fc141f5a9f5eccb0b6d14983ac211ec1affeebcd2f7bb97b180694d73e72266dc345e4f1abdbed129d451f93c8a2bdef1db38da0e59e100183fbe7ef1d761bea33882511ff06f6633c32732727482d68", 0x7c}, {&(0x7f0000000200)="029d1bb969f602b739e68f21b8426dab52f20e0df144e13f2bfe48b13c2de534281de4dbc2ac38cbc17126259eb682d6cad4ae00ad1a", 0x36, 0x5}, {&(0x7f0000000380)="2bd5338cfc1b8138aac492b2f6655b5975e0c553ac741038a35b1f4550128eebac90258e01f714030ee1bb18957a7a02ade9527011040161e9775b90e85617d4798f5625ec56fb5906f3785417eb960b702f8ed47593ff26d2e0dbe3ceed3018168140a4f51f214d9318820c45bf4ecd43aac8b3415c7e3610e6cf00608139c999b3829b276b4b134e3e3dc4577b3025f9a4dd97cad7203b3a1b4d1387dc6e72a0d68fe00a47bd70833c4d81321ba3a5b9b704b45059b2c79a118f33399f397d4305411a3a94bc12e141", 0xca, 0xd9}, {&(0x7f0000000480), 0x0, 0xf5d}, {&(0x7f00000004c0)="51f3ed14be36992df44557e05573e42a7c1b37d1f030654a6db372118333e8adea5d24df5f67e2e39505a243798b164318dd11143b68d432df836f51b1c1226c3a6a4fd64975df147bfaac134e8b11799469d65d0be33eeb9452450641bb795844cb38cc3b359a10c121c0b2ee6a50af65c4d2611ac4d943f6d8cb5bb5d27da68f07c6e65cfcdad1ae1ed1e0d3e630b262f734ee8af61e79b33ecc9cc7cd7154e642c264d2c20f0c9b6d0a4a0f4929d04ad01b376eb791d2", 0xb8, 0x400}], 0x1000000, &(0x7f0000000700)=ANY=[@ANYBLOB="646f74732c64656275672c646f74892c74696d655f6f66667365743d3078303030303030303030303030303261622c6e6f646f74732c6d6561737572652c736d61636b66736861743d2f6465762f6b766d002c61707072616973652c7375626a5f726f63723d30303030303030303030303030303030303033332c0000000000506f1b63f0fcbd71d2254dc0da8b9c429e"]) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) 05:20:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 05:20:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x39000000, 0x4) 05:20:12 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001200"}}, 0xfffffc41) 05:20:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) [ 2895.986272] attempt to access beyond end of device 05:20:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) [ 2896.027456] FAT-fs (loop4): Unrecognized mount option "dot‰" or missing value [ 2896.038784] loop3: rw=1, want=341, limit=63 05:20:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 05:20:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140), 0x0, 0x8}, {&(0x7f0000000180)="20165cfb7556d607cefb4439d15d711e95c37b468882859a3cbf67a9efa2dcfb260b93df45ebf71e0cd4c094fc141f5a9f5eccb0b6d14983ac211ec1affeebcd2f7bb97b180694d73e72266dc345e4f1abdbed129d451f93c8a2bdef1db38da0e59e100183fbe7ef1d761bea33882511ff06f6633c32732727482d68", 0x7c}, {&(0x7f0000000200)="029d1bb969f602b739e68f21b8426dab52f20e0df144e13f2bfe48b13c2de534281de4dbc2ac38cbc17126259eb682d6cad4ae00ad1a", 0x36, 0x5}, {&(0x7f0000000380)="2bd5338cfc1b8138aac492b2f6655b5975e0c553ac741038a35b1f4550128eebac90258e01f714030ee1bb18957a7a02ade9527011040161e9775b90e85617d4798f5625ec56fb5906f3785417eb960b702f8ed47593ff26d2e0dbe3ceed3018168140a4f51f214d9318820c45bf4ecd43aac8b3415c7e3610e6cf00608139c999b3829b276b4b134e3e3dc4577b3025f9a4dd97cad7203b3a1b4d1387dc6e72a0d68fe00a47bd70833c4d81321ba3a5b9b704b45059b2c79a118f33399f397d4305411a3a94bc12e141", 0xca, 0xd9}, {&(0x7f0000000480), 0x0, 0xf5d}, {&(0x7f00000004c0)="51f3ed14be36992df44557e05573e42a7c1b37d1f030654a6db372118333e8adea5d24df5f67e2e39505a243798b164318dd11143b68d432df836f51b1c1226c3a6a4fd64975df147bfaac134e8b11799469d65d0be33eeb9452450641bb795844cb38cc3b359a10c121c0b2ee6a50af65c4d2611ac4d943f6d8cb5bb5d27da68f07c6e65cfcdad1ae1ed1e0d3e630b262f734ee8af61e79b33ecc9cc7cd7154e642c264d2c20f0c9b6d0a4a0f4929d04ad01b376eb791d2", 0xb8, 0x400}], 0x1000000, &(0x7f0000000700)=ANY=[@ANYBLOB="646f74732c64656275672c646f74892c74696d655f6f66667365743d3078303030303030303030303030303261622c6e6f646f74732c6d6561737572652c736d61636b66736861743d2f6465762f6b766d002c61707072616973652c7375626a5f726f63723d30303030303030303030303030303030303033332c0000000000506f1b63f0fcbd71d2254dc0da8b9c429e"]) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) 05:20:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000080004103) 05:20:12 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 05:20:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 05:20:13 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) 05:20:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9}) [ 2896.681119] attempt to access beyond end of device [ 2896.723111] loop3: rw=2049, want=78, limit=63 [ 2896.760260] buffer_io_error: 2 callbacks suppressed [ 2896.760271] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2896.845291] attempt to access beyond end of device [ 2896.873997] loop3: rw=2049, want=79, limit=63 [ 2896.895000] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2896.919397] attempt to access beyond end of device [ 2896.924517] loop3: rw=2049, want=80, limit=63 [ 2896.929090] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2896.937213] attempt to access beyond end of device [ 2896.942927] loop3: rw=2049, want=81, limit=63 [ 2896.947504] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2896.956026] attempt to access beyond end of device [ 2896.961078] loop3: rw=2049, want=114, limit=63 [ 2896.965740] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2896.977068] attempt to access beyond end of device [ 2896.996788] loop3: rw=2049, want=115, limit=63 [ 2897.005997] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2897.022234] attempt to access beyond end of device [ 2897.035695] loop3: rw=2049, want=116, limit=63 [ 2897.046325] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2897.060452] attempt to access beyond end of device [ 2897.065462] loop3: rw=2049, want=117, limit=63 [ 2897.071877] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2897.079787] attempt to access beyond end of device [ 2897.086098] loop3: rw=2049, want=130, limit=63 [ 2897.092846] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2897.101475] attempt to access beyond end of device [ 2897.106484] loop3: rw=2049, want=131, limit=63 [ 2897.116678] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2897.125433] attempt to access beyond end of device [ 2897.137249] loop3: rw=2049, want=132, limit=63 [ 2897.147584] attempt to access beyond end of device [ 2897.158231] loop3: rw=2049, want=133, limit=63 [ 2897.169988] attempt to access beyond end of device [ 2897.180226] loop3: rw=2049, want=157, limit=63 [ 2897.200678] attempt to access beyond end of device [ 2897.225117] loop3: rw=2049, want=4005, limit=63 05:20:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x3a000000, 0x4) 05:20:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140), 0x0, 0x8}, {&(0x7f0000000180)="20165cfb7556d607cefb4439d15d711e95c37b468882859a3cbf67a9efa2dcfb260b93df45ebf71e0cd4c094fc141f5a9f5eccb0b6d14983ac211ec1affeebcd2f7bb97b180694d73e72266dc345e4f1abdbed129d451f93c8a2bdef1db38da0e59e100183fbe7ef1d761bea33882511ff06f6633c32732727482d68", 0x7c}, {&(0x7f0000000200)="029d1bb969f602b739e68f21b8426dab52f20e0df144e13f2bfe48b13c2de534281de4dbc2ac38cbc17126259eb682d6cad4ae00ad1a", 0x36, 0x5}, {&(0x7f0000000380)="2bd5338cfc1b8138aac492b2f6655b5975e0c553ac741038a35b1f4550128eebac90258e01f714030ee1bb18957a7a02ade9527011040161e9775b90e85617d4798f5625ec56fb5906f3785417eb960b702f8ed47593ff26d2e0dbe3ceed3018168140a4f51f214d9318820c45bf4ecd43aac8b3415c7e3610e6cf00608139c999b3829b276b4b134e3e3dc4577b3025f9a4dd97cad7203b3a1b4d1387dc6e72a0d68fe00a47bd70833c4d81321ba3a5b9b704b45059b2c79a118f33399f397d4305411a3a94bc12e141", 0xca, 0xd9}, {&(0x7f0000000480), 0x0, 0xf5d}, {&(0x7f00000004c0)="51f3ed14be36992df44557e05573e42a7c1b37d1f030654a6db372118333e8adea5d24df5f67e2e39505a243798b164318dd11143b68d432df836f51b1c1226c3a6a4fd64975df147bfaac134e8b11799469d65d0be33eeb9452450641bb795844cb38cc3b359a10c121c0b2ee6a50af65c4d2611ac4d943f6d8cb5bb5d27da68f07c6e65cfcdad1ae1ed1e0d3e630b262f734ee8af61e79b33ecc9cc7cd7154e642c264d2c20f0c9b6d0a4a0f4929d04ad01b376eb791d2", 0xb8, 0x400}], 0x1000000, &(0x7f0000000700)=ANY=[@ANYBLOB="646f74732c64656275672c646f74892c74696d655f6f66667365743d3078303030303030303030303030303261622c6e6f646f74732c6d6561737572652c736d61636b66736861743d2f6465762f6b766d002c61707072616973652c7375626a5f726f63723d30303030303030303030303030303030303033332c0000000000506f1b63f0fcbd71d2254dc0da8b9c429e"]) ioctl$DRM_IOCTL_SET_MASTER(r5, 0x641e) 05:20:13 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) 05:20:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9}) 05:20:13 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001300"}}, 0xfffffc41) 05:20:13 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9}) 05:20:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r1, 0x0, 0x800000080004103) [ 2897.473322] FAT-fs (loop4): Unrecognized mount option "dot‰" or missing value 05:20:14 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) 05:20:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140), 0x0, 0x8}, {&(0x7f0000000180)="20165cfb7556d607cefb4439d15d711e95c37b468882859a3cbf67a9efa2dcfb260b93df45ebf71e0cd4c094fc141f5a9f5eccb0b6d14983ac211ec1affeebcd2f7bb97b180694d73e72266dc345e4f1abdbed129d451f93c8a2bdef1db38da0e59e100183fbe7ef1d761bea33882511ff06f6633c32732727482d68", 0x7c}, {&(0x7f0000000200)="029d1bb969f602b739e68f21b8426dab52f20e0df144e13f2bfe48b13c2de534281de4dbc2ac38cbc17126259eb682d6cad4ae00ad1a", 0x36, 0x5}, {&(0x7f0000000380)="2bd5338cfc1b8138aac492b2f6655b5975e0c553ac741038a35b1f4550128eebac90258e01f714030ee1bb18957a7a02ade9527011040161e9775b90e85617d4798f5625ec56fb5906f3785417eb960b702f8ed47593ff26d2e0dbe3ceed3018168140a4f51f214d9318820c45bf4ecd43aac8b3415c7e3610e6cf00608139c999b3829b276b4b134e3e3dc4577b3025f9a4dd97cad7203b3a1b4d1387dc6e72a0d68fe00a47bd70833c4d81321ba3a5b9b704b45059b2c79a118f33399f397d4305411a3a94bc12e141", 0xca, 0xd9}, {&(0x7f0000000480), 0x0, 0xf5d}, {&(0x7f00000004c0)="51f3ed14be36992df44557e05573e42a7c1b37d1f030654a6db372118333e8adea5d24df5f67e2e39505a243798b164318dd11143b68d432df836f51b1c1226c3a6a4fd64975df147bfaac134e8b11799469d65d0be33eeb9452450641bb795844cb38cc3b359a10c121c0b2ee6a50af65c4d2611ac4d943f6d8cb5bb5d27da68f07c6e65cfcdad1ae1ed1e0d3e630b262f734ee8af61e79b33ecc9cc7cd7154e642c264d2c20f0c9b6d0a4a0f4929d04ad01b376eb791d2", 0xb8, 0x400}], 0x1000000, &(0x7f0000000700)=ANY=[@ANYBLOB="646f74732c64656275672c646f74892c74696d655f6f66667365743d3078303030303030303030303030303261622c6e6f646f74732c6d6561737572652c736d61636b66736861743d2f6465762f6b766d002c61707072616973652c7375626a5f726f63723d30303030303030303030303030303030303033332c0000000000506f1b63f0fcbd71d2254dc0da8b9c429e"]) 05:20:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2897.769229] attempt to access beyond end of device [ 2897.814405] loop3: rw=1, want=349, limit=63 [ 2897.936630] FAT-fs (loop4): Unrecognized mount option "dot‰" or missing value 05:20:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x3b000000, 0x4) 05:20:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r6, 0x80044dfd, &(0x7f0000000480)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:20:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:15 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:15 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001400"}}, 0xfffffc41) [ 2898.442553] attempt to access beyond end of device [ 2898.442568] loop3: rw=2049, want=78, limit=63 [ 2898.442613] attempt to access beyond end of device [ 2898.442624] loop3: rw=2049, want=79, limit=63 [ 2898.442661] attempt to access beyond end of device [ 2898.442670] loop3: rw=2049, want=80, limit=63 [ 2898.442704] attempt to access beyond end of device [ 2898.442714] loop3: rw=2049, want=81, limit=63 05:20:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2898.442763] attempt to access beyond end of device [ 2898.442773] loop3: rw=2049, want=114, limit=63 [ 2898.442809] attempt to access beyond end of device 05:20:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000480)) [ 2898.442828] loop3: rw=2049, want=115, limit=63 [ 2898.442865] attempt to access beyond end of device [ 2898.442875] loop3: rw=2049, want=116, limit=63 [ 2898.442911] attempt to access beyond end of device [ 2898.442921] loop3: rw=2049, want=117, limit=63 [ 2898.442957] attempt to access beyond end of device [ 2898.442967] loop3: rw=2049, want=130, limit=63 [ 2898.443003] attempt to access beyond end of device [ 2898.443012] loop3: rw=2049, want=131, limit=63 [ 2898.443048] attempt to access beyond end of device 05:20:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000480)) [ 2898.443058] loop3: rw=2049, want=132, limit=63 [ 2898.443094] attempt to access beyond end of device [ 2898.443103] loop3: rw=2049, want=133, limit=63 [ 2898.443186] attempt to access beyond end of device [ 2898.443195] loop3: rw=2049, want=157, limit=63 05:20:15 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2898.461178] attempt to access beyond end of device [ 2898.461194] loop3: rw=2049, want=3989, limit=63 [ 2898.938389] attempt to access beyond end of device [ 2898.938403] loop3: rw=1, want=465, limit=63 [ 2899.645263] attempt to access beyond end of device [ 2899.645279] loop3: rw=2049, want=78, limit=63 [ 2899.645321] attempt to access beyond end of device [ 2899.645332] loop3: rw=2049, want=79, limit=63 [ 2899.645366] attempt to access beyond end of device [ 2899.645375] loop3: rw=2049, want=80, limit=63 [ 2899.645409] attempt to access beyond end of device [ 2899.645418] loop3: rw=2049, want=81, limit=63 [ 2899.645466] attempt to access beyond end of device [ 2899.645476] loop3: rw=2049, want=130, limit=63 [ 2899.645511] attempt to access beyond end of device [ 2899.645519] loop3: rw=2049, want=131, limit=63 [ 2899.645556] attempt to access beyond end of device [ 2899.645566] loop3: rw=2049, want=132, limit=63 [ 2899.645598] attempt to access beyond end of device [ 2899.645606] loop3: rw=2049, want=133, limit=63 [ 2899.645641] attempt to access beyond end of device [ 2899.645650] loop3: rw=2049, want=142, limit=63 [ 2899.645886] attempt to access beyond end of device [ 2899.645898] loop3: rw=2049, want=143, limit=63 [ 2899.645938] attempt to access beyond end of device [ 2899.645947] loop3: rw=2049, want=144, limit=63 [ 2899.645979] attempt to access beyond end of device [ 2899.645988] loop3: rw=2049, want=145, limit=63 [ 2899.646072] attempt to access beyond end of device [ 2899.646081] loop3: rw=2049, want=161, limit=63 [ 2899.657024] attempt to access beyond end of device [ 2899.657037] loop3: rw=2049, want=4561, limit=63 [ 2899.664684] attempt to access beyond end of device [ 2899.664698] loop3: rw=2049, want=4833, limit=63 05:20:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) 05:20:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000480)) 05:20:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:21 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001500"}}, 0xfffffc41) 05:20:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x3c000000, 0x4) 05:20:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b2f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:20:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b30, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b31, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2905.534297] attempt to access beyond end of device [ 2905.534312] loop3: rw=1, want=453, limit=63 [ 2906.215911] attempt to access beyond end of device [ 2906.215926] loop3: rw=2049, want=78, limit=63 [ 2906.215938] buffer_io_error: 26 callbacks suppressed [ 2906.215947] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2906.215985] attempt to access beyond end of device [ 2906.215997] loop3: rw=2049, want=79, limit=63 [ 2906.216007] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2906.216041] attempt to access beyond end of device [ 2906.216050] loop3: rw=2049, want=80, limit=63 [ 2906.216062] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2906.216095] attempt to access beyond end of device [ 2906.216105] loop3: rw=2049, want=81, limit=63 [ 2906.216115] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2906.216163] attempt to access beyond end of device [ 2906.216173] loop3: rw=2049, want=114, limit=63 [ 2906.216183] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2906.216214] attempt to access beyond end of device [ 2906.216224] loop3: rw=2049, want=115, limit=63 [ 2906.216235] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2906.216278] attempt to access beyond end of device [ 2906.216288] loop3: rw=2049, want=116, limit=63 [ 2906.216299] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2906.216333] attempt to access beyond end of device [ 2906.216342] loop3: rw=2049, want=117, limit=63 [ 2906.216353] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2906.216386] attempt to access beyond end of device [ 2906.216395] loop3: rw=2049, want=130, limit=63 [ 2906.216406] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2906.216437] attempt to access beyond end of device [ 2906.216447] loop3: rw=2049, want=131, limit=63 [ 2906.216457] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2906.230746] attempt to access beyond end of device [ 2906.230760] loop3: rw=2049, want=132, limit=63 [ 2906.230806] attempt to access beyond end of device [ 2906.230817] loop3: rw=2049, want=133, limit=63 [ 2906.230907] attempt to access beyond end of device [ 2906.230917] loop3: rw=2049, want=157, limit=63 [ 2906.249244] attempt to access beyond end of device [ 2906.249264] loop3: rw=2049, want=3621, limit=63 05:20:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r1, r2, 0x0, 0x800000080004103) 05:20:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:20:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b32, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x3d000000, 0x4) 05:20:28 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001600"}}, 0xfffffc41) 05:20:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b33, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b34, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:20:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b35, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:29 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b36, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2912.254097] attempt to access beyond end of device [ 2912.254110] loop3: rw=1, want=405, limit=63 [ 2912.933186] attempt to access beyond end of device [ 2912.933202] loop3: rw=2049, want=78, limit=63 [ 2912.933214] buffer_io_error: 2 callbacks suppressed [ 2912.933224] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2912.933262] attempt to access beyond end of device [ 2912.933272] loop3: rw=2049, want=79, limit=63 [ 2912.933283] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2912.933316] attempt to access beyond end of device [ 2912.933326] loop3: rw=2049, want=80, limit=63 [ 2912.933337] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2912.933370] attempt to access beyond end of device [ 2912.933379] loop3: rw=2049, want=81, limit=63 [ 2912.933389] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2912.933436] attempt to access beyond end of device [ 2912.933445] loop3: rw=2049, want=114, limit=63 [ 2912.933456] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2912.933500] attempt to access beyond end of device [ 2912.933509] loop3: rw=2049, want=115, limit=63 [ 2912.933517] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2912.933548] attempt to access beyond end of device [ 2912.933557] loop3: rw=2049, want=116, limit=63 [ 2912.933567] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2912.933599] attempt to access beyond end of device [ 2912.933608] loop3: rw=2049, want=117, limit=63 [ 2912.933618] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2912.933649] attempt to access beyond end of device [ 2912.933658] loop3: rw=2049, want=130, limit=63 [ 2912.933668] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2912.933699] attempt to access beyond end of device [ 2912.933708] loop3: rw=2049, want=131, limit=63 [ 2912.933723] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2912.937328] attempt to access beyond end of device [ 2912.937339] loop3: rw=2049, want=132, limit=63 [ 2912.937379] attempt to access beyond end of device [ 2912.937388] loop3: rw=2049, want=133, limit=63 [ 2912.937478] attempt to access beyond end of device [ 2912.937488] loop3: rw=2049, want=157, limit=63 [ 2912.962905] attempt to access beyond end of device [ 2912.962918] loop3: rw=2049, want=3621, limit=63 05:20:35 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:20:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b37, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:20:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x3e000000, 0x4) 05:20:35 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001700"}}, 0xfffffc41) 05:20:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:20:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:35 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b3d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2918.796459] attempt to access beyond end of device [ 2918.796474] loop3: rw=1, want=393, limit=63 [ 2919.493773] attempt to access beyond end of device [ 2919.493789] loop3: rw=2049, want=78, limit=63 [ 2919.493801] buffer_io_error: 2 callbacks suppressed [ 2919.493810] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2919.493848] attempt to access beyond end of device [ 2919.493858] loop3: rw=2049, want=79, limit=63 [ 2919.493868] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2919.493902] attempt to access beyond end of device [ 2919.493911] loop3: rw=2049, want=80, limit=63 [ 2919.493922] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2919.493963] attempt to access beyond end of device [ 2919.493990] loop3: rw=2049, want=81, limit=63 [ 2919.494001] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2919.494052] attempt to access beyond end of device [ 2919.494061] loop3: rw=2049, want=130, limit=63 [ 2919.494073] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2919.494107] attempt to access beyond end of device [ 2919.494116] loop3: rw=2049, want=131, limit=63 [ 2919.494128] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2919.494162] attempt to access beyond end of device [ 2919.494183] loop3: rw=2049, want=132, limit=63 [ 2919.494193] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2919.494226] attempt to access beyond end of device [ 2919.494236] loop3: rw=2049, want=133, limit=63 [ 2919.494246] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2919.494277] attempt to access beyond end of device [ 2919.494287] loop3: rw=2049, want=142, limit=63 [ 2919.494297] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2919.494331] attempt to access beyond end of device [ 2919.494340] loop3: rw=2049, want=143, limit=63 [ 2919.494350] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2919.494385] attempt to access beyond end of device [ 2919.494400] loop3: rw=2049, want=144, limit=63 [ 2919.497921] attempt to access beyond end of device [ 2919.497939] loop3: rw=2049, want=145, limit=63 [ 2919.498125] attempt to access beyond end of device [ 2919.498136] loop3: rw=2049, want=161, limit=63 [ 2919.523713] attempt to access beyond end of device [ 2919.523728] loop3: rw=2049, want=4137, limit=63 05:20:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:20:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:20:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x3f000000, 0x4) 05:20:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:42 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001800"}}, 0xfffffc41) 05:20:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b41, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:20:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:20:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2926.047702] attempt to access beyond end of device 05:20:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 2926.047718] loop3: rw=1, want=349, limit=63 [ 2926.775801] attempt to access beyond end of device [ 2926.775816] loop3: rw=2049, want=78, limit=63 [ 2926.775829] buffer_io_error: 2 callbacks suppressed [ 2926.775838] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2926.775878] attempt to access beyond end of device [ 2926.775888] loop3: rw=2049, want=79, limit=63 [ 2926.775899] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2926.775934] attempt to access beyond end of device [ 2926.775944] loop3: rw=2049, want=80, limit=63 [ 2926.775955] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2926.775989] attempt to access beyond end of device [ 2926.775999] loop3: rw=2049, want=81, limit=63 [ 2926.776010] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2926.776068] attempt to access beyond end of device [ 2926.776078] loop3: rw=2049, want=114, limit=63 [ 2926.776092] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2926.790660] attempt to access beyond end of device [ 2926.790671] loop3: rw=2049, want=115, limit=63 [ 2926.790684] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2926.791985] attempt to access beyond end of device [ 2926.791998] loop3: rw=2049, want=116, limit=63 [ 2926.792011] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2926.792051] attempt to access beyond end of device [ 2926.792061] loop3: rw=2049, want=117, limit=63 [ 2926.792072] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2926.792106] attempt to access beyond end of device [ 2926.792116] loop3: rw=2049, want=130, limit=63 [ 2926.792127] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2926.792159] attempt to access beyond end of device [ 2926.792168] loop3: rw=2049, want=131, limit=63 [ 2926.792179] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2926.792232] attempt to access beyond end of device [ 2926.792241] loop3: rw=2049, want=132, limit=63 [ 2926.792277] attempt to access beyond end of device [ 2926.792287] loop3: rw=2049, want=133, limit=63 [ 2926.792379] attempt to access beyond end of device [ 2926.792389] loop3: rw=2049, want=157, limit=63 [ 2926.837941] attempt to access beyond end of device [ 2926.837959] loop3: rw=2049, want=4445, limit=63 [ 2926.863826] attempt to access beyond end of device [ 2926.863840] loop3: rw=2049, want=4669, limit=63 05:20:49 executing program 0: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:20:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x40000000, 0x4) 05:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:20:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:49 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001900"}}, 0xfffffc41) 05:20:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b45, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:20:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:49 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:49 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) [ 2932.788404] attempt to access beyond end of device [ 2932.788418] loop3: rw=1, want=425, limit=63 [ 2933.488772] attempt to access beyond end of device [ 2933.488793] loop3: rw=2049, want=78, limit=63 [ 2933.488803] buffer_io_error: 2 callbacks suppressed [ 2933.488812] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2933.488847] attempt to access beyond end of device [ 2933.488856] loop3: rw=2049, want=79, limit=63 [ 2933.488866] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2933.488896] attempt to access beyond end of device [ 2933.488905] loop3: rw=2049, want=80, limit=63 [ 2933.488914] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2933.488951] attempt to access beyond end of device [ 2933.488960] loop3: rw=2049, want=81, limit=63 [ 2933.488970] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2933.489012] attempt to access beyond end of device [ 2933.489021] loop3: rw=2049, want=130, limit=63 [ 2933.489030] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2933.489060] attempt to access beyond end of device [ 2933.489613] loop3: rw=2049, want=131, limit=63 [ 2933.607046] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2933.607092] attempt to access beyond end of device [ 2933.607102] loop3: rw=2049, want=132, limit=63 [ 2933.607112] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2933.607153] attempt to access beyond end of device [ 2933.607162] loop3: rw=2049, want=133, limit=63 [ 2933.607176] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2933.614835] attempt to access beyond end of device [ 2933.614848] loop3: rw=2049, want=142, limit=63 [ 2933.614860] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2933.614894] attempt to access beyond end of device [ 2933.614904] loop3: rw=2049, want=143, limit=63 [ 2933.614914] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2933.614953] attempt to access beyond end of device [ 2933.614963] loop3: rw=2049, want=144, limit=63 [ 2933.615000] attempt to access beyond end of device [ 2933.615010] loop3: rw=2049, want=145, limit=63 [ 2933.615103] attempt to access beyond end of device [ 2933.615113] loop3: rw=2049, want=161, limit=63 [ 2933.621142] attempt to access beyond end of device [ 2933.621156] loop3: rw=2049, want=4049, limit=63 05:20:55 executing program 0: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:20:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:20:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b48, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:55 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x48000000, 0x4) 05:20:55 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001a00"}}, 0xfffffc41) 05:20:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b49, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:20:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:20:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:20:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2939.371398] attempt to access beyond end of device [ 2939.371413] loop3: rw=1, want=361, limit=63 [ 2940.039528] attempt to access beyond end of device [ 2940.039544] loop3: rw=2049, want=78, limit=63 [ 2940.039556] buffer_io_error: 2 callbacks suppressed [ 2940.039565] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2940.039604] attempt to access beyond end of device [ 2940.039615] loop3: rw=2049, want=79, limit=63 [ 2940.039626] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2940.039661] attempt to access beyond end of device [ 2940.039671] loop3: rw=2049, want=80, limit=63 [ 2940.039682] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2940.039717] attempt to access beyond end of device [ 2940.039727] loop3: rw=2049, want=81, limit=63 [ 2940.039736] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2940.039782] attempt to access beyond end of device [ 2940.039792] loop3: rw=2049, want=130, limit=63 [ 2940.039802] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2940.039837] attempt to access beyond end of device [ 2940.039845] loop3: rw=2049, want=131, limit=63 [ 2940.039855] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2940.039888] attempt to access beyond end of device [ 2940.039898] loop3: rw=2049, want=132, limit=63 [ 2940.039908] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2940.039940] attempt to access beyond end of device [ 2940.039950] loop3: rw=2049, want=133, limit=63 [ 2940.039960] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2940.039994] attempt to access beyond end of device [ 2940.040004] loop3: rw=2049, want=142, limit=63 [ 2940.040015] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2940.040048] attempt to access beyond end of device [ 2940.040058] loop3: rw=2049, want=143, limit=63 [ 2940.040069] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2940.040102] attempt to access beyond end of device [ 2940.040111] loop3: rw=2049, want=144, limit=63 [ 2940.042445] attempt to access beyond end of device [ 2940.042456] loop3: rw=2049, want=145, limit=63 [ 2940.042542] attempt to access beyond end of device [ 2940.042552] loop3: rw=2049, want=161, limit=63 [ 2940.060391] attempt to access beyond end of device [ 2940.283343] loop3: rw=2049, want=4457, limit=63 [ 2940.285863] attempt to access beyond end of device [ 2940.295690] loop3: rw=2049, want=4697, limit=63 05:21:02 executing program 0: mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:21:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:02 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001b00"}}, 0xfffffc41) 05:21:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x4c000000, 0x4) 05:21:02 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b4e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:21:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b52, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:21:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b60, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2946.409976] attempt to access beyond end of device [ 2946.409991] loop3: rw=1, want=365, limit=63 [ 2947.100026] attempt to access beyond end of device [ 2947.100041] loop3: rw=2049, want=78, limit=63 [ 2947.100053] buffer_io_error: 2 callbacks suppressed [ 2947.100062] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2947.100100] attempt to access beyond end of device [ 2947.100108] loop3: rw=2049, want=79, limit=63 [ 2947.100119] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2947.100153] attempt to access beyond end of device [ 2947.100162] loop3: rw=2049, want=80, limit=63 [ 2947.100172] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2947.100205] attempt to access beyond end of device [ 2947.100214] loop3: rw=2049, want=81, limit=63 [ 2947.100224] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2947.100282] attempt to access beyond end of device [ 2947.100291] loop3: rw=2049, want=114, limit=63 [ 2947.100302] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2947.100334] attempt to access beyond end of device [ 2947.100344] loop3: rw=2049, want=115, limit=63 [ 2947.100354] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2947.100389] attempt to access beyond end of device [ 2947.100398] loop3: rw=2049, want=116, limit=63 [ 2947.100407] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2947.100440] attempt to access beyond end of device [ 2947.100449] loop3: rw=2049, want=117, limit=63 [ 2947.100459] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2947.100511] attempt to access beyond end of device [ 2947.100521] loop3: rw=2049, want=130, limit=63 [ 2947.100531] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2947.100571] attempt to access beyond end of device [ 2947.100686] loop3: rw=2049, want=131, limit=63 [ 2947.100822] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2947.100860] attempt to access beyond end of device [ 2947.100870] loop3: rw=2049, want=132, limit=63 [ 2947.100907] attempt to access beyond end of device [ 2947.100917] loop3: rw=2049, want=133, limit=63 [ 2947.101004] attempt to access beyond end of device [ 2947.101014] loop3: rw=2049, want=157, limit=63 [ 2947.135702] attempt to access beyond end of device [ 2947.135716] loop3: rw=2049, want=3909, limit=63 05:21:09 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 05:21:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x60000000, 0x4) 05:21:09 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001c00"}}, 0xfffffc41) 05:21:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b61, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b62, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2953.020753] attempt to access beyond end of device [ 2953.020769] loop3: rw=1, want=409, limit=63 05:21:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b63, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b64, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2953.707582] attempt to access beyond end of device [ 2953.707599] loop3: rw=2049, want=78, limit=63 [ 2953.707611] buffer_io_error: 2 callbacks suppressed [ 2953.707620] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2953.707657] attempt to access beyond end of device [ 2953.707666] loop3: rw=2049, want=79, limit=63 [ 2953.707677] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2953.707709] attempt to access beyond end of device [ 2953.707719] loop3: rw=2049, want=80, limit=63 [ 2953.707729] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2953.707951] attempt to access beyond end of device [ 2953.712314] loop3: rw=2049, want=81, limit=63 [ 2953.712329] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2953.712397] attempt to access beyond end of device [ 2953.712408] loop3: rw=2049, want=130, limit=63 [ 2953.712419] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2953.712454] attempt to access beyond end of device [ 2953.712464] loop3: rw=2049, want=131, limit=63 [ 2953.712483] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2953.712519] attempt to access beyond end of device [ 2953.712528] loop3: rw=2049, want=132, limit=63 [ 2953.712539] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2953.712598] attempt to access beyond end of device [ 2953.712607] loop3: rw=2049, want=133, limit=63 [ 2953.712619] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2953.712659] attempt to access beyond end of device [ 2953.712669] loop3: rw=2049, want=142, limit=63 [ 2953.712680] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2953.712714] attempt to access beyond end of device [ 2953.712724] loop3: rw=2049, want=143, limit=63 [ 2953.712735] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2953.712801] attempt to access beyond end of device [ 2953.712823] loop3: rw=2049, want=144, limit=63 [ 2953.712889] attempt to access beyond end of device [ 2953.712902] loop3: rw=2049, want=145, limit=63 [ 2953.712996] attempt to access beyond end of device [ 2953.713005] loop3: rw=2049, want=161, limit=63 [ 2953.741870] attempt to access beyond end of device [ 2953.741912] loop3: rw=2049, want=4505, limit=63 [ 2953.760727] attempt to access beyond end of device [ 2953.760749] loop3: rw=2049, want=5177, limit=63 05:21:11 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b65, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x0, &(0x7f0000000180)=0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x68000000, 0x4) 05:21:11 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001d00"}}, 0xfffffc41) 05:21:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b66, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2955.063194] attempt to access beyond end of device 05:21:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2955.063208] loop3: rw=1, want=329, limit=63 05:21:11 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b67, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2955.718938] attempt to access beyond end of device [ 2955.718955] loop3: rw=2049, want=78, limit=63 [ 2955.719001] attempt to access beyond end of device [ 2955.719011] loop3: rw=2049, want=79, limit=63 [ 2955.719045] attempt to access beyond end of device [ 2955.719054] loop3: rw=2049, want=80, limit=63 [ 2955.719090] attempt to access beyond end of device [ 2955.719099] loop3: rw=2049, want=81, limit=63 [ 2955.719150] attempt to access beyond end of device [ 2955.719160] loop3: rw=2049, want=130, limit=63 [ 2955.719196] attempt to access beyond end of device [ 2955.719205] loop3: rw=2049, want=131, limit=63 [ 2955.719242] attempt to access beyond end of device [ 2955.719251] loop3: rw=2049, want=132, limit=63 [ 2955.719288] attempt to access beyond end of device [ 2955.719297] loop3: rw=2049, want=133, limit=63 [ 2955.719334] attempt to access beyond end of device [ 2955.719344] loop3: rw=2049, want=142, limit=63 [ 2955.719380] attempt to access beyond end of device [ 2955.719390] loop3: rw=2049, want=143, limit=63 [ 2955.719426] attempt to access beyond end of device [ 2955.719436] loop3: rw=2049, want=144, limit=63 [ 2955.719472] attempt to access beyond end of device [ 2955.719482] loop3: rw=2049, want=145, limit=63 [ 2955.722052] attempt to access beyond end of device [ 2955.722067] loop3: rw=2049, want=161, limit=63 [ 2955.738624] attempt to access beyond end of device [ 2955.738638] loop3: rw=2049, want=4425, limit=63 [ 2955.748791] attempt to access beyond end of device [ 2955.748803] loop3: rw=2049, want=4577, limit=63 05:21:14 executing program 0: mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b68, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x6c000000, 0x4) 05:21:14 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001e00"}}, 0xfffffc41) 05:21:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b69, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2958.083151] attempt to access beyond end of device [ 2958.083165] loop3: rw=1, want=381, limit=63 05:21:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:14 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2958.776361] attempt to access beyond end of device [ 2958.776384] loop3: rw=2049, want=78, limit=63 [ 2958.776395] buffer_io_error: 14 callbacks suppressed [ 2958.776403] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2958.776439] attempt to access beyond end of device [ 2958.776448] loop3: rw=2049, want=79, limit=63 [ 2958.776458] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2958.776487] attempt to access beyond end of device [ 2958.776496] loop3: rw=2049, want=80, limit=63 [ 2958.776506] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2958.776540] attempt to access beyond end of device [ 2958.776548] loop3: rw=2049, want=81, limit=63 [ 2958.776558] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2958.776600] attempt to access beyond end of device [ 2958.776608] loop3: rw=2049, want=114, limit=63 [ 2958.776618] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2958.776651] attempt to access beyond end of device [ 2958.776660] loop3: rw=2049, want=115, limit=63 [ 2958.776670] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2958.776699] attempt to access beyond end of device [ 2958.776708] loop3: rw=2049, want=116, limit=63 [ 2958.776718] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2958.776748] attempt to access beyond end of device [ 2958.776756] loop3: rw=2049, want=117, limit=63 [ 2958.776766] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2958.776795] attempt to access beyond end of device [ 2958.776804] loop3: rw=2049, want=130, limit=63 [ 2958.776814] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2958.776844] attempt to access beyond end of device [ 2958.776853] loop3: rw=2049, want=131, limit=63 [ 2958.776862] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2958.776892] attempt to access beyond end of device [ 2958.776901] loop3: rw=2049, want=132, limit=63 [ 2958.776933] attempt to access beyond end of device [ 2958.776941] loop3: rw=2049, want=133, limit=63 [ 2958.777018] attempt to access beyond end of device [ 2958.777027] loop3: rw=2049, want=157, limit=63 [ 2958.781093] attempt to access beyond end of device [ 2959.011176] loop3: rw=2049, want=4477, limit=63 [ 2959.014614] attempt to access beyond end of device [ 2959.014628] loop3: rw=2049, want=5605, limit=63 05:21:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:21:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x74000000, 0x4) 05:21:17 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {"0000001f00"}}, 0xfffffc41) 05:21:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:21:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:17 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b6d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2960.837672] attempt to access beyond end of device [ 2960.837686] loop3: rw=1, want=537, limit=63 05:21:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:21:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2961.507854] attempt to access beyond end of device [ 2961.507868] loop3: rw=2049, want=78, limit=63 [ 2961.507911] attempt to access beyond end of device [ 2961.507922] loop3: rw=2049, want=79, limit=63 [ 2961.507959] attempt to access beyond end of device [ 2961.507969] loop3: rw=2049, want=80, limit=63 [ 2961.508005] attempt to access beyond end of device [ 2961.508014] loop3: rw=2049, want=81, limit=63 [ 2961.508063] attempt to access beyond end of device [ 2961.508073] loop3: rw=2049, want=130, limit=63 [ 2961.508110] attempt to access beyond end of device [ 2961.508119] loop3: rw=2049, want=131, limit=63 [ 2961.508163] attempt to access beyond end of device [ 2961.508186] loop3: rw=2049, want=132, limit=63 [ 2961.508221] attempt to access beyond end of device [ 2961.508230] loop3: rw=2049, want=133, limit=63 [ 2961.508265] attempt to access beyond end of device [ 2961.508274] loop3: rw=2049, want=142, limit=63 [ 2961.508310] attempt to access beyond end of device [ 2961.508319] loop3: rw=2049, want=143, limit=63 [ 2961.508354] attempt to access beyond end of device [ 2961.508363] loop3: rw=2049, want=144, limit=63 [ 2961.508398] attempt to access beyond end of device [ 2961.508408] loop3: rw=2049, want=145, limit=63 [ 2961.511946] attempt to access beyond end of device [ 2961.511960] loop3: rw=2049, want=161, limit=63 [ 2961.542403] attempt to access beyond end of device [ 2961.542416] loop3: rw=2049, want=4633, limit=63 [ 2961.555591] attempt to access beyond end of device [ 2961.555604] loop3: rw=2049, want=5249, limit=63 05:21:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b70, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x7a000000, 0x4) 05:21:20 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00 \x00'}}, 0xfffffc41) 05:21:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b71, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2963.799079] attempt to access beyond end of device [ 2963.799094] loop3: rw=1, want=429, limit=63 [ 2964.455518] attempt to access beyond end of device [ 2964.455533] loop3: rw=2049, want=78, limit=63 [ 2964.455544] buffer_io_error: 14 callbacks suppressed [ 2964.455571] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2964.455611] attempt to access beyond end of device [ 2964.455621] loop3: rw=2049, want=79, limit=63 [ 2964.455631] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2964.455664] attempt to access beyond end of device [ 2964.455674] loop3: rw=2049, want=80, limit=63 [ 2964.455685] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2964.455721] attempt to access beyond end of device [ 2964.455731] loop3: rw=2049, want=81, limit=63 [ 2964.455742] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2964.455790] attempt to access beyond end of device [ 2964.455800] loop3: rw=2049, want=114, limit=63 [ 2964.455811] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2964.455926] attempt to access beyond end of device [ 2964.455936] loop3: rw=2049, want=115, limit=63 [ 2964.455998] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2964.456088] attempt to access beyond end of device [ 2964.456098] loop3: rw=2049, want=116, limit=63 [ 2964.456109] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2964.456204] attempt to access beyond end of device [ 2964.456263] loop3: rw=2049, want=117, limit=63 [ 2964.456275] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2964.456445] attempt to access beyond end of device [ 2964.456456] loop3: rw=2049, want=130, limit=63 [ 2964.456468] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2964.456574] attempt to access beyond end of device [ 2964.462085] loop3: rw=2049, want=131, limit=63 [ 2964.462102] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2964.462151] attempt to access beyond end of device [ 2964.462161] loop3: rw=2049, want=132, limit=63 [ 2964.462196] attempt to access beyond end of device [ 2964.462205] loop3: rw=2049, want=133, limit=63 [ 2964.462290] attempt to access beyond end of device [ 2964.462299] loop3: rw=2049, want=157, limit=63 [ 2964.478316] attempt to access beyond end of device [ 2964.478332] loop3: rw=2049, want=4525, limit=63 [ 2964.481267] attempt to access beyond end of device [ 2964.481279] loop3: rw=2049, want=5149, limit=63 05:21:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0xf0ffffff, 0x4) 05:21:22 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00!\x00'}}, 0xfffffc41) 05:21:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4bfb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2966.390343] attempt to access beyond end of device 05:21:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2966.390359] loop3: rw=1, want=373, limit=63 05:21:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2967.071632] attempt to access beyond end of device [ 2967.071649] loop3: rw=2049, want=78, limit=63 [ 2967.071698] attempt to access beyond end of device [ 2967.071709] loop3: rw=2049, want=79, limit=63 [ 2967.071745] attempt to access beyond end of device [ 2967.071755] loop3: rw=2049, want=80, limit=63 [ 2967.071792] attempt to access beyond end of device [ 2967.071802] loop3: rw=2049, want=81, limit=63 [ 2967.071852] attempt to access beyond end of device [ 2967.071862] loop3: rw=2049, want=114, limit=63 [ 2967.071898] attempt to access beyond end of device [ 2967.071908] loop3: rw=2049, want=115, limit=63 [ 2967.071944] attempt to access beyond end of device [ 2967.071953] loop3: rw=2049, want=116, limit=63 [ 2967.071989] attempt to access beyond end of device [ 2967.071999] loop3: rw=2049, want=117, limit=63 [ 2967.072034] attempt to access beyond end of device [ 2967.072043] loop3: rw=2049, want=130, limit=63 [ 2967.084144] attempt to access beyond end of device [ 2967.084157] loop3: rw=2049, want=131, limit=63 [ 2967.084218] attempt to access beyond end of device [ 2967.084229] loop3: rw=2049, want=132, limit=63 [ 2967.084277] attempt to access beyond end of device [ 2967.084286] loop3: rw=2049, want=133, limit=63 [ 2967.084374] attempt to access beyond end of device [ 2967.084384] loop3: rw=2049, want=157, limit=63 [ 2967.108074] attempt to access beyond end of device [ 2967.108085] loop3: rw=2049, want=4469, limit=63 [ 2967.119740] attempt to access beyond end of device [ 2967.119754] loop3: rw=2049, want=4533, limit=63 05:21:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, 0x0, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:21:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0xf4ffffff, 0x4) 05:21:25 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\"\x00'}}, 0xfffffc41) 05:21:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 05:21:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, 0x0, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:25 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 2969.162362] attempt to access beyond end of device 05:21:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, 0x0, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2969.162378] loop3: rw=1, want=633, limit=63 [ 2969.838547] attempt to access beyond end of device [ 2969.838561] loop3: rw=2049, want=78, limit=63 [ 2969.838573] buffer_io_error: 14 callbacks suppressed [ 2969.838582] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2969.838615] attempt to access beyond end of device [ 2969.838624] loop3: rw=2049, want=79, limit=63 [ 2969.838633] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2969.838663] attempt to access beyond end of device [ 2969.838673] loop3: rw=2049, want=80, limit=63 [ 2969.838682] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2969.838713] attempt to access beyond end of device [ 2969.838723] loop3: rw=2049, want=81, limit=63 [ 2969.838733] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2969.838781] attempt to access beyond end of device [ 2969.838790] loop3: rw=2049, want=130, limit=63 [ 2969.838801] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2969.838834] attempt to access beyond end of device [ 2969.838844] loop3: rw=2049, want=131, limit=63 [ 2969.838855] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2969.838897] attempt to access beyond end of device [ 2969.838906] loop3: rw=2049, want=132, limit=63 [ 2969.838917] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2969.838951] attempt to access beyond end of device [ 2969.838962] loop3: rw=2049, want=133, limit=63 [ 2969.838978] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2969.839128] attempt to access beyond end of device [ 2969.839139] loop3: rw=2049, want=142, limit=63 [ 2969.839150] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2969.839187] attempt to access beyond end of device [ 2969.839197] loop3: rw=2049, want=143, limit=63 [ 2969.839208] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2969.839242] attempt to access beyond end of device [ 2969.839251] loop3: rw=2049, want=144, limit=63 [ 2969.839287] attempt to access beyond end of device [ 2969.839297] loop3: rw=2049, want=145, limit=63 [ 2969.839382] attempt to access beyond end of device [ 2969.839391] loop3: rw=2049, want=161, limit=63 [ 2969.865517] attempt to access beyond end of device [ 2969.865533] loop3: rw=2049, want=4729, limit=63 [ 2969.885986] attempt to access beyond end of device [ 2969.886000] loop3: rw=2049, want=6729, limit=63 05:21:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:28 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:21:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0xffffff7f, 0x4) 05:21:28 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00#\x00'}}, 0xfffffc41) 05:21:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:28 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:21:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x540f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:28 executing program 4: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 2972.137097] attempt to access beyond end of device 05:21:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5410, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2972.137114] loop3: rw=1, want=445, limit=63 [ 2972.813772] attempt to access beyond end of device [ 2972.813788] loop3: rw=2049, want=78, limit=63 [ 2972.813832] attempt to access beyond end of device [ 2972.813841] loop3: rw=2049, want=79, limit=63 [ 2972.813878] attempt to access beyond end of device [ 2972.813888] loop3: rw=2049, want=80, limit=63 [ 2972.813926] attempt to access beyond end of device [ 2972.813936] loop3: rw=2049, want=81, limit=63 [ 2972.813986] attempt to access beyond end of device [ 2972.813996] loop3: rw=2049, want=114, limit=63 [ 2972.814035] attempt to access beyond end of device [ 2972.814045] loop3: rw=2049, want=115, limit=63 [ 2972.814082] attempt to access beyond end of device [ 2972.814092] loop3: rw=2049, want=116, limit=63 [ 2972.827339] attempt to access beyond end of device [ 2972.827354] loop3: rw=2049, want=117, limit=63 [ 2972.827403] attempt to access beyond end of device [ 2972.827413] loop3: rw=2049, want=130, limit=63 [ 2972.827452] attempt to access beyond end of device [ 2972.827463] loop3: rw=2049, want=131, limit=63 [ 2972.827499] attempt to access beyond end of device [ 2972.827509] loop3: rw=2049, want=132, limit=63 [ 2972.827546] attempt to access beyond end of device [ 2972.827556] loop3: rw=2049, want=133, limit=63 [ 2972.827644] attempt to access beyond end of device [ 2972.827654] loop3: rw=2049, want=157, limit=63 [ 2972.849158] attempt to access beyond end of device [ 2972.849173] loop3: rw=2049, want=4541, limit=63 [ 2972.867833] attempt to access beyond end of device [ 2972.867848] loop3: rw=2049, want=6173, limit=63 05:21:31 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5412, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0xfffffff0, 0x4) 05:21:31 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00$\x00'}}, 0xfffffc41) 05:21:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5413, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:31 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2974.964816] attempt to access beyond end of device [ 2974.964831] loop3: rw=1, want=233, limit=63 [ 2975.697403] attempt to access beyond end of device [ 2975.697417] loop3: rw=2049, want=78, limit=63 [ 2975.697430] buffer_io_error: 14 callbacks suppressed [ 2975.697439] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2975.697480] attempt to access beyond end of device [ 2975.697489] loop3: rw=2049, want=79, limit=63 [ 2975.697500] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2975.697537] attempt to access beyond end of device [ 2975.697548] loop3: rw=2049, want=80, limit=63 [ 2975.697559] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2975.697596] attempt to access beyond end of device [ 2975.697606] loop3: rw=2049, want=81, limit=63 [ 2975.697617] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2975.698849] attempt to access beyond end of device [ 2975.698862] loop3: rw=2049, want=130, limit=63 [ 2975.698875] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2975.698913] attempt to access beyond end of device [ 2975.698923] loop3: rw=2049, want=131, limit=63 [ 2975.698934] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2975.698969] attempt to access beyond end of device [ 2975.698985] loop3: rw=2049, want=132, limit=63 [ 2975.698997] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2975.699039] attempt to access beyond end of device [ 2975.699049] loop3: rw=2049, want=133, limit=63 [ 2975.699059] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2975.699093] attempt to access beyond end of device [ 2975.699103] loop3: rw=2049, want=142, limit=63 [ 2975.699114] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2975.699149] attempt to access beyond end of device [ 2975.699158] loop3: rw=2049, want=143, limit=63 [ 2975.699169] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2975.699203] attempt to access beyond end of device [ 2975.699213] loop3: rw=2049, want=144, limit=63 [ 2975.699249] attempt to access beyond end of device [ 2975.699259] loop3: rw=2049, want=145, limit=63 [ 2975.699347] attempt to access beyond end of device [ 2975.699357] loop3: rw=2049, want=161, limit=63 [ 2975.729812] attempt to access beyond end of device [ 2975.729827] loop3: rw=2049, want=4329, limit=63 [ 2975.764311] attempt to access beyond end of device [ 2975.764327] loop3: rw=2049, want=6553, limit=63 05:21:34 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:21:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5415, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0xfffffff4, 0x4) 05:21:34 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00%\x00'}}, 0xfffffc41) 05:21:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5416, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:21:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:34 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 05:21:34 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5418, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2978.025523] attempt to access beyond end of device [ 2978.025537] loop3: rw=1, want=293, limit=63 [ 2978.725644] attempt to access beyond end of device [ 2978.725659] loop3: rw=2049, want=78, limit=63 [ 2978.725701] attempt to access beyond end of device [ 2978.725711] loop3: rw=2049, want=79, limit=63 [ 2978.725746] attempt to access beyond end of device [ 2978.725755] loop3: rw=2049, want=80, limit=63 [ 2978.725797] attempt to access beyond end of device [ 2978.725810] loop3: rw=2049, want=81, limit=63 [ 2978.725859] attempt to access beyond end of device [ 2978.725873] loop3: rw=2049, want=114, limit=63 [ 2978.725907] attempt to access beyond end of device [ 2978.725917] loop3: rw=2049, want=115, limit=63 [ 2978.725952] attempt to access beyond end of device [ 2978.725961] loop3: rw=2049, want=116, limit=63 [ 2978.725996] attempt to access beyond end of device [ 2978.726005] loop3: rw=2049, want=117, limit=63 [ 2978.726039] attempt to access beyond end of device [ 2978.726048] loop3: rw=2049, want=130, limit=63 [ 2978.726087] attempt to access beyond end of device [ 2978.726096] loop3: rw=2049, want=131, limit=63 [ 2978.726131] attempt to access beyond end of device [ 2978.726144] loop3: rw=2049, want=132, limit=63 [ 2978.727693] attempt to access beyond end of device [ 2978.727711] loop3: rw=2049, want=133, limit=63 [ 2978.727816] attempt to access beyond end of device [ 2978.727827] loop3: rw=2049, want=157, limit=63 [ 2978.747344] attempt to access beyond end of device [ 2978.747360] loop3: rw=2049, want=4389, limit=63 [ 2978.767256] attempt to access beyond end of device [ 2978.767272] loop3: rw=2049, want=6285, limit=63 05:21:37 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x1000000000000, 0x4) 05:21:37 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00&\x00'}}, 0xfffffc41) 05:21:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2981.009160] attempt to access beyond end of device 05:21:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2981.045407] loop3: rw=1, want=297, limit=63 05:21:37 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2981.706317] attempt to access beyond end of device [ 2981.706331] loop3: rw=2049, want=78, limit=63 [ 2981.706343] buffer_io_error: 14 callbacks suppressed [ 2981.706352] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2981.706392] attempt to access beyond end of device [ 2981.706402] loop3: rw=2049, want=79, limit=63 [ 2981.706413] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2981.706449] attempt to access beyond end of device [ 2981.706458] loop3: rw=2049, want=80, limit=63 [ 2981.706469] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2981.706504] attempt to access beyond end of device [ 2981.706514] loop3: rw=2049, want=81, limit=63 [ 2981.706525] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2981.706575] attempt to access beyond end of device [ 2981.706585] loop3: rw=2049, want=130, limit=63 [ 2981.706596] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2981.706632] attempt to access beyond end of device [ 2981.706641] loop3: rw=2049, want=131, limit=63 [ 2981.706652] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2981.706686] attempt to access beyond end of device [ 2981.706696] loop3: rw=2049, want=132, limit=63 [ 2981.706706] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2981.706741] attempt to access beyond end of device [ 2981.706751] loop3: rw=2049, want=133, limit=63 [ 2981.706762] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2981.706796] attempt to access beyond end of device [ 2981.706812] loop3: rw=2049, want=142, limit=63 [ 2981.706823] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2981.706859] attempt to access beyond end of device [ 2981.706869] loop3: rw=2049, want=143, limit=63 [ 2981.706879] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2981.706914] attempt to access beyond end of device [ 2981.706924] loop3: rw=2049, want=144, limit=63 [ 2981.706961] attempt to access beyond end of device [ 2981.706971] loop3: rw=2049, want=145, limit=63 [ 2981.710502] attempt to access beyond end of device [ 2981.710515] loop3: rw=2049, want=161, limit=63 [ 2981.732336] attempt to access beyond end of device [ 2981.732351] loop3: rw=2049, want=4153, limit=63 05:21:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x541e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x4040000) 05:21:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2000000000000, 0x4) 05:21:40 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00\'\x00'}}, 0xfffffc41) 05:21:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x4040000) 05:21:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5421, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2984.377152] attempt to access beyond end of device [ 2984.413041] loop3: rw=1, want=309, limit=63 05:21:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5422, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, 0x0) sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:41 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x4040000) 05:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:41 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5423, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) [ 2984.984803] attempt to access beyond end of device [ 2985.005143] loop3: rw=2049, want=78, limit=63 [ 2985.022026] attempt to access beyond end of device [ 2985.047761] loop3: rw=2049, want=79, limit=63 [ 2985.068888] attempt to access beyond end of device [ 2985.093176] loop3: rw=2049, want=80, limit=63 [ 2985.111399] attempt to access beyond end of device [ 2985.121793] loop3: rw=2049, want=81, limit=63 [ 2985.149485] attempt to access beyond end of device [ 2985.161745] loop3: rw=2049, want=114, limit=63 [ 2985.171770] attempt to access beyond end of device [ 2985.182111] loop3: rw=2049, want=115, limit=63 [ 2985.191853] attempt to access beyond end of device [ 2985.201810] loop3: rw=2049, want=116, limit=63 [ 2985.208202] attempt to access beyond end of device [ 2985.230387] loop3: rw=2049, want=117, limit=63 [ 2985.237492] attempt to access beyond end of device [ 2985.249442] loop3: rw=2049, want=130, limit=63 [ 2985.267227] attempt to access beyond end of device [ 2985.283743] loop3: rw=2049, want=131, limit=63 [ 2985.300665] attempt to access beyond end of device [ 2985.312506] loop3: rw=2049, want=132, limit=63 [ 2985.329777] attempt to access beyond end of device [ 2985.363539] loop3: rw=2049, want=133, limit=63 [ 2985.381223] attempt to access beyond end of device [ 2985.401218] loop3: rw=2049, want=157, limit=63 [ 2985.434518] attempt to access beyond end of device 05:21:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x100000000000000, 0x4) 05:21:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5424, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 05:21:42 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00(\x00'}}, 0xfffffc41) [ 2985.454801] loop3: rw=2049, want=2909, limit=63 05:21:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5425, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x800000080004103) 05:21:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5427, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2985.962119] attempt to access beyond end of device [ 2986.009854] loop3: rw=1, want=373, limit=63 [ 2986.658247] attempt to access beyond end of device [ 2986.675966] loop3: rw=2049, want=78, limit=63 [ 2986.692884] attempt to access beyond end of device [ 2986.710501] loop3: rw=2049, want=79, limit=63 [ 2986.727358] buffer_io_error: 15 callbacks suppressed [ 2986.727368] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2986.770539] attempt to access beyond end of device [ 2986.793007] loop3: rw=2049, want=80, limit=63 [ 2986.803730] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2986.820401] attempt to access beyond end of device [ 2986.836103] loop3: rw=2049, want=81, limit=63 [ 2986.847326] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2986.864961] attempt to access beyond end of device [ 2986.877024] loop3: rw=2049, want=114, limit=63 [ 2986.887460] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2986.904386] attempt to access beyond end of device [ 2986.916177] loop3: rw=2049, want=115, limit=63 [ 2986.928053] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2986.951992] attempt to access beyond end of device [ 2986.970869] loop3: rw=2049, want=116, limit=63 [ 2986.981418] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2986.995554] attempt to access beyond end of device [ 2987.000584] loop3: rw=2049, want=117, limit=63 [ 2987.009664] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2987.020972] attempt to access beyond end of device [ 2987.029416] loop3: rw=2049, want=130, limit=63 [ 2987.038989] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2987.050077] attempt to access beyond end of device [ 2987.058346] loop3: rw=2049, want=131, limit=63 [ 2987.063004] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2987.078143] attempt to access beyond end of device [ 2987.088810] loop3: rw=2049, want=132, limit=63 [ 2987.104420] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2987.130327] attempt to access beyond end of device [ 2987.147204] loop3: rw=2049, want=133, limit=63 [ 2987.162070] attempt to access beyond end of device [ 2987.181113] loop3: rw=2049, want=157, limit=63 [ 2987.199308] attempt to access beyond end of device [ 2987.204709] loop3: rw=2049, want=4469, limit=63 [ 2987.218001] attempt to access beyond end of device 05:21:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x200000000000000, 0x4) 05:21:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 05:21:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5428, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:43 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:43 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00)\x00'}}, 0xfffffc41) [ 2987.223009] loop3: rw=2049, want=8565, limit=63 [ 2987.238344] attempt to access beyond end of device [ 2987.249263] loop3: rw=2049, want=9949, limit=63 05:21:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5429, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 05:21:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:44 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4040000) 05:21:44 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5437, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2988.140854] attempt to access beyond end of device [ 2988.157447] loop3: rw=1, want=541, limit=63 [ 2988.850750] attempt to access beyond end of device [ 2988.860928] loop3: rw=2049, want=78, limit=63 [ 2988.865922] attempt to access beyond end of device [ 2988.870953] loop3: rw=2049, want=79, limit=63 [ 2988.875743] attempt to access beyond end of device [ 2988.880803] loop3: rw=2049, want=80, limit=63 [ 2988.886491] attempt to access beyond end of device [ 2988.891542] loop3: rw=2049, want=81, limit=63 [ 2988.896828] attempt to access beyond end of device [ 2988.901888] loop3: rw=2049, want=114, limit=63 [ 2988.906738] attempt to access beyond end of device [ 2988.911792] loop3: rw=2049, want=115, limit=63 [ 2988.918728] attempt to access beyond end of device [ 2988.925960] loop3: rw=2049, want=116, limit=63 [ 2988.938534] attempt to access beyond end of device [ 2988.948390] loop3: rw=2049, want=117, limit=63 [ 2988.956500] attempt to access beyond end of device [ 2988.961534] loop3: rw=2049, want=130, limit=63 [ 2988.971985] attempt to access beyond end of device [ 2988.982624] loop3: rw=2049, want=131, limit=63 [ 2988.991866] attempt to access beyond end of device [ 2989.003617] loop3: rw=2049, want=132, limit=63 [ 2989.014997] attempt to access beyond end of device [ 2989.026094] loop3: rw=2049, want=133, limit=63 [ 2989.037593] attempt to access beyond end of device [ 2989.048590] loop3: rw=2049, want=157, limit=63 [ 2989.074377] attempt to access beyond end of device [ 2989.090639] loop3: rw=2049, want=4637, limit=63 [ 2989.122755] attempt to access beyond end of device [ 2989.141493] loop3: rw=2049, want=8733, limit=63 [ 2989.179306] attempt to access beyond end of device [ 2989.199765] loop3: rw=2049, want=12829, limit=63 05:21:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x300000000000000, 0x4) 05:21:45 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, 0xffffffffffffffff, 0x0, 0x800000080004103) 05:21:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4040000) [ 2989.224762] attempt to access beyond end of device [ 2989.238151] loop3: rw=2049, want=13781, limit=63 05:21:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:45 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5441, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:45 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00*\x00'}}, 0xfffffc41) 05:21:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5450, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 05:21:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x4040000) 05:21:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5451, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) [ 2990.192566] attempt to access beyond end of device [ 2990.229704] loop3: rw=1, want=493, limit=63 [ 2990.906781] attempt to access beyond end of device [ 2990.917521] loop3: rw=2049, want=78, limit=63 [ 2990.934098] attempt to access beyond end of device [ 2990.940348] loop3: rw=2049, want=79, limit=63 [ 2990.959687] attempt to access beyond end of device [ 2990.977471] loop3: rw=2049, want=80, limit=63 [ 2990.992081] attempt to access beyond end of device [ 2990.999371] loop3: rw=2049, want=81, limit=63 [ 2991.009138] attempt to access beyond end of device [ 2991.016500] loop3: rw=2049, want=114, limit=63 [ 2991.021360] attempt to access beyond end of device [ 2991.034716] loop3: rw=2049, want=115, limit=63 [ 2991.039586] attempt to access beyond end of device [ 2991.050463] loop3: rw=2049, want=116, limit=63 [ 2991.057020] attempt to access beyond end of device [ 2991.062166] loop3: rw=2049, want=117, limit=63 [ 2991.072687] attempt to access beyond end of device [ 2991.079643] loop3: rw=2049, want=130, limit=63 [ 2991.089616] attempt to access beyond end of device [ 2991.097320] loop3: rw=2049, want=131, limit=63 [ 2991.102161] attempt to access beyond end of device [ 2991.115136] loop3: rw=2049, want=132, limit=63 [ 2991.120007] attempt to access beyond end of device [ 2991.130030] loop3: rw=2049, want=133, limit=63 [ 2991.138848] attempt to access beyond end of device [ 2991.148426] loop3: rw=2049, want=157, limit=63 [ 2991.161434] attempt to access beyond end of device [ 2991.170914] loop3: rw=2049, want=4589, limit=63 [ 2991.191031] attempt to access beyond end of device [ 2991.198181] loop3: rw=2049, want=8685, limit=63 05:21:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x400000000000000, 0x4) [ 2991.215720] attempt to access beyond end of device [ 2991.220886] loop3: rw=2049, want=12325, limit=63 05:21:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:21:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:47 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5452, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x0) 05:21:47 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00+\x00'}}, 0xfffffc41) 05:21:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:21:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x545d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:48 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x4040000) 05:21:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:48 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5460, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 2992.118284] attempt to access beyond end of device [ 2992.137860] loop3: rw=1, want=677, limit=63 [ 2992.833291] attempt to access beyond end of device [ 2992.838265] loop3: rw=2049, want=78, limit=63 [ 2992.873157] buffer_io_error: 25 callbacks suppressed [ 2992.873168] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2992.909284] attempt to access beyond end of device [ 2992.928640] loop3: rw=2049, want=79, limit=63 [ 2992.935244] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2992.968296] attempt to access beyond end of device [ 2992.988663] loop3: rw=2049, want=80, limit=63 [ 2992.993356] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2993.001105] attempt to access beyond end of device [ 2993.026965] loop3: rw=2049, want=81, limit=63 [ 2993.039235] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2993.059266] attempt to access beyond end of device [ 2993.070425] loop3: rw=2049, want=114, limit=63 [ 2993.080965] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2993.103393] attempt to access beyond end of device [ 2993.115846] loop3: rw=2049, want=115, limit=63 [ 2993.128001] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2993.146540] attempt to access beyond end of device [ 2993.159077] loop3: rw=2049, want=116, limit=63 [ 2993.170899] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2993.190107] attempt to access beyond end of device [ 2993.203351] loop3: rw=2049, want=117, limit=63 [ 2993.213601] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2993.231779] attempt to access beyond end of device [ 2993.243604] loop3: rw=2049, want=130, limit=63 [ 2993.252510] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2993.271148] attempt to access beyond end of device [ 2993.286983] loop3: rw=2049, want=131, limit=63 [ 2993.295406] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2993.322879] attempt to access beyond end of device [ 2993.327816] loop3: rw=2049, want=132, limit=63 [ 2993.332439] attempt to access beyond end of device [ 2993.352602] loop3: rw=2049, want=133, limit=63 [ 2993.357309] attempt to access beyond end of device [ 2993.362245] loop3: rw=2049, want=157, limit=63 [ 2993.388240] attempt to access beyond end of device [ 2993.403537] loop3: rw=2049, want=4773, limit=63 [ 2993.425164] attempt to access beyond end of device [ 2993.430107] loop3: rw=2049, want=8869, limit=63 05:21:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x500000000000000, 0x4) 05:21:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5600, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:50 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00,\x00'}}, 0xfffffc41) 05:21:50 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2993.441446] attempt to access beyond end of device [ 2993.449504] loop3: rw=2049, want=11749, limit=63 05:21:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:50 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:50 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "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"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) [ 2994.222319] attempt to access beyond end of device [ 2994.259087] loop3: rw=1, want=357, limit=63 [ 2994.955259] attempt to access beyond end of device [ 2994.960288] loop3: rw=2049, want=78, limit=63 [ 2994.966076] attempt to access beyond end of device [ 2994.971092] loop3: rw=2049, want=79, limit=63 [ 2994.976836] attempt to access beyond end of device [ 2994.981841] loop3: rw=2049, want=80, limit=63 [ 2994.987911] attempt to access beyond end of device [ 2994.993461] loop3: rw=2049, want=81, limit=63 [ 2995.004252] attempt to access beyond end of device [ 2995.014324] loop3: rw=2049, want=114, limit=63 [ 2995.023868] attempt to access beyond end of device [ 2995.028919] loop3: rw=2049, want=115, limit=63 [ 2995.035128] attempt to access beyond end of device [ 2995.040132] loop3: rw=2049, want=116, limit=63 [ 2995.045792] attempt to access beyond end of device [ 2995.050802] loop3: rw=2049, want=117, limit=63 [ 2995.058369] attempt to access beyond end of device [ 2995.063988] loop3: rw=2049, want=130, limit=63 [ 2995.068708] attempt to access beyond end of device [ 2995.074729] loop3: rw=2049, want=131, limit=63 [ 2995.079442] attempt to access beyond end of device [ 2995.085487] loop3: rw=2049, want=132, limit=63 [ 2995.090180] attempt to access beyond end of device [ 2995.096244] loop3: rw=2049, want=133, limit=63 [ 2995.101000] attempt to access beyond end of device [ 2995.107008] loop3: rw=2049, want=157, limit=63 [ 2995.117146] attempt to access beyond end of device [ 2995.122176] loop3: rw=2049, want=4453, limit=63 [ 2995.135470] attempt to access beyond end of device [ 2995.140505] loop3: rw=2049, want=8549, limit=63 [ 2995.160299] attempt to access beyond end of device [ 2995.171998] loop3: rw=2049, want=12645, limit=63 [ 2995.190412] attempt to access beyond end of device [ 2995.204299] loop3: rw=2049, want=13685, limit=63 05:21:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:51 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x4e, "07aa34058358e8c0bfbb1134a9030e856e7939eec9823e5bd438a753b41a235b0c0707607d5bb91523409ecb8b03455a5e7acda6caba15e65be69354ec9bb2f18a2d45302e8a53469f0e0b36f47394e8da047bc373508dc6eef27d6f9215572944c22930aca30d39e8a696f3974c41e532fa7e47b93f4c1737bc1f0148b2cb50023672524e9006fdf4561135b826fb8696d8709f5a47c5cd354157a61c5d3c8e48c70ef555113aab14c2ed975e3dcfe9312741ab6dc58bda0af17804a78565b59761c2165f80c33d2a0ba4669f96d283b09fdc71eb07d01c5de7167a4f878d953d5db658c9cd44bba609144617cd773bddf38c92e14a5a6b23c7e54bcb7b2c3e3a171329f1597bb06b723949cceb2fd72e8e37d456bec3c9e6ba3ba852d0d9c977e23c28f83265295b6e12eba0a900bd422699a93413d36cde3950f320a8252e698d7d45f11113ae3d7b4aa7cc09cc75f9e38f33eb1ed4cb2edda3ae44c4e80323c328a259db62addd5cdb66f548ccdd3c4cf30ce2cfee97ab343f0d6000a1d08a519510d5f95ddec1b49a6132e790a782d215887c9201344e877967f88faac087ce517478d7382c7f2574c09a72996a9b2991b275262a3211b8ae897b9316e5382062f8d5f4425bcf5e322a12d98060ed9501597e12e51788cf44838eb0def4f35f24a496d14b14120061fe74d0945f229f7c08f1535011d024aaf55e1b2da7"}) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000080)="06e01ab893cee81c6dc42c5babfa13cf910091e0fe26f900a61afe22ed7f1a87e12dd0fdf652f39b3aa8dd711b7ba0772a21e782c489e5f5f068f87334e94be8218775cbf03ea81f51b8c787bc81b7e4b539367e84a531082ec24ab80eabfe076af5421cea1207efab529bddd221f10081b72f5aabc08be776ad5a4d21ed475e62b881d8baa5f46143b7a22ee7bee56b9274fff0109b9613abf86d26bba453e33b33ae2d893ab977c7c5bc91b2d4ed9262a2cc4acc8a63d8b297e3a63c5871c0cacf12d6f2d5e19bfcd0d42d858062222c804822911445e1db4af39617ac85e2", 0xe0, 0x5, 0x0, 0x1}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000001}, 0x4040000) 05:21:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5603, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:51 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4b61, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x600000000000000, 0x4) 05:21:51 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00-\x00'}}, 0xfffffc41) 05:21:51 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5605, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000280)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:21:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5607, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={r3, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={r3, 0x9, 0x0, 0x2, 0x5c20}, &(0x7f0000000680)=0x18) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x10000) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000480)) 05:21:52 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5608, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2996.323990] attempt to access beyond end of device [ 2996.324005] loop3: rw=1, want=437, limit=63 05:21:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x700000000000000, 0x4) 05:21:53 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:53 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x5609, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2997.049017] attempt to access beyond end of device [ 2997.049033] loop3: rw=2049, want=78, limit=63 [ 2997.049085] attempt to access beyond end of device [ 2997.049097] loop3: rw=2049, want=79, limit=63 [ 2997.049136] attempt to access beyond end of device [ 2997.049146] loop3: rw=2049, want=80, limit=63 [ 2997.049189] attempt to access beyond end of device [ 2997.049199] loop3: rw=2049, want=81, limit=63 [ 2997.049249] attempt to access beyond end of device [ 2997.049258] loop3: rw=2049, want=114, limit=63 [ 2997.049294] attempt to access beyond end of device [ 2997.049304] loop3: rw=2049, want=115, limit=63 [ 2997.049342] attempt to access beyond end of device [ 2997.049351] loop3: rw=2049, want=116, limit=63 [ 2997.049388] attempt to access beyond end of device [ 2997.049397] loop3: rw=2049, want=117, limit=63 [ 2997.049434] attempt to access beyond end of device [ 2997.049444] loop3: rw=2049, want=130, limit=63 [ 2997.049486] attempt to access beyond end of device [ 2997.049495] loop3: rw=2049, want=131, limit=63 [ 2997.049530] attempt to access beyond end of device [ 2997.049539] loop3: rw=2049, want=132, limit=63 [ 2997.049572] attempt to access beyond end of device [ 2997.049581] loop3: rw=2049, want=133, limit=63 [ 2997.052022] attempt to access beyond end of device [ 2997.052036] loop3: rw=2049, want=157, limit=63 [ 2997.066881] attempt to access beyond end of device [ 2997.066898] loop3: rw=2049, want=4533, limit=63 [ 2997.094505] attempt to access beyond end of device [ 2997.094520] loop3: rw=2049, want=8629, limit=63 [ 2997.109707] attempt to access beyond end of device [ 2997.109723] loop3: rw=2049, want=10893, limit=63 [ 2997.630648] attempt to access beyond end of device [ 2997.630662] loop3: rw=1, want=709, limit=63 05:21:54 executing program 0 (fault-call:4 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:54 executing program 5 (fault-call:4 fault-nth:0): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:21:54 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00.\x00'}}, 0xfffffc41) 05:21:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080), 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2998.295707] FAULT_INJECTION: forcing a failure. [ 2998.295707] name failslab, interval 1, probability 0, space 0, times 0 05:21:54 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2998.352899] attempt to access beyond end of device [ 2998.388015] FAULT_INJECTION: forcing a failure. [ 2998.388015] name failslab, interval 1, probability 0, space 0, times 0 [ 2998.401601] CPU: 1 PID: 25970 Comm: syz-executor.5 Not tainted 4.19.128-syzkaller #0 [ 2998.403053] loop3: rw=2049, want=78, limit=63 [ 2998.409494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2998.409538] Call Trace: [ 2998.425967] dump_stack+0x1fc/0x2fe [ 2998.429609] should_fail.cold+0xa/0x14 [ 2998.433505] ? setup_fault_attr+0x200/0x200 [ 2998.437845] __should_failslab+0x115/0x180 [ 2998.442085] should_failslab+0x5/0xf [ 2998.445799] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 2998.446058] buffer_io_error: 26 callbacks suppressed [ 2998.446066] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 2998.450478] alloc_pipe_info+0xb7/0x3e0 [ 2998.450501] splice_direct_to_actor+0x6df/0x8d0 [ 2998.450520] ? __inode_security_revalidate+0xd3/0x120 [ 2998.450536] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2998.481924] ? avc_policy_seqno+0x9/0x70 [ 2998.485998] ? selinux_file_permission+0x87/0x520 [ 2998.489955] attempt to access beyond end of device [ 2998.490843] ? do_splice_to+0x160/0x160 [ 2998.490861] ? security_file_permission+0x84/0x220 [ 2998.490884] do_splice_direct+0x1a8/0x270 [ 2998.508827] ? splice_direct_to_actor+0x8d0/0x8d0 [ 2998.512871] loop3: rw=2049, want=79, limit=63 [ 2998.513682] ? rcu_read_lock_sched_held+0x10a/0x130 [ 2998.523154] ? rcu_sync_lockdep_assert+0x69/0xa0 [ 2998.527921] do_sendfile+0x549/0xc10 [ 2998.531651] ? __se_compat_sys_pwritev2+0x90/0x90 [ 2998.531693] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 2998.536491] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 2998.536514] __se_sys_sendfile64+0x147/0x160 [ 2998.536529] ? __se_sys_sendfile+0x180/0x180 [ 2998.536556] do_syscall_64+0xf9/0x620 [ 2998.536572] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2998.536586] RIP: 0033:0x45ca59 [ 2998.570102] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2998.573821] attempt to access beyond end of device [ 2998.589003] RSP: 002b:00007f5c8795bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2998.589017] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 2998.589026] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 2998.589034] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2998.589043] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000006 [ 2998.589051] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007f5c8795c6d4 [ 2998.642220] CPU: 0 PID: 25983 Comm: syz-executor.0 Not tainted 4.19.128-syzkaller #0 [ 2998.650115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2998.659468] Call Trace: [ 2998.662065] dump_stack+0x1fc/0x2fe [ 2998.665920] should_fail.cold+0xa/0x14 [ 2998.669821] ? setup_fault_attr+0x200/0x200 [ 2998.674178] __should_failslab+0x115/0x180 [ 2998.678432] should_failslab+0x5/0xf [ 2998.682150] kmem_cache_alloc_trace+0x2a0/0x3a0 [ 2998.686830] alloc_pipe_info+0xb7/0x3e0 [ 2998.690839] splice_direct_to_actor+0x6df/0x8d0 [ 2998.695519] ? __inode_security_revalidate+0xd3/0x120 [ 2998.700718] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2998.705561] ? avc_policy_seqno+0x9/0x70 [ 2998.709628] ? selinux_file_permission+0x87/0x520 [ 2998.714477] ? do_splice_to+0x160/0x160 [ 2998.718545] ? security_file_permission+0x84/0x220 [ 2998.723489] do_splice_direct+0x1a8/0x270 [ 2998.727642] ? splice_direct_to_actor+0x8d0/0x8d0 [ 2998.732493] ? security_file_permission+0x84/0x220 [ 2998.737516] do_sendfile+0x549/0xc10 [ 2998.741243] ? __se_compat_sys_pwritev2+0x90/0x90 [ 2998.746089] ? vfs_write+0x393/0x540 [ 2998.749818] __se_sys_sendfile64+0x147/0x160 [ 2998.754229] ? __se_sys_sendfile+0x180/0x180 [ 2998.758654] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 2998.763673] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2998.768427] ? trace_hardirqs_off_caller+0x69/0x210 [ 2998.773448] ? do_syscall_64+0x21/0x620 [ 2998.777433] do_syscall_64+0xf9/0x620 [ 2998.781347] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2998.786537] RIP: 0033:0x45ca59 [ 2998.789732] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2998.808636] RSP: 002b:00007f305bd27c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2998.816607] RAX: ffffffffffffffda RBX: 00000000004fcea0 RCX: 000000000045ca59 [ 2998.823983] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2998.831251] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 05:21:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080), 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2998.838519] R10: 0800000080004103 R11: 0000000000000246 R12: 0000000000000005 [ 2998.845788] R13: 00000000000008f3 R14: 00000000004cbc2c R15: 00007f305bd286d4 [ 2998.865520] loop3: rw=2049, want=80, limit=63 05:21:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 2998.911115] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 2998.969107] attempt to access beyond end of device 05:21:55 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080), 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 2998.996379] loop3: rw=2049, want=81, limit=63 [ 2999.031730] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 2999.073723] attempt to access beyond end of device [ 2999.104114] loop3: rw=2049, want=114, limit=63 [ 2999.126584] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 2999.151261] attempt to access beyond end of device [ 2999.167552] loop3: rw=2049, want=115, limit=63 [ 2999.178013] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 2999.196666] attempt to access beyond end of device [ 2999.211605] loop3: rw=2049, want=116, limit=63 [ 2999.225469] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 2999.243745] attempt to access beyond end of device [ 2999.255130] loop3: rw=2049, want=117, limit=63 [ 2999.266297] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 2999.284746] attempt to access beyond end of device [ 2999.297055] loop3: rw=2049, want=130, limit=63 [ 2999.307476] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2999.324842] attempt to access beyond end of device [ 2999.337423] loop3: rw=2049, want=131, limit=63 [ 2999.348701] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2999.372826] attempt to access beyond end of device [ 2999.377763] loop3: rw=2049, want=132, limit=63 [ 2999.392644] attempt to access beyond end of device [ 2999.397618] loop3: rw=2049, want=133, limit=63 [ 2999.413180] attempt to access beyond end of device [ 2999.423314] loop3: rw=2049, want=157, limit=63 [ 2999.439557] attempt to access beyond end of device [ 2999.452163] loop3: rw=2049, want=4805, limit=63 [ 2999.468430] attempt to access beyond end of device [ 2999.482513] loop3: rw=2049, want=8901, limit=63 [ 2999.499605] attempt to access beyond end of device [ 2999.517830] loop3: rw=2049, want=12541, limit=63 05:21:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x800000000000000, 0x4) 05:21:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:21:56 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00/\x00'}}, 0xfffffc41) 05:21:56 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004103) 05:21:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:21:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:21:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:21:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3000.438871] attempt to access beyond end of device [ 3000.438887] loop3: rw=1, want=597, limit=63 05:21:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x1000000000000000, 0x4) 05:21:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:21:57 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:21:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x5) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:21:57 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x000\x00'}}, 0xfffffc41) [ 3001.154288] attempt to access beyond end of device [ 3001.154304] loop3: rw=2049, want=78, limit=63 [ 3001.154347] attempt to access beyond end of device [ 3001.154358] loop3: rw=2049, want=79, limit=63 [ 3001.154395] attempt to access beyond end of device [ 3001.154406] loop3: rw=2049, want=80, limit=63 [ 3001.154442] attempt to access beyond end of device [ 3001.154452] loop3: rw=2049, want=81, limit=63 [ 3001.154503] attempt to access beyond end of device [ 3001.154513] loop3: rw=2049, want=114, limit=63 [ 3001.154550] attempt to access beyond end of device [ 3001.154560] loop3: rw=2049, want=115, limit=63 [ 3001.154599] attempt to access beyond end of device [ 3001.154608] loop3: rw=2049, want=116, limit=63 [ 3001.154645] attempt to access beyond end of device [ 3001.154655] loop3: rw=2049, want=117, limit=63 [ 3001.154696] attempt to access beyond end of device [ 3001.157050] loop3: rw=2049, want=130, limit=63 [ 3001.157104] attempt to access beyond end of device [ 3001.157114] loop3: rw=2049, want=131, limit=63 [ 3001.157152] attempt to access beyond end of device [ 3001.157163] loop3: rw=2049, want=132, limit=63 [ 3001.157199] attempt to access beyond end of device [ 3001.157209] loop3: rw=2049, want=133, limit=63 [ 3001.157295] attempt to access beyond end of device [ 3001.157306] loop3: rw=2049, want=157, limit=63 [ 3001.174030] attempt to access beyond end of device [ 3001.174045] loop3: rw=2049, want=4693, limit=63 [ 3001.195332] attempt to access beyond end of device [ 3001.195348] loop3: rw=2049, want=8789, limit=63 [ 3001.201871] attempt to access beyond end of device [ 3001.201884] loop3: rw=2049, want=9357, limit=63 [ 3001.766874] attempt to access beyond end of device [ 3001.766890] loop3: rw=1, want=765, limit=63 [ 3002.494679] attempt to access beyond end of device [ 3002.494694] loop3: rw=2049, want=78, limit=63 [ 3002.494736] attempt to access beyond end of device [ 3002.494747] loop3: rw=2049, want=79, limit=63 [ 3002.494784] attempt to access beyond end of device [ 3002.494794] loop3: rw=2049, want=80, limit=63 [ 3002.494831] attempt to access beyond end of device [ 3002.494841] loop3: rw=2049, want=81, limit=63 [ 3002.494893] attempt to access beyond end of device [ 3002.494902] loop3: rw=2049, want=114, limit=63 [ 3002.494936] attempt to access beyond end of device [ 3002.494946] loop3: rw=2049, want=115, limit=63 [ 3002.494982] attempt to access beyond end of device [ 3002.494991] loop3: rw=2049, want=116, limit=63 [ 3002.495028] attempt to access beyond end of device [ 3002.497383] loop3: rw=2049, want=117, limit=63 [ 3002.497428] attempt to access beyond end of device [ 3002.497439] loop3: rw=2049, want=130, limit=63 [ 3002.497481] attempt to access beyond end of device [ 3002.497491] loop3: rw=2049, want=131, limit=63 [ 3002.497528] attempt to access beyond end of device [ 3002.497538] loop3: rw=2049, want=132, limit=63 [ 3002.497575] attempt to access beyond end of device [ 3002.497585] loop3: rw=2049, want=133, limit=63 [ 3002.497666] attempt to access beyond end of device [ 3002.497677] loop3: rw=2049, want=157, limit=63 [ 3002.517059] attempt to access beyond end of device [ 3002.517071] loop3: rw=2049, want=4861, limit=63 [ 3002.549819] attempt to access beyond end of device [ 3002.549834] loop3: rw=2049, want=8877, limit=63 05:22:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004102) 05:22:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40049409, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:00 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x001\x00'}}, 0xfffffc41) 05:22:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x1e00000000000000, 0x4) 05:22:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x7) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:00 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x40087602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3003.850074] attempt to access beyond end of device 05:22:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3003.850092] loop3: rw=1, want=413, limit=63 [ 3004.511189] attempt to access beyond end of device [ 3004.511204] loop3: rw=2049, want=78, limit=63 [ 3004.511216] buffer_io_error: 26 callbacks suppressed [ 3004.511226] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 3004.511264] attempt to access beyond end of device [ 3004.511275] loop3: rw=2049, want=79, limit=63 [ 3004.511286] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 3004.511328] attempt to access beyond end of device [ 3004.511339] loop3: rw=2049, want=80, limit=63 [ 3004.511350] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 3004.511384] attempt to access beyond end of device [ 3004.511394] loop3: rw=2049, want=81, limit=63 [ 3004.511405] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 3004.511453] attempt to access beyond end of device [ 3004.511463] loop3: rw=2049, want=114, limit=63 [ 3004.511474] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 3004.511510] attempt to access beyond end of device [ 3004.511519] loop3: rw=2049, want=115, limit=63 [ 3004.511530] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 3004.511564] attempt to access beyond end of device [ 3004.511574] loop3: rw=2049, want=116, limit=63 [ 3004.511584] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 3004.511619] attempt to access beyond end of device [ 3004.511628] loop3: rw=2049, want=117, limit=63 [ 3004.511638] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 3004.520656] attempt to access beyond end of device [ 3004.520676] loop3: rw=2049, want=130, limit=63 [ 3004.520691] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 3004.520737] attempt to access beyond end of device [ 3004.520749] loop3: rw=2049, want=131, limit=63 [ 3004.520760] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 3004.520795] attempt to access beyond end of device [ 3004.520809] loop3: rw=2049, want=132, limit=63 [ 3004.520846] attempt to access beyond end of device [ 3004.520856] loop3: rw=2049, want=133, limit=63 [ 3004.520945] attempt to access beyond end of device [ 3004.520956] loop3: rw=2049, want=157, limit=63 [ 3004.544119] attempt to access beyond end of device [ 3004.544132] loop3: rw=2049, want=4509, limit=63 [ 3004.561533] attempt to access beyond end of device [ 3004.561548] loop3: rw=2049, want=4981, limit=63 05:22:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004104) 05:22:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x4020940d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x1f00000000000000, 0x4) 05:22:03 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x002\x00'}}, 0xfffffc41) 05:22:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045432, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80045440, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 3007.008096] attempt to access beyond end of device [ 3007.008110] loop3: rw=1, want=305, limit=63 05:22:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:03 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80086601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 3007.683588] attempt to access beyond end of device [ 3007.683602] loop3: rw=2049, want=78, limit=63 [ 3007.683647] attempt to access beyond end of device [ 3007.683658] loop3: rw=2049, want=79, limit=63 [ 3007.683696] attempt to access beyond end of device [ 3007.683706] loop3: rw=2049, want=80, limit=63 [ 3007.683743] attempt to access beyond end of device [ 3007.683753] loop3: rw=2049, want=81, limit=63 [ 3007.683804] attempt to access beyond end of device [ 3007.683814] loop3: rw=2049, want=130, limit=63 [ 3007.683851] attempt to access beyond end of device [ 3007.683860] loop3: rw=2049, want=131, limit=63 [ 3007.683897] attempt to access beyond end of device [ 3007.683906] loop3: rw=2049, want=132, limit=63 [ 3007.683942] attempt to access beyond end of device [ 3007.683951] loop3: rw=2049, want=133, limit=63 [ 3007.683988] attempt to access beyond end of device [ 3007.683997] loop3: rw=2049, want=142, limit=63 [ 3007.684041] attempt to access beyond end of device [ 3007.684051] loop3: rw=2049, want=143, limit=63 [ 3007.684087] attempt to access beyond end of device [ 3007.684096] loop3: rw=2049, want=144, limit=63 [ 3007.684132] attempt to access beyond end of device [ 3007.684141] loop3: rw=2049, want=145, limit=63 [ 3007.686586] attempt to access beyond end of device [ 3007.686600] loop3: rw=2049, want=161, limit=63 [ 3007.703319] attempt to access beyond end of device [ 3007.703333] loop3: rw=2049, want=4401, limit=63 [ 3007.717207] attempt to access beyond end of device [ 3007.717221] loop3: rw=2049, want=5393, limit=63 05:22:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004105) 05:22:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x80087601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x14) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2000000000000000, 0x4) 05:22:06 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x003\x00'}}, 0xfffffc41) 05:22:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0x500) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0045878, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:06 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3009.826643] attempt to access beyond end of device 05:22:06 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xefa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3009.826657] loop3: rw=1, want=509, limit=63 05:22:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc0189436, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 3010.491069] attempt to access beyond end of device [ 3010.491084] loop3: rw=2049, want=78, limit=63 [ 3010.491095] buffer_io_error: 14 callbacks suppressed [ 3010.491104] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 3010.491142] attempt to access beyond end of device [ 3010.491153] loop3: rw=2049, want=79, limit=63 [ 3010.491164] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 3010.491199] attempt to access beyond end of device [ 3010.491214] loop3: rw=2049, want=80, limit=63 [ 3010.493254] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 3010.493308] attempt to access beyond end of device [ 3010.493320] loop3: rw=2049, want=81, limit=63 [ 3010.493331] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 3010.493384] attempt to access beyond end of device [ 3010.493394] loop3: rw=2049, want=114, limit=63 [ 3010.493405] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 3010.493441] attempt to access beyond end of device [ 3010.493451] loop3: rw=2049, want=115, limit=63 [ 3010.493461] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 3010.493496] attempt to access beyond end of device [ 3010.493506] loop3: rw=2049, want=116, limit=63 [ 3010.493517] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 3010.493550] attempt to access beyond end of device [ 3010.493560] loop3: rw=2049, want=117, limit=63 [ 3010.493571] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 3010.493605] attempt to access beyond end of device [ 3010.493615] loop3: rw=2049, want=130, limit=63 [ 3010.493626] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 3010.493662] attempt to access beyond end of device [ 3010.493672] loop3: rw=2049, want=131, limit=63 [ 3010.493683] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 3010.493722] attempt to access beyond end of device [ 3010.493732] loop3: rw=2049, want=132, limit=63 [ 3010.493769] attempt to access beyond end of device [ 3010.493778] loop3: rw=2049, want=133, limit=63 [ 3010.493868] attempt to access beyond end of device [ 3010.493878] loop3: rw=2049, want=157, limit=63 [ 3010.511759] attempt to access beyond end of device [ 3010.511774] loop3: rw=2049, want=4605, limit=63 [ 3010.522723] attempt to access beyond end of device [ 3010.522737] loop3: rw=2049, want=4837, limit=63 05:22:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004106) 05:22:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf0a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2100000000000000, 0x4) 05:22:09 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x004\x00'}}, 0xfffffc41) 05:22:09 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf1a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf2a) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3013.293566] attempt to access beyond end of device [ 3013.293580] loop3: rw=1, want=545, limit=63 05:22:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf33) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3013.988452] attempt to access beyond end of device [ 3013.988469] loop3: rw=2049, want=78, limit=63 [ 3013.988512] attempt to access beyond end of device [ 3013.988521] loop3: rw=2049, want=79, limit=63 [ 3013.988558] attempt to access beyond end of device [ 3013.988568] loop3: rw=2049, want=80, limit=63 [ 3013.988603] attempt to access beyond end of device [ 3013.988612] loop3: rw=2049, want=81, limit=63 [ 3013.988664] attempt to access beyond end of device [ 3013.988675] loop3: rw=2049, want=130, limit=63 [ 3013.988711] attempt to access beyond end of device [ 3013.988721] loop3: rw=2049, want=131, limit=63 [ 3013.988756] attempt to access beyond end of device [ 3013.988765] loop3: rw=2049, want=132, limit=63 [ 3013.988800] attempt to access beyond end of device [ 3013.988809] loop3: rw=2049, want=133, limit=63 [ 3013.988844] attempt to access beyond end of device [ 3013.988853] loop3: rw=2049, want=142, limit=63 [ 3013.988953] attempt to access beyond end of device [ 3013.988967] loop3: rw=2049, want=143, limit=63 [ 3013.989604] attempt to access beyond end of device [ 3013.989615] loop3: rw=2049, want=144, limit=63 [ 3013.989709] attempt to access beyond end of device [ 3013.989720] loop3: rw=2049, want=145, limit=63 [ 3013.990303] attempt to access beyond end of device [ 3013.990316] loop3: rw=2049, want=161, limit=63 [ 3014.032532] attempt to access beyond end of device [ 3014.032546] loop3: rw=2049, want=4233, limit=63 05:22:18 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004107) 05:22:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf3b) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2200000000000000, 0x4) 05:22:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x0, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:18 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x005\x00'}}, 0xfffffc41) 05:22:18 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf43) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x0, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3022.057438] attempt to access beyond end of device [ 3022.057454] loop3: rw=1, want=509, limit=63 05:22:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf47) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:19 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x2000, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x0, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:19 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf49) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3022.702162] attempt to access beyond end of device [ 3022.702176] loop3: rw=2049, want=78, limit=63 [ 3022.702186] buffer_io_error: 14 callbacks suppressed [ 3022.702195] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 3022.702229] attempt to access beyond end of device [ 3022.702238] loop3: rw=2049, want=79, limit=63 [ 3022.702249] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 3022.702281] attempt to access beyond end of device [ 3022.702292] loop3: rw=2049, want=80, limit=63 [ 3022.702302] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 3022.702335] attempt to access beyond end of device [ 3022.702344] loop3: rw=2049, want=81, limit=63 [ 3022.702354] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 3022.702400] attempt to access beyond end of device [ 3022.707720] loop3: rw=2049, want=114, limit=63 [ 3022.707736] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 3022.707782] attempt to access beyond end of device [ 3022.707792] loop3: rw=2049, want=115, limit=63 [ 3022.707803] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 3022.707838] attempt to access beyond end of device [ 3022.707848] loop3: rw=2049, want=116, limit=63 [ 3022.707859] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 3022.707893] attempt to access beyond end of device [ 3022.707902] loop3: rw=2049, want=117, limit=63 [ 3022.707913] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 3022.707947] attempt to access beyond end of device [ 3022.707959] loop3: rw=2049, want=130, limit=63 [ 3022.707970] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 3022.708006] attempt to access beyond end of device [ 3022.708016] loop3: rw=2049, want=131, limit=63 [ 3022.708027] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 3022.708061] attempt to access beyond end of device [ 3022.708071] loop3: rw=2049, want=132, limit=63 [ 3022.708107] attempt to access beyond end of device [ 3022.708117] loop3: rw=2049, want=133, limit=63 [ 3022.708204] attempt to access beyond end of device [ 3022.708220] loop3: rw=2049, want=157, limit=63 [ 3022.736114] attempt to access beyond end of device [ 3022.736130] loop3: rw=2049, want=3997, limit=63 05:22:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004109) 05:22:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x3f00, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:20 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf4b) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2300000000000000, 0x4) 05:22:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:20 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x006\x00'}}, 0xfffffc41) 05:22:20 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xff7f, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 3024.334586] attempt to access beyond end of device 05:22:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf4d) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3024.396116] loop3: rw=1, want=325, limit=63 05:22:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf54) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:21 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf56) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3025.049742] attempt to access beyond end of device [ 3025.049757] loop3: rw=2049, want=78, limit=63 [ 3025.049803] attempt to access beyond end of device [ 3025.049813] loop3: rw=2049, want=79, limit=63 [ 3025.049850] attempt to access beyond end of device [ 3025.049860] loop3: rw=2049, want=80, limit=63 [ 3025.049896] attempt to access beyond end of device [ 3025.049906] loop3: rw=2049, want=81, limit=63 [ 3025.049956] attempt to access beyond end of device [ 3025.049966] loop3: rw=2049, want=114, limit=63 [ 3025.050008] attempt to access beyond end of device [ 3025.050018] loop3: rw=2049, want=115, limit=63 [ 3025.050055] attempt to access beyond end of device [ 3025.050065] loop3: rw=2049, want=116, limit=63 [ 3025.053933] attempt to access beyond end of device [ 3025.053946] loop3: rw=2049, want=117, limit=63 [ 3025.053990] attempt to access beyond end of device [ 3025.054001] loop3: rw=2049, want=130, limit=63 [ 3025.054039] attempt to access beyond end of device [ 3025.054049] loop3: rw=2049, want=131, limit=63 [ 3025.054086] attempt to access beyond end of device [ 3025.054096] loop3: rw=2049, want=132, limit=63 [ 3025.054134] attempt to access beyond end of device [ 3025.054144] loop3: rw=2049, want=133, limit=63 [ 3025.055481] attempt to access beyond end of device [ 3025.055496] loop3: rw=2049, want=157, limit=63 [ 3025.076530] attempt to access beyond end of device [ 3025.076543] loop3: rw=2049, want=4421, limit=63 [ 3025.098620] attempt to access beyond end of device [ 3025.098636] loop3: rw=2049, want=5501, limit=63 05:22:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410a) 05:22:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x9, 0x4}) 05:22:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf5d) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2400000000000000, 0x4) 05:22:22 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x007\x00'}}, 0xfffffc41) 05:22:22 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x2000, 0x0, 0x0, 0x9, 0x4}) 05:22:22 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf5f) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3026.304533] attempt to access beyond end of device [ 3026.304548] loop3: rw=1, want=381, limit=63 05:22:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x3f00, 0x0, 0x0, 0x9, 0x4}) 05:22:23 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf61) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0xff7f, 0x0, 0x0, 0x9, 0x4}) [ 3026.986235] attempt to access beyond end of device [ 3026.986250] loop3: rw=2049, want=78, limit=63 [ 3026.986293] attempt to access beyond end of device [ 3026.986303] loop3: rw=2049, want=79, limit=63 [ 3026.986341] attempt to access beyond end of device [ 3026.986351] loop3: rw=2049, want=80, limit=63 [ 3026.986388] attempt to access beyond end of device [ 3026.986398] loop3: rw=2049, want=81, limit=63 [ 3026.986447] attempt to access beyond end of device [ 3026.986457] loop3: rw=2049, want=114, limit=63 [ 3026.986492] attempt to access beyond end of device [ 3026.986502] loop3: rw=2049, want=115, limit=63 [ 3026.986537] attempt to access beyond end of device [ 3026.986548] loop3: rw=2049, want=116, limit=63 [ 3026.986582] attempt to access beyond end of device [ 3026.986591] loop3: rw=2049, want=117, limit=63 [ 3026.986625] attempt to access beyond end of device [ 3026.986635] loop3: rw=2049, want=130, limit=63 [ 3026.986670] attempt to access beyond end of device [ 3026.986680] loop3: rw=2049, want=131, limit=63 [ 3026.986720] attempt to access beyond end of device [ 3026.989033] loop3: rw=2049, want=132, limit=63 [ 3026.989085] attempt to access beyond end of device [ 3026.989096] loop3: rw=2049, want=133, limit=63 [ 3026.989200] attempt to access beyond end of device [ 3026.989211] loop3: rw=2049, want=157, limit=63 [ 3027.003942] attempt to access beyond end of device [ 3027.003956] loop3: rw=2049, want=4477, limit=63 [ 3027.015067] attempt to access beyond end of device [ 3027.015081] loop3: rw=2049, want=5973, limit=63 05:22:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410b) 05:22:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf63) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) 05:22:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2500000000000000, 0x4) 05:22:24 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x008\x00'}}, 0xfffffc41) 05:22:24 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, 0x9, 0x4}) 05:22:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf65) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3028.153931] attempt to access beyond end of device 05:22:24 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3028.185453] loop3: rw=1, want=341, limit=63 05:22:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf67) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:25 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x2000, 0x0, 0x9, 0x4}) [ 3028.870930] attempt to access beyond end of device [ 3028.870945] loop3: rw=2049, want=78, limit=63 [ 3028.870956] buffer_io_error: 26 callbacks suppressed [ 3028.870966] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 3028.871003] attempt to access beyond end of device [ 3028.871013] loop3: rw=2049, want=79, limit=63 [ 3028.871025] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 3028.871059] attempt to access beyond end of device [ 3028.871070] loop3: rw=2049, want=80, limit=63 [ 3028.871081] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 3028.871114] attempt to access beyond end of device [ 3028.871123] loop3: rw=2049, want=81, limit=63 [ 3028.871133] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 3028.871181] attempt to access beyond end of device [ 3028.871191] loop3: rw=2049, want=114, limit=63 [ 3028.871201] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 3028.871235] attempt to access beyond end of device [ 3028.871244] loop3: rw=2049, want=115, limit=63 [ 3028.871262] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 3028.871297] attempt to access beyond end of device [ 3028.871307] loop3: rw=2049, want=116, limit=63 [ 3028.871317] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 3028.871353] attempt to access beyond end of device [ 3028.871363] loop3: rw=2049, want=117, limit=63 [ 3028.871373] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 3028.871408] attempt to access beyond end of device [ 3028.871418] loop3: rw=2049, want=130, limit=63 [ 3028.871429] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 3028.871463] attempt to access beyond end of device [ 3028.871473] loop3: rw=2049, want=131, limit=63 [ 3028.871484] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 3028.871518] attempt to access beyond end of device [ 3028.871527] loop3: rw=2049, want=132, limit=63 [ 3028.871565] attempt to access beyond end of device [ 3028.871575] loop3: rw=2049, want=133, limit=63 [ 3028.871670] attempt to access beyond end of device [ 3028.871680] loop3: rw=2049, want=157, limit=63 [ 3028.876433] attempt to access beyond end of device [ 3028.876446] loop3: rw=2049, want=4437, limit=63 [ 3028.879441] attempt to access beyond end of device [ 3028.879453] loop3: rw=2049, want=5069, limit=63 05:22:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000410d) 05:22:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf77) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x3f00, 0x0, 0x9, 0x4}) 05:22:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2600000000000000, 0x4) 05:22:26 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x009\x00'}}, 0xfffffc41) 05:22:26 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0xff7f, 0x0, 0x9, 0x4}) 05:22:26 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf7f) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3030.251964] attempt to access beyond end of device [ 3030.251979] loop3: rw=1, want=349, limit=63 05:22:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf87) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:27 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 3030.952074] attempt to access beyond end of device [ 3030.952087] loop3: rw=2049, want=78, limit=63 [ 3030.952125] attempt to access beyond end of device [ 3030.952134] loop3: rw=2049, want=79, limit=63 [ 3030.952166] attempt to access beyond end of device [ 3030.952175] loop3: rw=2049, want=80, limit=63 [ 3030.952207] attempt to access beyond end of device [ 3030.952215] loop3: rw=2049, want=81, limit=63 [ 3030.952258] attempt to access beyond end of device [ 3030.952267] loop3: rw=2049, want=114, limit=63 [ 3030.952304] attempt to access beyond end of device [ 3030.953670] loop3: rw=2049, want=115, limit=63 [ 3030.953711] attempt to access beyond end of device [ 3030.953719] loop3: rw=2049, want=116, limit=63 [ 3030.953752] attempt to access beyond end of device [ 3030.953761] loop3: rw=2049, want=117, limit=63 [ 3030.953797] attempt to access beyond end of device [ 3030.953806] loop3: rw=2049, want=130, limit=63 [ 3030.953848] attempt to access beyond end of device [ 3030.953856] loop3: rw=2049, want=131, limit=63 [ 3030.953890] attempt to access beyond end of device [ 3030.953898] loop3: rw=2049, want=132, limit=63 [ 3030.953935] attempt to access beyond end of device [ 3030.953943] loop3: rw=2049, want=133, limit=63 [ 3030.954016] attempt to access beyond end of device [ 3030.954025] loop3: rw=2049, want=157, limit=63 [ 3030.987147] attempt to access beyond end of device [ 3030.987161] loop3: rw=2049, want=4445, limit=63 [ 3031.012176] attempt to access beyond end of device [ 3031.147126] loop3: rw=2049, want=4981, limit=63 05:22:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x800000080004110) 05:22:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xf9c) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x9, 0x4}) 05:22:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2700000000000000, 0x4) 05:22:28 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00:\x00'}}, 0xfffffc41) 05:22:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, 0x9, 0x4}) 05:22:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfa1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3032.003262] attempt to access beyond end of device 05:22:28 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3f00, 0x9, 0x4}) [ 3032.003275] loop3: rw=1, want=389, limit=63 05:22:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfaa) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:28 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xff7f, 0x9, 0x4}) [ 3032.666630] attempt to access beyond end of device [ 3032.666645] loop3: rw=2049, want=78, limit=63 [ 3032.666687] attempt to access beyond end of device [ 3032.666698] loop3: rw=2049, want=79, limit=63 [ 3032.666735] attempt to access beyond end of device [ 3032.666746] loop3: rw=2049, want=80, limit=63 [ 3032.666792] attempt to access beyond end of device [ 3032.666802] loop3: rw=2049, want=81, limit=63 [ 3032.666852] attempt to access beyond end of device [ 3032.666862] loop3: rw=2049, want=114, limit=63 [ 3032.666899] attempt to access beyond end of device [ 3032.666909] loop3: rw=2049, want=115, limit=63 [ 3032.666946] attempt to access beyond end of device [ 3032.666955] loop3: rw=2049, want=116, limit=63 [ 3032.666992] attempt to access beyond end of device [ 3032.667002] loop3: rw=2049, want=117, limit=63 [ 3032.667038] attempt to access beyond end of device [ 3032.667048] loop3: rw=2049, want=130, limit=63 [ 3032.667084] attempt to access beyond end of device [ 3032.667094] loop3: rw=2049, want=131, limit=63 [ 3032.669496] attempt to access beyond end of device [ 3032.669514] loop3: rw=2049, want=132, limit=63 [ 3032.679732] attempt to access beyond end of device [ 3032.679744] loop3: rw=2049, want=133, limit=63 [ 3032.679834] attempt to access beyond end of device [ 3032.679845] loop3: rw=2049, want=157, limit=63 [ 3032.700461] attempt to access beyond end of device [ 3032.700474] loop3: rw=2049, want=4485, limit=63 [ 3032.718434] attempt to access beyond end of device [ 3032.718447] loop3: rw=2049, want=5621, limit=63 05:22:30 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000412b) 05:22:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfb1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:30 executing program 1: ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000000c0)={0x0, 0xc3, 0x0, 0x0, 0x9, 0x3ff}) 05:22:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2800000000000000, 0x4) 05:22:30 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00;\x00'}}, 0xfffffc41) 05:22:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) munlockall() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000020000d4ec00ebea63ee000084f89b3200000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0xffffff0f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8, 0x1, 'hsr\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r6}]}}}]}, 0x38}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x19, r6, 0x1, 0x9}, 0x14) 05:22:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfb3) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3033.717893] attempt to access beyond end of device [ 3033.717909] loop3: rw=1, want=405, limit=63 05:22:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 3033.834227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=26805 comm=syz-executor.1 05:22:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfc0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3033.834802] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified 05:22:30 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000280)={{0x80, 0x1}, 'port1\x00', 0x1, 0xa0800, 0x4, 0x8, 0x2, 0xa907, 0xfffffffb, 0x0, 0x7, 0x4f}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$P9_RXATTRCREATE(r4, &(0x7f0000000240)={0x7, 0x21, 0x2}, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000200)={@any, 0xb94}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f00000001c0)) r8 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r9, 0x6, 0xabdf}, &(0x7f0000000180)=0x8) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) [ 3033.988897] (unnamed net_device) (uninitialized): HSR: Slave2 device not specified 05:22:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfc2) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3034.384376] attempt to access beyond end of device [ 3034.384391] loop3: rw=2049, want=78, limit=63 [ 3034.384405] buffer_io_error: 26 callbacks suppressed [ 3034.384414] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 3034.384450] attempt to access beyond end of device [ 3034.384458] loop3: rw=2049, want=79, limit=63 [ 3034.384468] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 3034.384501] attempt to access beyond end of device [ 3034.384511] loop3: rw=2049, want=80, limit=63 [ 3034.384522] Buffer I/O error on dev loop3, logical block 79, lost async page write [ 3034.384559] attempt to access beyond end of device [ 3034.384569] loop3: rw=2049, want=81, limit=63 [ 3034.384580] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 3034.384625] attempt to access beyond end of device [ 3034.384635] loop3: rw=2049, want=114, limit=63 [ 3034.384646] Buffer I/O error on dev loop3, logical block 113, lost async page write [ 3034.384687] attempt to access beyond end of device [ 3034.384696] loop3: rw=2049, want=115, limit=63 [ 3034.384707] Buffer I/O error on dev loop3, logical block 114, lost async page write [ 3034.384740] attempt to access beyond end of device [ 3034.384750] loop3: rw=2049, want=116, limit=63 [ 3034.384760] Buffer I/O error on dev loop3, logical block 115, lost async page write [ 3034.384791] attempt to access beyond end of device [ 3034.384800] loop3: rw=2049, want=117, limit=63 [ 3034.384809] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 3034.384843] attempt to access beyond end of device [ 3034.400988] loop3: rw=2049, want=130, limit=63 [ 3034.401006] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 3034.401056] attempt to access beyond end of device [ 3034.401067] loop3: rw=2049, want=131, limit=63 [ 3034.401078] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 3034.401115] attempt to access beyond end of device [ 3034.401126] loop3: rw=2049, want=132, limit=63 [ 3034.401162] attempt to access beyond end of device [ 3034.401172] loop3: rw=2049, want=133, limit=63 [ 3034.401262] attempt to access beyond end of device [ 3034.401272] loop3: rw=2049, want=157, limit=63 [ 3034.422211] attempt to access beyond end of device [ 3034.422226] loop3: rw=2049, want=4501, limit=63 [ 3034.437069] attempt to access beyond end of device [ 3034.437083] loop3: rw=2049, want=4789, limit=63 05:22:32 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000412d) 05:22:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) 05:22:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000440)={0x10c, 0x0, &(0x7f0000000040)="a21ab63a689746e592ff847cba0e2bc215fcdd2718b83d2017095233b129c60f3f53043df0211c0f3cdb51ee621cb4c2a0c9a954e757c82555db0faf5f576ca21e93883bc0571773b30dbcbae9190980b45c4bd56d07e572cfe1676bcd38d6c08b4797b90188f01e16ae02a39d63a7458b7f5df40b685756628cc4e27fe46d568d155c69c815c72d4eccd11d484c440d2322e948944d985ac2c6dd9ecd0bf6d3765d3cd6ef9ed27f7c885f915dd414e506af1c4c39f1f0058eaa1a80d0790853afe0539259531716512983e32b63a2b82d4e44d43c5162488a622d48b49ec20c7aa1c76166f67612bc617801af28e145a8f9b0e2f125ef4e96f3437c943fb138c31bdc69d9a8fbf477bce0f9a27c0aa381f71365e20194a249473290add5498b2c6b12b873252419385df0531204430dc038b73547d069b485b1b680a6e90f72b35e06efe8e51244f2039e356addb2a5a405c4894dc517f2484fbfe0189e144281d8b395ea3c5cb51eb21eef8210af537b163eed7dad4f24cfaed9861349cb98da9213898fbc973e7334a5ff901f7a9e111541c40f411ee4959bcbc82c538437790acc476698ac258e98898acadf4511b3f61abe24eff8c3d74558f5047f35d210806cd65e394269d6f7f5ff829e59fca02584d76f3645650f553b70fd810081e44be20b7c502547b40b74f8c2da066ca364b572debb917d55c62fc1706187c402306a6b0a39843ca7cbda5ded89f3981392e77edc512ec6ae8decc62122c87181e3b17a861360b3c443e51558003818ca4ac41af9767d27d55fe58e6d5e93ec6c3ccb0daf72222195fb08dab3a957a7a9ba13f6c7431313f5a74cd1bce1c354bf5b402d2094abaaf1cdcb79ee4461293e5effcc4e275c74be70e6d019481feea77f542f0e99bd8b00219c3ca2c70b6b6183e6fbe058e2ed1982e30456fdc199329a50011c26b4d2f15256b5e235d33893c5df3a4e4b0a7b06f50456c3a0a0d0594ab01c47140e0e71dae8f658abc4c1526d75773eb58fa5f59bda74e4eff5e611fd8f4ced36649431e17283bd418f24a4cd93775915aae80d91aa4103b9ad7dc9e03ba510b13a0d06b5588d9684478e731e7da45cfb3f12e6c14caad6f5dda378672441d1f4677ff031711829c3daf5c0c5b8edcce95cea16f18c99b31a0db3b991ac2a10708939894d6194b64ea33be61c1ebc339fc0b814d9779d1964e21bc38623ec9ec3388ad0d6a1ee4ec784454cd3c0232fb536f4f2235e794f37cf8d94511773f1724094d1afc4f8d45c56df275fb59b00774e423db6a24225b239bfc96773cfe0f39cd4f1b8b84ee108a2669ff6239ec73418fd21b1326f53f7785411475ac976aa00282e24e5876772f41be798372dc99738debc4a60fc4023449f5366f70434d6f303d99b9a6b935f8e06fb52c29e8d0c1bf92ffda99ed7417809"}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000001380)={0x0, 0x0, {0x0, 0x1, 0x0, 0x2}, 0x5}) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000480)={{0x0, 0x0, @descriptor="781e544bb720a506"}}) 05:22:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfc4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2900000000000000, 0x4) 05:22:32 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00<\x00'}}, 0xfffffc41) 05:22:32 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) 05:22:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfc6) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 3035.756039] attempt to access beyond end of device 05:22:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 3035.756055] loop3: rw=1, want=293, limit=63 05:22:32 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000700)=ANY=[@ANYBLOB="03000000000000000000000000000000c7671f873f3cfe6fd11e03a042ecc71d6ad490380890d9b549aa151ded5f0984ae4e500f401fd8138514"]) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000001380)={0x0, 0x0, {0x0, 0x1, 0x0, 0x2}, 0x5}) fcntl$getflags(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000000040)=0x69) setresuid(0x0, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) recvfrom$x25(r7, &(0x7f00000000c0)=""/202, 0xca, 0x100, &(0x7f0000000680)={0x9, @remote={[], 0x3}}, 0x12) sendmsg$nl_netfilter(r7, &(0x7f00000003c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], 0x2a0}, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400), 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="900000000207010100000000000000001e000540000000010c00034000000000779df78d24000780080001400000000408910240000000080800024000000008080000000000090c000340000000000000a82608000540000000030c11b7de93962e0003400000000000000006090001007306000000000000000006400000000000000026"], 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048801) 05:22:32 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfc8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 3036.405833] attempt to access beyond end of device [ 3036.405847] loop3: rw=2049, want=78, limit=63 [ 3036.405885] attempt to access beyond end of device [ 3036.405894] loop3: rw=2049, want=79, limit=63 [ 3036.405927] attempt to access beyond end of device [ 3036.405936] loop3: rw=2049, want=80, limit=63 [ 3036.405967] attempt to access beyond end of device [ 3036.405976] loop3: rw=2049, want=81, limit=63 [ 3036.406020] attempt to access beyond end of device [ 3036.406029] loop3: rw=2049, want=114, limit=63 [ 3036.406061] attempt to access beyond end of device [ 3036.406071] loop3: rw=2049, want=115, limit=63 [ 3036.406107] attempt to access beyond end of device [ 3036.406118] loop3: rw=2049, want=116, limit=63 [ 3036.406155] attempt to access beyond end of device [ 3036.406165] loop3: rw=2049, want=117, limit=63 [ 3036.406201] attempt to access beyond end of device [ 3036.406211] loop3: rw=2049, want=130, limit=63 [ 3036.406246] attempt to access beyond end of device [ 3036.406255] loop3: rw=2049, want=131, limit=63 [ 3036.406304] attempt to access beyond end of device [ 3036.406314] loop3: rw=2049, want=132, limit=63 [ 3036.406348] attempt to access beyond end of device [ 3036.406356] loop3: rw=2049, want=133, limit=63 [ 3036.406472] attempt to access beyond end of device [ 3036.406480] loop3: rw=2049, want=157, limit=63 [ 3036.444696] attempt to access beyond end of device [ 3036.444711] loop3: rw=2049, want=3981, limit=63 05:22:33 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000008000414f) 05:22:33 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20, 0x9}) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000080)={0x2, 0x1, @raw_data=[0xff, 0x9, 0x5, 0x800, 0x9, 0xe15d, 0x800, 0xfffffffd, 0x8, 0x4, 0x3, 0x1000, 0xfffffff7, 0x1c00, 0x800, 0x5]}) 05:22:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') sendfile(r0, r1, 0x0, 0xfca) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46802) io_setup(0x100000000000c333, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000400)=0x5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r2, 0x4b48, 0x0) io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f00000003c0)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 05:22:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x9}, 0x8) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000300)={0x81, 0x0, [0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 05:22:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) fchdir(r2) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r3, &(0x7f0000001440), 0xfffffc41) fadvise64(r3, 0x4000, 0x2a00000000000000, 0x4) 05:22:33 executing program 2: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$UHID_INPUT(r0, &(0x7f0000001440)={0x8, {'\x00\x00\x00=\x00'}}, 0xfffffc41) [ 3037.349667] ================================================================== [ 3037.349710] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x448/0xa20 [ 3037.349720] Read of size 32 at addr ffff88800cf51a90 by task kworker/0:0/25694 [ 3037.349723] [ 3037.349737] CPU: 0 PID: 25694 Comm: kworker/0:0 Not tainted 4.19.128-syzkaller #0 [ 3037.349744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3037.349755] Workqueue: events_power_efficient fb_flashcursor [ 3037.349763] Call Trace: [ 3037.349780] dump_stack+0x1fc/0x2fe [ 3037.349796] ? soft_cursor+0x448/0xa20 [ 3037.349812] print_address_description.cold+0x54/0x222 [ 3037.349827] ? soft_cursor+0x448/0xa20 [ 3037.349838] kasan_report.cold+0x88/0x2b9 [ 3037.349852] memcpy+0x20/0x50 [ 3037.349865] soft_cursor+0x448/0xa20 [ 3037.349884] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3037.349908] bit_cursor+0x1272/0x1890 [ 3037.349930] ? bit_update_start+0x1f0/0x1f0 [ 3037.349942] ? lock_downgrade+0x740/0x740 [ 3037.349964] ? fb_get_color_depth.part.0+0xc6/0x1f0 [ 3037.349979] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3037.349992] ? get_color+0x20f/0x420 [ 3037.350012] ? bit_update_start+0x1f0/0x1f0 [ 3037.350032] fb_flashcursor+0x396/0x440 [ 3037.350048] process_one_work+0x892/0x1580 [ 3037.350070] ? pwq_dec_nr_in_flight+0x310/0x310 [ 3037.350093] worker_thread+0x96/0xe20 [ 3037.350116] ? process_one_work+0x1580/0x1580 [ 3037.350129] kthread+0x30b/0x410 [ 3037.350141] ? kthread_park+0x180/0x180 [ 3037.350157] ret_from_fork+0x24/0x30 [ 3037.350174] [ 3037.350180] Allocated by task 24946: [ 3037.350194] __kmalloc+0x15a/0x3c0 [ 3037.350205] fbcon_set_font+0x331/0x870 [ 3037.350216] con_font_op+0xd3e/0x1130 [ 3037.350226] vt_ioctl+0xcd0/0x2500 [ 3037.350239] tty_ioctl+0x7a5/0x1420 [ 3037.350250] do_vfs_ioctl+0xcda/0x12e0 [ 3037.350259] ksys_ioctl+0x9b/0xc0 [ 3037.350268] __x64_sys_ioctl+0x6f/0xb0 [ 3037.350281] do_syscall_64+0xf9/0x620 [ 3037.350293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3037.350297] [ 3037.350302] Freed by task 3694: [ 3037.350311] kfree+0xce/0x220 [ 3037.350321] kvfree+0x59/0x60 [ 3037.350333] seq_release+0x4f/0x80 [ 3037.350345] kernfs_fop_release+0xf2/0x190 [ 3037.350356] __fput+0x2cd/0x890 [ 3037.350368] task_work_run+0x13f/0x1b0 [ 3037.350381] exit_to_usermode_loop+0x251/0x2a0 [ 3037.350393] do_syscall_64+0x538/0x620 [ 3037.350406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 3037.350409] [ 3037.350418] The buggy address belongs to the object at ffff88800cf50c00 [ 3037.350418] which belongs to the cache kmalloc-4096 of size 4096 [ 3037.350430] The buggy address is located 3728 bytes inside of [ 3037.350430] 4096-byte region [ffff88800cf50c00, ffff88800cf51c00) [ 3037.350434] The buggy address belongs to the page: [ 3037.350444] page:ffffea000033d400 count:1 mapcount:0 mapping:ffff88812c3dcdc0 index:0x0 compound_mapcount: 0 [ 3037.350457] flags: 0xfffe0000008100(slab|head) [ 3037.350474] raw: 00fffe0000008100 ffffea00010ea388 ffffea00025bbf08 ffff88812c3dcdc0 [ 3037.350488] raw: 0000000000000000 ffff88800cf50c00 0000000100000001 0000000000000000 [ 3037.350493] page dumped because: kasan: bad access detected [ 3037.350496] [ 3037.350500] Memory state around the buggy address: [ 3037.350510] ffff88800cf51980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3037.350520] ffff88800cf51a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3037.350529] >ffff88800cf51a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3037.350533] ^ [ 3037.350543] ffff88800cf51b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3037.350552] ffff88800cf51b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3037.350557] ================================================================== [ 3037.350561] Disabling lock debugging due to kernel taint [ 3037.350592] Kernel panic - not syncing: panic_on_warn set ... [ 3037.350592] [ 3037.350605] CPU: 0 PID: 25694 Comm: kworker/0:0 Tainted: G B 4.19.128-syzkaller #0 [ 3037.350612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3037.350623] Workqueue: events_power_efficient fb_flashcursor [ 3037.350628] Call Trace: [ 3037.350642] dump_stack+0x1fc/0x2fe [ 3037.350657] panic+0x26a/0x50e [ 3037.350670] ? __warn_printk+0xf3/0xf3 [ 3037.350680] ? retint_kernel+0x2d/0x2d [ 3037.350696] ? trace_hardirqs_on+0x55/0x210 [ 3037.350709] ? soft_cursor+0x448/0xa20 [ 3037.350721] kasan_end_report+0x43/0x49 [ 3037.350734] kasan_report.cold+0xa4/0x2b9 [ 3037.350746] memcpy+0x20/0x50 [ 3037.350758] soft_cursor+0x448/0xa20 [ 3037.350774] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 3037.350788] bit_cursor+0x1272/0x1890 [ 3037.350805] ? bit_update_start+0x1f0/0x1f0 [ 3037.350816] ? lock_downgrade+0x740/0x740 [ 3037.350833] ? fb_get_color_depth.part.0+0xc6/0x1f0 [ 3037.350846] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 3037.350857] ? get_color+0x20f/0x420 [ 3037.350870] ? bit_update_start+0x1f0/0x1f0 [ 3037.350882] fb_flashcursor+0x396/0x440 [ 3037.350896] process_one_work+0x892/0x1580 [ 3037.350912] ? pwq_dec_nr_in_flight+0x310/0x310 [ 3037.350929] worker_thread+0x96/0xe20 [ 3037.350946] ? process_one_work+0x1580/0x1580 [ 3037.350958] kthread+0x30b/0x410 [ 3037.350969] ? kthread_park+0x180/0x180 [ 3037.350982] ret_from_fork+0x24/0x30 [ 3037.352221] Kernel Offset: disabled [ 3037.846421] Rebooting in 86400 seconds..