) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:46 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000026bd7000000000000200000014000000000000000000000a080002000000010008000600030000000800050000000000080003000100010014000100fe8000000000000000000000000000aa080005000200"/94], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000580)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000240)={0x8, {0x6, 0x7, 0x59d, 0x5}}) stat(&(0x7f0000000300)='./file0/file2\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000480)) lchown(&(0x7f00000002c0)='./file0/file1\x00', r2, r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:52:46 executing program 5: getpgrp(0xffffffffffffffff) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 22:52:46 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2045.765777][ T9188] attempt to access beyond end of device [ 2045.780607][ T9188] loop2: rw=1, want=40481, limit=112 [ 2045.795870][ T9188] attempt to access beyond end of device [ 2045.801764][ T9188] loop2: rw=1, want=42985, limit=112 [ 2045.818575][ T9188] attempt to access beyond end of device [ 2045.828808][ T9188] loop2: rw=1, want=43041, limit=112 [ 2045.896650][ C0] net_ratelimit: 20 callbacks suppressed [ 2045.896658][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2045.908191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2045.914059][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2045.919863][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2045.925683][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2045.931482][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:52:46 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, 0x0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) setsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f0000000240)=0x20, 0x4) 22:52:47 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:52:47 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = dup(0xffffffffffffff9c) getsockname$netlink(r2, &(0x7f0000000100), &(0x7f0000000140)=0xc) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "a32b54bc7d8507bf24ef4400d0e1e9d2b0946616"}, 0x15, 0x2) tkill(r1, 0x1000000000016) [ 2046.866707][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2046.872570][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2046.878427][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2046.884192][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:52:48 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00000000bef09e3cf6d8347794e552713f1e14dc13c3d4b07a37cb7578f0feb2a1c362172c0325a6a5cd625df0f917e830b3e84073d8ac1ed7113d4e8ff58260fe8a2e7a6f146397ba4d0a9db66ed360d7a9a37b7d194ea15477991abc94fca623da86404dd3f1d8ff", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000200)={'raw\x00'}, &(0x7f00000000c0)=0x54) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2047.792883][ T8167] attempt to access beyond end of device [ 2047.814561][ T8167] loop0: rw=1, want=130, limit=112 [ 2047.848199][ T9188] attempt to access beyond end of device [ 2047.858524][ T8167] buffer_io_error: 86 callbacks suppressed [ 2047.858535][ T8167] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2047.878218][ T9188] loop4: rw=1, want=35297, limit=112 [ 2047.888666][ T9188] attempt to access beyond end of device 22:52:48 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x3f00) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2047.894466][ T8167] attempt to access beyond end of device [ 2047.900476][ T9188] loop4: rw=1, want=37345, limit=112 [ 2047.905916][ T8167] loop0: rw=1, want=131, limit=112 [ 2047.914398][ T8167] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2048.084542][ T9188] attempt to access beyond end of device [ 2048.090284][ T9188] loop4: rw=1, want=39393, limit=112 [ 2048.096715][ T8167] attempt to access beyond end of device [ 2048.102370][ T8167] loop0: rw=1, want=132, limit=112 [ 2048.119959][ T9188] attempt to access beyond end of device [ 2048.125616][ T9188] loop4: rw=1, want=41441, limit=112 22:52:48 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x100, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xb4fc347376bacf01, 0x0, 0x4f, 0xffffffffffffffc0, 0x7ff, 0x3f, 0x400, 0x5, 0xd04, 0x800, 0xffffffffffffff83, 0x7, 0x2, 0x7, 0x1f, 0x5e, 0x2, 0xfff, 0x3ff, 0xb4f, 0x1ff, 0x5, 0x1, 0x9, 0x7, 0x200, 0x6, 0x9, 0x7fffffff, 0x0, 0x1f, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x100, 0x80000001, 0xfffffffffffffffc, 0xf, 0x2, 0x9, 0x7}, r1, 0x10, 0xffffffffffffffff, 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000140)={0x7, 0x7ff}) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x101000, 0x0) [ 2048.126937][ T8167] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2048.139864][ T9188] attempt to access beyond end of device [ 2048.145509][ T9188] loop4: rw=1, want=43489, limit=112 [ 2048.161125][ T9188] attempt to access beyond end of device [ 2048.166912][ T9188] loop4: rw=1, want=45665, limit=112 [ 2048.178834][ T9188] attempt to access beyond end of device 22:52:48 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:52:48 executing program 3: mkdir(0x0, 0x10000018) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000480)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000580)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000500)=0x9b9a) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r1, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000240)={0xfffffffffffffe1a, 0xfffffffffffffeff, 0x9, 0x1, 0x2}) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e3852f8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) getpid() r4 = fcntl$getown(r3, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, r3, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) rt_tgsigqueueinfo(r4, r5, 0x33, &(0x7f0000000340)={0x2c, 0xfffffffffffffffb, 0x4}) [ 2048.184487][ T9188] loop4: rw=1, want=49681, limit=112 [ 2048.197297][ T9188] attempt to access beyond end of device [ 2048.203079][ T9188] loop4: rw=1, want=53713, limit=112 [ 2048.223820][ T9188] attempt to access beyond end of device [ 2048.229571][ T8167] attempt to access beyond end of device [ 2048.235208][ T8167] loop0: rw=1, want=133, limit=112 [ 2048.240400][ T9188] loop4: rw=1, want=58249, limit=112 [ 2048.254639][ T8167] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2048.266722][ T8167] attempt to access beyond end of device [ 2048.272381][ T8167] loop0: rw=1, want=142, limit=112 [ 2048.273499][ T9188] attempt to access beyond end of device [ 2048.278607][ T8167] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2048.284718][ T9188] loop4: rw=1, want=63337, limit=112 [ 2048.292254][ T8167] attempt to access beyond end of device [ 2048.303133][ T8167] loop0: rw=1, want=143, limit=112 [ 2048.305852][ T9188] attempt to access beyond end of device [ 2048.308842][ T8167] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 2048.323199][ T8167] attempt to access beyond end of device [ 2048.328750][ T9188] loop4: rw=1, want=63338, limit=112 [ 2048.329242][ T8167] loop0: rw=1, want=144, limit=112 [ 2048.340324][ T8167] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 2048.342995][ T9188] Buffer I/O error on dev loop4, logical block 63337, lost async page write [ 2048.349251][ T8167] attempt to access beyond end of device [ 2048.357826][ T9188] attempt to access beyond end of device [ 2048.369167][ T8167] loop0: rw=1, want=145, limit=112 [ 2048.390862][ T9188] loop4: rw=1, want=63339, limit=112 [ 2048.401059][ T8167] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 2048.413653][ T9188] Buffer I/O error on dev loop4, logical block 63338, lost async page write [ 2048.444661][ T9188] attempt to access beyond end of device [ 2048.455794][ T9188] loop4: rw=1, want=63340, limit=112 [ 2048.465126][ T9188] attempt to access beyond end of device [ 2048.470986][ T9188] loop4: rw=1, want=63341, limit=112 [ 2048.476785][ T9188] attempt to access beyond end of device [ 2048.482613][ T9188] loop4: rw=1, want=130, limit=112 [ 2048.487981][ T9188] attempt to access beyond end of device 22:52:49 executing program 3: mkdir(0x0, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000002c0)='trusted.overlay.upper\x00', &(0x7f0000000300)={0x0, 0xfb, 0xaf, 0x4, 0x20, "d0448d594d82f7498b9251356bb3f0ab", "735d2da2c1647fff16d95ac3b57eba1a60777177b0324ec9dd542fa96b29566e1291c4d5cf33b32f191f953bc8af508e1e3351526147d3b5b195c7a445ff89ff14c1c76f18d05c1bd2e739e9d55683bb683b03627d1ae5f4b1c1939661f89765310e37771f56a12c916b456c1c936d46d2b63d8c257059936dc424585510af82ef64adec9d5e638a04c0df0caaf5521da4dc3ce80c7b74902b2c"}, 0xaf, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2048.493807][ T9188] loop4: rw=1, want=131, limit=112 [ 2048.499158][ T9188] attempt to access beyond end of device [ 2048.504967][ T9188] loop4: rw=1, want=132, limit=112 [ 2048.510320][ T9188] attempt to access beyond end of device [ 2048.516126][ T9188] loop4: rw=1, want=133, limit=112 [ 2048.525325][ T9188] attempt to access beyond end of device [ 2048.551656][ T9188] loop4: rw=1, want=2541, limit=112 [ 2048.560291][ T8167] attempt to access beyond end of device [ 2048.588391][ T8167] loop0: rw=1, want=2881, limit=112 [ 2048.663093][ T8167] attempt to access beyond end of device [ 2048.715530][ T8167] loop0: rw=1, want=4929, limit=112 [ 2049.184691][ T8167] attempt to access beyond end of device 22:52:49 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x1, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) sched_setparam(r0, &(0x7f0000000040)=0x200000000000000) 22:52:50 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x10040) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x164, 0x12, 0x100, 0x70bd2d, 0x25dfdbfd, {0x5}, [@nested={0x14, 0x7e, [@typed={0x8, 0xe, @fd=r2}, @typed={0x8, 0x7e, @u32=0x7}]}, @typed={0x8, 0x13, @fd=r3}, @nested={0x134, 0x63, [@typed={0x8, 0x52, @uid=r4}, @typed={0x8, 0x4c, @u32=0x4}, @typed={0x28, 0x57, @binary="5da8c2fa6c32c8c24b3582eee9ecd85de0ea889d10a2406ddb47c40f5856a466ab868e"}, @generic="4eb6711ee57c461876355e610dc89eebc9a8411a1ac5968019f7e6c45c39772ec4379647", @generic="73e8aeb913196d649b7e7a34a3ff07ccaa45754082e917fcebdc0a0ccb85d1ac3e86f32635e032fce199ab513834a86c3ef534f7259df6892aa0ee06a0f9486fad9853e867fb39c84c98da6c30b6ccdd7a8fbff037cc85c3b8af2b1d58af4ca97d342e3ff5dd2a4882326493ef32941f5dba1ba686b4eac3feee64091e0cafeab11653a5bc49f40b2cef86adf7b93208f80e38043fe74d1bb9f563fce0981139335617b568d2aa16040c752f85df2a6800ca120cef4b912e70070824271dec", @typed={0x4, 0x2d}, @typed={0x10, 0x51, @str='{\\wlan1+\x00'}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x40801}, 0x80) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r5, 0x1000000000016) [ 2049.298262][ T8167] loop0: rw=1, want=6977, limit=112 22:52:50 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = getpid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffff9c, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x4000000000000, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x100000001, 0x2}, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x7, 0x9}, &(0x7f00000001c0)=0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x5}}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x100) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000003c0)=0x7, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={r2, r1, 0x0, 0x16, &(0x7f0000000040)='[vboxnet1-,*.em1eth0,\x00', r3}, 0x30) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2049.387600][ T8167] attempt to access beyond end of device [ 2049.452143][ T8167] loop0: rw=1, want=9025, limit=112 22:52:50 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2049.757706][ T8167] attempt to access beyond end of device [ 2049.763393][ T8167] loop0: rw=1, want=11073, limit=112 [ 2049.774994][ T8167] attempt to access beyond end of device [ 2049.781599][ T8167] loop0: rw=1, want=14537, limit=112 22:52:50 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x96580, 0x0) ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000000180)={0x3, 0x0, 0x2080, {0x106000, 0x0, 0x2}, [], "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", "61b7ac6eebcfb59a91c1941c01d22d49e43468a9c754ca93ba39fc91b73da6ab66679bbf976aeb8728adca01dd3de67358208f0feaf6bc20356a54f2da3ca2bb8f30b67675216f11b89583b0b924a8fd9d383a756a19c36ebbf9ebd1491dac58d0c5878328a2fd7caa5164af85e6c8141ded3103e7489a86a707d94c69d05c619be861aca6b483e76e7658beb75fce0f20e062b1aa1334d781ccf0be73cadfa020b5c59fac8633686e24d3336b2750c6e23f0d7e4140dd01533d815cc49fc1103035e528c64b1dc972f4e4da2e75e068d9fddf0c659095c19befd2d1389f3dd908773d0029a076ccacd9f991860155e47a9c02ac5734ebae893654594526d68ce02a7ac81f94ca6e3143ac48a2e257e38693ca70d16914daccb2400eb5fbb3464df84d28d4659b0813011659adde7381b5b9a5ffefac4ffab4328548e0859dee92df03ef8a1d36db2a632150d32408f3aba6ae13e4266cb95ab30a1730eb4943ee8a166afe748a1dac9f7301516f3500c1ca2e1572e15603f5fb596b0c69546a8d4de5ac0554f13cf5a4698376f605d4882b307d5f0faec0df75dfde8e793e67d0a3735f2947368b8234a143606b32c62561e20df5052a6bf47acf303d93a63be77b2cf53e9ca7c3ea66ec573d357d9f96e4f51168b97f36468b9ee991d8c69b8af50f8d5cc96d08bb310d4d5341fc2c333ada5ccbe91369a4113504db36dba4b67bdc84e19278b25fd8d810674d2f04565959464f2b31d66eb20c7932bc4e530672214165eaa19397a7f37dcbb6143e63375c8f46af13dbbae3c3f6917584b07e06b5629156dbb1a6c211093743bc21a72dd25cb4c06aee5d2c5e985c69dd69ab571599e29ac0fd7beecf0be95e352d775634debfc9074457a8302a3ff71b9c685d8ac5805d687fb1bffc37a9f2dcad8a1d5dd0a3c27427a6499643c018b295043ea1a69fce216655632698023677dba00b18de79edb6f2846d06ea610dc3038cade40ab0f381d4bc5929541605a8c428187e133dd9234ecac3b2552799961888f8919bc6eca1edad9f4a554860e7e77beca6b9a191a0eed5acf0801833e21de1f9d986e2ff51828e7844a12b2bfcbee4c3f91dc5bf93cbefe1349cb0285e5f393c8220916df5a4ca538d3bee13252850e67e87d2fbac3c826a782c1c08901cb6a0388630bc7cbfb4b47549f8e65afe4d80b30d967d0464e8fa1b57300dcf9c4b21f5f2f07f2e9b320975017bb44d63fd75c8e602f7748dafbbfd84079da48226c57f08435ad11a456e02dd08b378d0550e5d7a72d0571cb13707ddbd46e06e8c8e0ce7edd99d9e8ac89a6a68c80b5d3bb25285cc0b887b1a607a56834b7a6665b6761752030b6391f86f575a970e85cebac356eb07f676d016c536be6b7035110ec583672f1518f33347284c2d6e1f43b976f1ab74ad81638c7dd8cf86c8b88aef4cd001d71c232277f050ec4bf9077ec306cf8c0c6b46fd5da88134d266e43910b938ba6c827d32db3972d22dc8f4442e4debda10a43b2f693c1e13b5aeb01d6073db513f03686d8fb7cb6d1834c45690fc036f442620d1eab85080d38b107a2905959f0f2f643cc10b83a45f1126f6a567451d22559d4d3e83a8beca0754d61eb72dd1a38a0b34a338c83b1bdc07ba8355c5b757368cfe086593538d63f7d70b70eed04e82fedfc2403f207968879b5eeac1a757c8fbcbe861f6d44632b7b4504b351f8c08036ae96b64b4b879f2bc999435e05948620cc122af4f763377e3597f44b45486a835cd4d6e289a18fa536fde6845db56bc6289760841fec2725ee55f15bfccdb03e489257f0f476268c3a3cdc6beb7c9a1912961525eaf4e85b562ceb7c20de1279f27b2be87dc968ffdb724f611debb4c41e431610c684650ecd6ca13d87bfe51da79bf857efa9c2a9dc419156df22ed9155e10cffe4f3516bd2f17df03c0c6b598158be47b7d9170d47347ca5433db1e46715dbbab02bf4b6379c5f8b313c720f0db7a71bbe4f3583a55a689287ddf0c75accf55d1cc3792a8f30985823417eb4073525d7aad8cb0778b19076cd4b26bf9fb19714cf016b3a99151db41d6f2fb0441eaddaa22aa2f2c7c374e2c931ab8be686e7301593b9fb73ca1d78fb2748dd10e9f2b62c846898540d3f2150c7137df3daa0ab50908a4896056cb42e37ae085fcf4dfd04d5bfd24b06a2b214748f5635fe0a8cb89adc71e3abb20cac91a5b990080bce96c351d4078b9babeb884b23e645d702af712a89ec23a8b2527f7ae7f890d7d8e7a888a0962c7758785fc61de57518e0c46b2271aea951aed8a15515005affc1af857b4dac3fea3ec6e07c3124097c0b6e161cb808dab0237d6b10dfa7fe430e973f7037ab0649f09574ef6892df98d27699410b8ae30f7c82ce64d9c2d783d6e06908e23a5f778c9a955e8d5f8c4d23005bd06d97d20b8169b38ef2c047ebed05e160d5910d66ffe9673403988e9a8a7b276804ee3aa08f2b69f4e5cf731aa8ede60f6230c02592ec53e739536a2f2b9c5bf1e94f52ea340970a50fa1f7cca841d91a4037321fe230ade46c9e6f3c9250304104e70e58ab82a4ab3dfcfc39461457b6a61b36f9b79122c261cbcafcf321ce31876bfbc6d0e4460ba7f8cd3860a42f265177d2b80677be45938f6914e7b50ece66f697887416288e1ea03d761d66eaf76cae8b053d2b72ba67ab2570dac697e0c16a87bc0b1ce96a6ebc5ff1e9d4d715f82a583bde0f222f2f12be0f1982fc4e4da44c43c1b07a9297049b27887c39431d5d1c39ee9f706fbacadfc768ca41d4dbd3a84fa398f5eedfd61dc3f4fc275917a214874ecf2ba7e618ac02ac18fa979861f098a82c5b7641bb3faa48c9a0ab0d5f56cd386d2c315fa2b4c0276c57009e92c91858d45b17ee7e8941d9f457637a9aefd9b77f303034b1491c9ba9bd13a35554f63d41505e387b3c49eebcf32308c85bf111dd2e2091b4d42c5ee9de533a7028aff4eee9ffd35bbe7129879a5685849b2d17a7f7c40f82a97889013e77bc66d496d63e15b69562cd5629bd64e1196d99599ce8a58eb40caaca3ea8336cdb085087b1cec12c5a7fb6f4079e186be84d06239793680d40b48362916aff50f21bd30a9e5d7a1a27cfea86e6b21b9ce46a1ba4cc218688781c2d8bfbf3aeaae1c6aecb128ff4857005baa176fe458f711bcde70684053712e94229321b18ef61f2623804a9dffb4fd46baa99db993242aebbf13e1d1bb41921541210e21abc35f06ec35ff6c205f427269ba09065394afe1a45b2ee22d8676abbbc5225d4c50b4ca661437afe23008cad36127d1a82b4b0cc44dfa48553f6b705c6b5061508113378eb1c8bd213e004cf7d0a34f940840a95cb9c58c613534d8aea1d857983a5e87ecf26984cf766075f41ba621b7ebefe86c6c78422725504af5fb659fe79c827c634dc3193d37ba045f0de866ee97801f21818d48132e8157cba15d5df9fc7e413e717ddaf00060dfcf406c08150c8d4d3e9825c931d9980d4d24bf58072837bf28fbaf4af9538a5923ae2d6eb0b596ccbdbe6854a5c20a58685780eef06fa08c7d903fffe73f372eb3bfe09310119ba3e303726d90f1e0de3753d8619d6e69ef28da1a8bfa2c8a458ec8e5a253809423a4d62c0567cc0d3fe9f55e265311cf33dbdeeb8dd02be853eb0a8798efc671fd3e5306f22e44bbc8f494f1d04b2f4a55964612b1ad71f36514e9065b122576800a14838cd21c6a4d4f6d9614587e34d22fe9fe760a481ec8f54de64e8e42e85b2263e56c881b8af13eafb7785ced403e4b40817e25afd814e8e0cb97cf7422418e8120a6235885fcc94dabce9a959a0b1e6f6f2d4649ea6969631b03c652453012b8f0f91ae82af7685f545484db7ad6baa17a813388066e6fe8fb0d6a9d02cc58f78607363a1d36fc0e32643c603b9f48d9ab7a1a4cbe7999e23807ac753f03c5f7c6bfd3f3876d58c96fd5a332cecc4cc8db130f0cf0884da274922fe40f233beaf283127cee62044d03d0516fea81d4cdd5755d6827b75659dab71e64ceada4441f3fffffc00ae60cbc158f0eec957d89f106a62c8a7671924d85f5751a09687818cef23f863487230ab21e712b63b50a81a3ec158fd3085874eaa8075fd92d5dcc2cfd81f3d98d18aa329e430c4f705a13c79d90e65e52658060a3a8f9058c4589d7be911f358039421b19e3abb0f3563e42e424a57dcd6d9c3fd6da3ef6c4e4fbd0637a21980a41bab33e24d932227b3dc0707b5d1e130e810b4073c3e64333e3a2a683d2fb6ad487e2aaed1a651a1c11c33ff13e7d44e57420fcbd805c20d522bea99ba3891bf73f32032ab67d7443d2b7c034d257aec5d185e2307f0c6472920deda8193dad0cfb7cba67a3381fea35ecd69cd5111032bcb385e83ca7403c217b3867c1900ed747cb26bef14c3ee343067e362e73c9c7a0cc272ab1d099f0f681f8870ac1ca4af3ebf35e6442e3830312fb7d8414fd6cc65e33b394cf39e210e96ff95478c9677ec7fc773b3ab818eb9d58e5d4dee415b199f910404ba3774c410c5859daf24436cc8fedfd904b9ff63648b1f7341e879554418f63b5c577e3115e4f71f4ea6381f5be0bad6de0c35a0619824317e6f19049f52780fc9607e8c5dcfb6c9cceca87ddf981b20f27c5b109517e98bbdc356c5756cd2ea8e73bc2341cc4ee08cbefb30eb597c89fcc9003680793050dec36fa0685495bc935653deda0ea2c3ab7021a56615c0639aedef3c595f3168925a81a651abc34fc30a5f26b26f4d3d1204396f814c1878481ebb63bc8f6e05a7247def34066c2b74304a317fa06a3863c389c43fff5f7fe997404068ee81057643fdc23cf0381a02dd607158ee9df8862003c17cd1d35689d0f576d5197b1abd1a41e9d2cca25e07fd758ea9d18efbbeba02b40a8e6a5bed4947df36e96cfcb6c40c92b41aaf76609646ee975cfe67e572839b4c56cf219c0471acf26ed237a4c5e4e2afd1de5dacbadf057870c5bd13091242f8d0276f056a9cf8656c259bf014e2a2a86f2863e54b09c6f9b70b318f51f51853a017d22ff267da759c241bb75672f8ae9f48e8d83c86167e3292c0f4fa7ea382a5f7b7e457326ad68fe094049380e5ac92542496c9280994968ef805dad8ac55234224f184169315d647117b7946393b5941ea85aa4aa60d76b7ffb52b27ae21ef7e337fa16bb634bcc5d514c0ebe7f737e025c702b81f1aea826bd645fbb978b723ba18a62c2ddb264fbf0bb1eb4c2ff0ac575a5be8a8fd41227c082196f455b1e1763c4c2ded620cb8bb9828b6d526b5ab63eaecb16757a78589915602bbc89a6eddbea0c766966fae4e4eb1d876d675a3c2cfbd0308ac87b66ede1cb264aa238589df3b74b483c5ceb40e6e12a1d3fce4d1a67a3ebdcdfaf9d4c03371bba188383d2de4be6e52192a5d29f8a7392149eb74399e238dcf6cab62c1ff75dee9696626e50ddce7ae927401301dff1e05fab5b11852e3802a9d49ad70ad01607db7c34690e1e9bd118e124ccb6ca05e09281dc0a8ada7686f64b6d3c076ba3182a7e33ea385e0cb2f4dc796c324cb8ff2b7ac1199c37035b4e7807155466641fdb7ab8b13a64f117e4c5314c657ec5d553c06f6b467dcee8d185351b335217c884878f47615cfa5286b56d9a07610cb0ab1dd55b6867d9d8dcc452c8f21fcf6c4862584fb2b2d2a45e8ad0bcd8f184fbbf0b471ab1f1220553468346e42835558a9dc2d93b533d81227a26389100685315c818d7754ba1e8612c17d7e01221d303e4"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:52:50 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x40, 0x200) bind$netrom(r1, &(0x7f00000002c0)={{0x3, @default, 0x5}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2049.937942][ T21] attempt to access beyond end of device [ 2049.943637][ T21] loop3: rw=1, want=33721, limit=112 [ 2051.176726][ C0] net_ratelimit: 20 callbacks suppressed [ 2051.176754][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2051.188273][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2051.194110][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2051.199940][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2051.322052][ T21] attempt to access beyond end of device [ 2051.343333][ T21] loop2: rw=1, want=35641, limit=112 22:52:52 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xc2d9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x5}}}, 0x94fa, 0x2b4, 0x3, 0x4, 0x40}, 0x98) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2051.409187][ T21] attempt to access beyond end of device [ 2051.445937][ T21] loop2: rw=1, want=37689, limit=112 [ 2051.491770][ T21] attempt to access beyond end of device [ 2051.503912][ T21] loop2: rw=1, want=39737, limit=112 [ 2051.515120][ T21] attempt to access beyond end of device [ 2051.521310][ T21] loop2: rw=1, want=40993, limit=112 [ 2051.816679][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2051.822557][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2052.136691][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2052.142574][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2052.148483][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2052.154262][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:52:53 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:53 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1000, 0x1018, 0x401, {"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"}}, {0x0, "4714f73503c803e943ee543bd6862471cc2c916d4e8f6c1de8bce789b7b1f909419522a92f"}}, &(0x7f0000001600)=""/108, 0x103f, 0x6c, 0x1}, 0x20) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000016c0)={0x0, 0x21, "f36bcbfd9ab096ff304d204e77c33c60dbe12b2a43ddac9960de2b5e7244cbabdf"}) r2 = gettid() r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4080, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200000, 0x0) execveat(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000140)='/dev/vcs\x00', &(0x7f0000000180)='GPLsecurityem1\x19-%vmnet0ppp1%\\vboxnet0:selftrustedsecuritymd5sum@mime_typevboxnet1\x00', &(0x7f0000000200)='}mime_type,em1keyring!selinux\x00', &(0x7f0000000240)='/dev/vsock\x00', &(0x7f0000000280)='\x00'], &(0x7f0000000580)=[&(0x7f0000000340)='*posix_acl_accessposix_acl_access*em1}eth0trusted&vmnet0*selinux\x00', &(0x7f00000003c0)='selinuxselinuxcpuset\x00', &(0x7f0000000400)='|\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='locpuset-proc)lo\x00', &(0x7f00000004c0)='/dev/vcs\x00', &(0x7f0000000500)='/dev/vsock\x00', &(0x7f0000000540)='/dev/vsock\x00'], 0x0) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000000c0)={0x0, r4}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x1000000000016) 22:52:53 executing program 3: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x210100}, 0xc, &(0x7f0000000640)={&(0x7f0000000d80)={0xffffffffffffffec, r1, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_HMACKEYID={0x0, 0x3, 0xeb}, @SEG6_ATTR_SECRET={0x0, 0x4, [0x2, 0x3, 0x6]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) syz_mount_image$nfs(&(0x7f00000002c0)='nfs\x00', &(0x7f0000000300)='./file0/file0\x00', 0x800000000, 0x9, &(0x7f0000000c80)=[{&(0x7f0000000340)="e0cc44b268c8614fc2d44dad50270a30784f2bb7f3efb5e605de6bdf4b6fc6c7d152971e40792a850d52ee23fd5a62c150d5565e08c259809d6e4d6217d6624bad6c24dbbbd2de5f36bde89add8f99eb9824afc04c5f29a88d2fae060f7ece219b5cd820f62e484f6439604f21ce6f245c2048320c5c87794d0b45be1e11bdf878c0e5cebbb3171d4979c0180175be81fd31916285be4525b607fdca14391ae5b4ffec81a29d915d474d75d9f8660eb90b67aefa01d3f4e8131c244cd27c84b1", 0xc0, 0x1000}, {&(0x7f00000006c0)="3fab48908791c718611bb7cdf55e9db06b4a70bc21329a10e8a168c4b031b5fbb8fb93538aa83a0ae2986d296d63f02ee9eeecdf9f93ffe53265c2afcc8fc1acf69d8677342ffc4834a9a8c41e2797536ef761731bab8abe6bf7f1a5439d6b0ff534250b8a400a542a9f19168904bdd643bda213a870fc34ad03f8206d42589677c8101895907dac25de9b8bee21a73c8b", 0x91, 0x10001000}, {&(0x7f0000000780)="7f1359c2acc4e9cfbfce5c3fceae2a823e02fd00f900049421576f381ee7b74bdcb8a24b35452f9375947860b3c4484cd5980ccf0b0d567af90c24b20c680981dc5f72b7214c6ae7a8a661b86b3d78a613f624ca0c72cd2e081691a86f149b985f367eecd4fc31f6c8cfa2566a3039ed8ce10057be4959de8409dacedb0ac5a2bf534f751d8222538bf98bf5e14e50", 0x8f, 0x40}, {&(0x7f0000000840)="9acf5b983e565d2a7c2cc4e78dd5b7477bc6cecbf1700567758dcdad7f1e7d0f0bf3792a1f3bf9991e0ae3f7066c3611a1e4b9db4dc33c31b38ee756466f696cd4ce12b7e70ae23267489a72cdca82612ffb8b9ac5a57a07ee2b44891798887e6e55704af1d74664ed3de37c8a383eb90f375e5829e1dc75456619372e8c10589586a0afd6edefa4acc3104fef1cfe5ef6e2a7448e7cf07aa45c56", 0x9b, 0x3f}, {&(0x7f0000000900)="848f801a2a35cfcab7a5eae614e5a54962cdb469ab85eca165285ce8b5c941be908c33a7ee625a5d2a5b939c9d2d72b1f0a221f71fd8848a32921b42b4c047633b39ecec05aa2b7918d64acf9d05070b5f3d9083e8e5095673e8975b6d70ad8be262f1edf0b937e2168605d8a953dac2463858311e6440e10cdaa734cc2c54c11cd28272d7a11e0c59c7af05a0d30cdb45d708eff7bbbb4f41762857443bf5a17db587ec6268899f52d9c2f3140ed9f45055344f9557778460baa921f42fe0be0088544797b0d83b279e0fbdae6b9ea4f3999c658c84915274ebab596499f6ca4f1b872012", 0xe5, 0x6}, {&(0x7f0000000a00)="98a0daca4ef00379a8699a530d9130a6cff3165547879c5ebcfdf3cddaa9b0f296736d67c3201a6e3cd1715ab849abf1cc1de3cf32e75d347c044798664ef71bb61209106cbb0e72aaec62545e2eefb4f30c659099a7edfdafc224b9d0622690d72c20fb278385c185127936866e5144dbc1b7137469bf6ce35a9c2ba3ddcf3f02cf2918c85b0904e414844354e3b40eee3bfb4ad7e2d0b8689c", 0x9a, 0x7}, {&(0x7f0000000400)="6e82bff1", 0x4, 0x1}, {&(0x7f0000000ac0)="56b3a5330f7aa1e8e60b79c8434631d9d163c9b450d031d7efce14e4dcf80936acc4755dc270a6174bad7fb07c5a3f0559180225e8c2fad22e06f0cad5645d5759a5ad1bb02795bee0ed32ba6f707c97beaafd4c3e1d75438d8b4c3aaef908bc7ed5c06c69ab57c2d431226bc143db681d90f360a25b8edcfac28e8b8901870b6662281f4806bd5e3f098407ac204efb92f602bb292b750db10f5da39b963c762576a78da157c1e0fe5c5fba35bb3c52705c8de6979b51f40d8921915a06d4bd512d671c511912a48aa89eaff654dd31dc71556529810a19e129d26af1", 0xdd, 0x733f}, {&(0x7f0000000bc0)="a4fc03f8663f71ae9fe87f513b61ecececf8d9f090ec2683a7f98085304cd2bef8dd42c6b97e5111b3a182423917860025768e61ad4c9da5c169bf3725fe5b143ae1bb049e14db1fbcb29c1eb09d33ed4fa3df9d15bc3b4cdf014cce523d8417a4b178c76cf471b71e09ab4deebd03db95e8dc2a762bbfbe0ee602418834bff3f91578afa337995a9641c8d57a429fa8170881b8c238c83b22c7b1e78f83198f654f0a253b623caea9761fd68ae7abb1f7db6f118c3e72c2e7", 0xb9, 0xdd22}], 0x0, &(0x7f0000000480)='user!wlan0cgroup/cgroup\x00') fdatasync(r2) creat(&(0x7f0000000500)='./file0/file0\x00', 0x40) 22:52:53 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:52:53 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:53 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x6000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:53 executing program 5: getpgrp(0xffffffffffffffff) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0xc80) statx(r0, &(0x7f0000000080)='./file0\x00', 0x400, 0x180, &(0x7f0000000180)) clone(0x10200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dac5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 22:52:53 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:52:53 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8a0fb008f9f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:52:54 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x20000, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x9, 0x4) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x1000000000016) 22:52:54 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) connect$pppoe(r0, &(0x7f00000006c0)={0x18, 0x0, {0x2, @empty, 'lo\x00'}}, 0x1e) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB="f66e42d2dd3f7b9f91561afbe56bdf2be21aa7e0a1e7f11849c4987ecac3f36ed35721da0d59a9fd3b80e611d74ffb96d93217b316ce98793ba62ce952469ad54ea7489339074c7d130de6", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) mq_timedreceive(r2, &(0x7f0000000700)=""/94, 0x5e, 0x6, &(0x7f00000007c0)={r3, r4+10000000}) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0/file0\x00', 0x7, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000200)="f38f4a549180d0e2a63bec6a2610be865873cedb0c7f57e46daeda68b9f65438fface32621db6ad393c75dee761e4f75beb896910cdfc643d81e5cdc447a73e68d90f70a5e40f3f154589a345a5fc22bb4f3", 0x52, 0x9}], 0x800000, &(0x7f0000000300)={[{@shortname_lower='shortname=lower'}, {@shortname_win95='shortname=win95'}, {@fat=@discard='discard'}], [{@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}) r5 = accept(r0, &(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000880)=0x80) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0xb4, r6, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @local, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x1f}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'bpq0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) r7 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000005c0)={&(0x7f0000000480)=[0x24, 0x800, 0x81, 0x979], 0x4, 0x2, 0x9, 0x59d3ac97, 0x917, 0x2, {0x3, 0x10001, 0x0, 0x1000, 0x0, 0x8, 0xffffffff, 0x2, 0x1, 0x9, 0x8, 0x3f, 0x988, 0x1, "0af1b8f6cb8a4ce83b3de48be3f7ce8199e890e3b06a2add656f950f3bfbf79a"}}) dup2(r2, r7) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:54 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:52:55 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x60002, 0x0) r1 = gettid() ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={[], 0x0, 0x12, 0x7fffffff, 0x7, 0xc7, r1}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:55 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) socketpair(0x19, 0x1, 0x7fffffff, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x1d, @multicast2, 0x4e23, 0x0, 'lblc\x00', 0x0, 0xffffffffffff2655, 0x56}, 0x2c) tkill(r1, 0x1000000000016) setitimer(0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000080)) 22:52:55 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = msgget(0x2, 0x0) msgctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/235) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x3, 0x101100) connect$caif(r2, &(0x7f0000000300)=@rfm={0x25, 0x8, "b7aa432cc13543223eddc06b2fc303d8"}, 0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x15}}}, 0xd82, 0x4d1f, 0x2, 0xfffffffffffffffc, 0x4}, &(0x7f0000000240)=0x98) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={r3, 0x4}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r4, 0x1000000000016) 22:52:55 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2055.320864][ T9577] attempt to access beyond end of device [ 2055.332288][ T9577] loop2: rw=1, want=36257, limit=112 [ 2055.355637][ T9577] attempt to access beyond end of device [ 2055.361739][ T9577] loop2: rw=1, want=38305, limit=112 22:52:56 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x85) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2055.372043][ T9577] attempt to access beyond end of device [ 2055.377959][ T9577] loop2: rw=1, want=39969, limit=112 22:52:56 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xe500) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:56 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r2, 0x0, &(0x7f00000000c0)='}%-#wlan1\x00') timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) tkill(r1, 0x16) [ 2056.296674][ C0] net_ratelimit: 20 callbacks suppressed [ 2056.296685][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.308210][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2056.314065][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.319863][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2056.325700][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2056.331506][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:52:57 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:52:57 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:52:58 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xf000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:58 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2057.362138][ T9188] attempt to access beyond end of device [ 2057.380714][ T9188] loop2: rw=1, want=36289, limit=112 22:52:58 executing program 3: mkdir(0x0, 0x0) r0 = gettid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)=0x800007) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r1, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000240)=0x5) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2800}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)={0x1ec, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4edf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9522}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_MEDIA={0x40, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0xac, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x468c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000000}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10ab828d930f20e0}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2057.416710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2057.422541][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2057.423986][ T9188] attempt to access beyond end of device [ 2057.428378][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2057.439790][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2057.453865][ T9188] loop2: rw=1, want=38337, limit=112 22:52:58 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x5, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$P9_RLERROR(r2, &(0x7f00000000c0)={0x1b, 0x7, 0x2, {0x12, 'md5summd5sumvmnet0'}}, 0x1b) dup3(r0, r2, 0x80000) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfe17) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000400), &(0x7f0000000780)=0xc) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="e6bed912381cb3991a198ba4c22f43e2456cfc1d1c576d7bb185efb5ff4476e7f662810ed16a11d1a4cf689f678d97a49079", 0x32, 0xfffffffffffffff9) r4 = request_key(&(0x7f00000006c0)='keyring\x00', &(0x7f0000000700)={'syz', 0x1}, &(0x7f0000000740)='SEG6\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000480)=[{&(0x7f0000000400)}, {&(0x7f00000005c0)="55f994e75b6693e15ca0f90fce70c8af6243bc41860ce2770d4ce1fc7a3dbe52cc2f7b0386cc3c802127ff4d32a01a1dc07ad276ff7c9bd243bcb4051241e043029d71c1d33bbbaf77f4bb34e480a5a5ba731da1c7", 0x55}], 0x2, r4) [ 2057.469702][ T9188] attempt to access beyond end of device [ 2057.476787][ T9188] loop2: rw=1, want=40385, limit=112 [ 2057.506513][ T9188] attempt to access beyond end of device [ 2057.512366][ T9188] loop2: rw=1, want=42433, limit=112 [ 2057.538876][ T9188] attempt to access beyond end of device [ 2057.544619][ T9188] loop2: rw=1, want=45617, limit=112 22:52:58 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) sysfs$3(0x3) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000300)={0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000340)={0xca, r1, 0x2, 0x1144}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000200)='./file0/file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) lsetxattr(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)=@random={'osx.', 'vfat\x00'}, &(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x12, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0x8, 0x0, 0x2}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000140)={r5, 0x1}) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000240)={0x0, 0x1, [{r2, 0x0, 0x8000, 0x2000}]}) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:58 executing program 0: sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000140)={0x4, 0xffff, 0x100000000, 0x2, 0x80000001}) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) rt_sigsuspend(&(0x7f00000000c0)={0x80000000}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:58 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x2) capget(&(0x7f0000000040)={0x200f1526, r0}, &(0x7f0000000080)={0x1, 0x4, 0xec46, 0x8d1d, 0x0, 0x10001}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:52:59 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x100000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:52:59 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000240)=0x8, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:52:59 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) r3 = gettid() ptrace$getregs(0xc, r3, 0x1f, &(0x7f0000000340)=""/97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./file0/file0\x00', r4, r5) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:00 executing program 5: r0 = getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r1, 0x2f) getcwd(&(0x7f0000000140)=""/229, 0xe5) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 22:53:00 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:00 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x10000) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000200)=0x80) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000006c0)={0x14a4, 0x41, 0x120, 0x70bd2b, 0x25dfdbfd, {0x1}, [@typed={0x28, 0x41, @binary="3987deba0e27dfe258855ba08f693ee4ed711dadde35f46b8604cfc569ff0407aeec4aa6"}, @generic="3b8ba70792704df3bec19d0eb2f0b474c029e7a755ff59c3dc7da302040f8da7248d66879f2554068a6530600077c428389c9aa41739217473009203b4365ae0ab11db87e70d52ef07a3d1e993d92d65e873466ad520a69046", @nested={0xcc, 0x46, [@generic="edac9cf05b318a98e81a7401cc620041c5361716ae5596ff8db45c04c366e28a9acc294811cb72d5a606cc7a18ba7a5674247ba90f014fa092c8329cada76440c5d50d756dc7b69a75820e5d623976bb21af85fb3ca40cac3e8371217f45926a03f46399103de0dbde03762aa7dd0a75573df15fbd01077868c888fa", @typed={0x4, 0x65}, @generic="cc142130b550f0f71052494fdf3ecc87eaa24e9347ff0f8d7a27cd1d8488e7255e2d8c7127406b99944e6c567dd0eef670d184f3e3c3c83f966dab9dabbd76f578dc8134835db8"]}, @generic="6991f4562682ce12749307cfd07e5dae3d83b689a9f23df18fd2152dd82061704d3475a8201015bacafdf342944a5a4389174ab8a5e9bb4a4ebd63509735056ede453440219b0e6294f101460edca046fb07b197814ada3c437c5a3b057a461d20ecb4ad9e6f7d0be44678115f8947c3a0b0995f272a5eba8bd5aa6cca4550263306bad2e45e34ef35a85a92916813ffa8fa726c49276378278f5390aa895e4998324fb4ab05bf49cedcf481ba81b2eb72d58e39a03975b57200800643edc94f774fb87828f021e5b837576209d465a642a2394f837fdbd92e190d290bb038944621087b4deadab1b04d74e3edc9", @generic="d6bf5199e2a3344ef03ed539ed791d4b66acd29c584efe3821c4ed9c9cc0e20b1670294b9108d2e13afd06d4d82c4af9e3c5dee3e47de4f92143622197e1fe7fff252a1de039fc621ffc4d0671c7fe458d27d85fca7721d1ede2b856229b36cfdebcf8695937a807ac2b23bb81dd334ab03d0b782d5bb5c42a8aad2a0d1e1807b4c5e11386e2c476b9671fa1a6288f7ef8f64cbfaad62b377882465c2576dabf1c202ed3b1c03530fbdf72a840bda9ff36afcf700c8e4503c15c7cd9bb55d11f3e381c2fc3bf3a9f", @generic="2ac983028b049ec1d54ee1daf537d58d7bb1b47feaecd1c6d58a2997a0d9e7dd5d457971528025ab7002c56d43320e70c31bed186f25257fa6f5c8e527078a6643abcad9f6319f474be007766eb06183b29dedacff3120ec19696d6f2eed72b4e5acef0a31eb543cb135345766293a", @generic="00fa687d6bac03411209552062aefcb5e54d55fdd013218eb1bdf045e3c58c9cde739cf04a9dcdd8a6f956554b9b8bc61004c7c435e37a386bac3b0e7cfba118301ab60039e7feb51feb88d95762", @generic="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", @nested={0xd0, 0x7e, [@generic="ed6ecf2be9565d292f60e789b78827e47fcbb3d42606f4c4483042ec6c41b873476d0de3b58d2ad4975e", @typed={0x4, 0x43}, @typed={0x8, 0x24, @pid=r0}, @typed={0x4, 0x38}, @generic="c836778576c5b8103ea4e57c3e3a1adf4601ca528923c6b64d8f520a30a687fb7684ec4c78ef630de7ce509c68f8f0d2a890feef710df01a3f52ba7da20dbce7fab5d87716dde37334feb10a050f70c4d10ab84cd172b7e4880f0270d832640c3b3ce6d731be63663a94f3e476253207df4ed4af7a83fa91117e7a71d10b934fee71a2f2b50e7b62", @typed={0x8, 0x6f, @str='$*\x00'}]}]}, 0x14a4}, 0x1, 0x0, 0x0, 0x80}, 0x1) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="740000006c74a4cafceacf066160365bc7a2f0e662eb991513acbb9b5706270c9632f0c080d8c58a97a570b10acdedd679dc9ad0a03951fe0c5579de0698a202f22acc229c3b0e9db49f60f9cd5ff7c20ce3706aa7f537dbb96c501f5d624fd78cfc329f71e1f9e1fce98db526c539", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f00000005c0)='$*\x00') perf_event_open(&(0x7f0000001c00)={0xffffffffffffffff, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0)='TIPCv2\x00') 22:53:00 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f0000000040)) tkill(r1, 0x1000000000016) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x3ff, 0x1) 22:53:00 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x200000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:01 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000200)='./file0/file1\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000000c0)={0x1, 0x52424752, 0x3, @discrete={0x1, 0x81}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:01 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:01 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x400000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:01 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = msgget$private(0x0, 0x0) r3 = getuid() getgroups(0x3, &(0x7f0000000040)=[0xee01, 0x0, 0xee01]) r5 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) r7 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) write$P9_RCREATE(r7, &(0x7f00000001c0)={0x18, 0x73, 0x2, {{0x3c, 0x1, 0x7}, 0x1e36b197}}, 0x18) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000100)={{0x0, r3, r4, r5, r6, 0x10, 0x4}, 0x0, 0x8000, 0x100000001, 0xaea, 0x8001, 0x0, r1, r1}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:02 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x401, 0x40) listen(r1, 0x80000000) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000002c0)={[], 0xff, 0x4, 0x5, 0x7, 0x300000, r3}) 22:53:02 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xffa9, 0x200000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000006c0)={r2, @in={{0x2, 0x4e24, @broadcast}}, [0x7, 0x1, 0x1000, 0x9, 0xffe0000, 0x80, 0x5, 0x200, 0x1f, 0x1f, 0x9, 0x7, 0x5, 0x6, 0x9]}, &(0x7f0000000540)=0x100) r3 = syz_open_dev$vbi(&(0x7f00000007c0)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x2, 0x20, 0x7f, 0xffff}, &(0x7f0000000500)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000580)={r4, 0x7, 0x0, 0x100000000, 0x800}, &(0x7f00000005c0)=0x3) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f0000000100)={0x1, 0x0, 0x40000103, 0x4, {0x800, 0xc7b, 0xedca, 0x7fffffff}}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000180)={r5, 0x400000000000, 0x30}, 0xc) r6 = gettid() pidfd_send_signal(r3, 0x8, &(0x7f0000000200)={0x6, 0xda7, 0xf80}, 0x0) r7 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x400000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xc0, 0xc8, &(0x7f0000000300)="a6eec62300244874816a9331a8d0b8637d9af5abe891e48e41afd45669fd68b47eedb9994e3ce15a9df1f2039e0aba208ae9385afae93bbde0717b36cc8751705fdd25f01afae87239cfe66774324421484c5d26b75bb15e7bc91c5502e0f77841aaebeb4cb3909438a66644df9dba7e7375bdcfc44562ad4458b035114143cd2f1ba93fdf02d1fb4b99dfdbaa491e5c7a49fcdeaf17bf73d64aaf5362539d9022ec744074e6a6e52655e9cf6de265fbe0a5e7f16ef61ed9f70b945c454e3ae3", &(0x7f00000003c0)=""/200, 0x6d}, 0x28) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000000080)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r6, 0x1000000000016) 22:53:02 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x1000007, 0xc0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2061.576662][ C0] net_ratelimit: 20 callbacks suppressed [ 2061.576670][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2061.588151][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2061.593958][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2061.599773][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2061.625589][ T8167] attempt to access beyond end of device [ 2061.656488][ T8167] loop0: rw=1, want=130, limit=112 [ 2061.775528][ T8167] buffer_io_error: 6 callbacks suppressed [ 2061.775541][ T8167] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2061.886718][ T8167] attempt to access beyond end of device [ 2061.965968][ T8167] loop0: rw=1, want=131, limit=112 [ 2062.008894][ T8167] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2062.073272][ T8167] attempt to access beyond end of device [ 2062.112140][ T8167] loop0: rw=1, want=132, limit=112 [ 2062.148765][ T8167] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2062.216745][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2062.222615][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2062.229570][ T8167] attempt to access beyond end of device [ 2062.298204][ T8167] loop0: rw=1, want=133, limit=112 [ 2062.341556][ T8167] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2062.358329][ T8167] attempt to access beyond end of device [ 2062.363984][ T8167] loop0: rw=1, want=142, limit=112 [ 2062.369185][ T8167] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2062.377771][ T8167] attempt to access beyond end of device [ 2062.383865][ T8167] loop0: rw=1, want=143, limit=112 [ 2062.389066][ T8167] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 2062.397670][ T8167] attempt to access beyond end of device [ 2062.403304][ T8167] loop0: rw=1, want=144, limit=112 [ 2062.403320][ T8167] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 2062.403352][ T8167] attempt to access beyond end of device [ 2062.422677][ T8167] loop0: rw=1, want=145, limit=112 [ 2062.441102][ T8167] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 2062.486221][ T8167] attempt to access beyond end of device [ 2062.536654][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2062.542488][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2062.546613][ T8167] loop0: rw=1, want=2265, limit=112 [ 2062.548373][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2062.554762][ T8167] attempt to access beyond end of device [ 2062.559177][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2062.627447][ T8167] loop0: rw=1, want=2294, limit=112 [ 2062.632719][ T8167] Buffer I/O error on dev loop0, logical block 2293, lost async page write [ 2062.677778][ T8167] attempt to access beyond end of device [ 2062.683444][ T8167] loop0: rw=1, want=2295, limit=112 [ 2062.703809][ T8167] Buffer I/O error on dev loop0, logical block 2294, lost async page write [ 2062.735594][ T8167] attempt to access beyond end of device [ 2062.760830][ T8167] loop0: rw=1, want=2296, limit=112 [ 2062.766089][ T8167] attempt to access beyond end of device [ 2062.783002][ T8167] loop0: rw=1, want=2297, limit=112 [ 2062.802311][ T8167] attempt to access beyond end of device [ 2062.816655][ T8167] loop0: rw=1, want=2318, limit=112 [ 2062.821900][ T8167] attempt to access beyond end of device [ 2062.845266][ T8167] loop0: rw=1, want=2319, limit=112 [ 2062.861173][ T8167] attempt to access beyond end of device [ 2062.873617][ T8167] loop0: rw=1, want=2320, limit=112 [ 2062.891147][ T8167] attempt to access beyond end of device [ 2062.909468][ T8167] loop0: rw=1, want=2321, limit=112 [ 2062.924365][ T8167] attempt to access beyond end of device [ 2062.954991][ T8167] loop0: rw=1, want=2370, limit=112 [ 2062.975024][ T8167] attempt to access beyond end of device [ 2062.992172][ T8167] loop0: rw=1, want=2371, limit=112 [ 2063.004479][ T8167] attempt to access beyond end of device [ 2063.022664][ T8167] loop0: rw=1, want=2372, limit=112 [ 2063.041260][ T8167] attempt to access beyond end of device [ 2063.058364][ T8167] loop0: rw=1, want=2373, limit=112 [ 2063.063699][ T8167] attempt to access beyond end of device [ 2063.073734][ T8167] loop0: rw=1, want=2382, limit=112 [ 2063.080482][ T8167] attempt to access beyond end of device [ 2063.086341][ T8167] loop0: rw=1, want=2383, limit=112 22:53:03 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:03 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=""/243, 0xf3}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000280)={0x5, &(0x7f0000000240)=[{}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000300)={r3, 0x3}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x100, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x20000, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, 0x0) tkill(r2, 0x1000000000016) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000200)=0x8, 0x4) 22:53:03 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:03 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x600000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2063.109804][ T8167] attempt to access beyond end of device [ 2063.123839][ T8167] loop0: rw=1, want=2384, limit=112 [ 2063.137673][ T8167] attempt to access beyond end of device [ 2063.156967][ T8167] loop0: rw=1, want=2385, limit=112 [ 2063.254334][ T8167] attempt to access beyond end of device [ 2063.370232][ T8167] loop0: rw=1, want=2417, limit=112 22:53:04 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:04 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000007c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0xfffffffffffffffa, 0x100, 0x2, 0x80}, &(0x7f0000000500)=0x98) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000580)={r1, 0x6}, &(0x7f0000000880)=0x8) mkdir(0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000002c0)={0x0, 0x0}) sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r3, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000001900)=ANY=[@ANYPTR64=&(0x7f0000000580)=ANY=[], @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYPTR64], @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES32=r2, @ANYRES16=r2, @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYBLOB="67d8ce94f23014d3a40e5eb9d9bdeba4c2ba9bdcba6d0f32eae349259bc6b40ed3e9bbb2c337cecff2806b911dccc38349d77103d2a5c6167584edb9bfbe320d358f7fe126691b7d198d455544bb098db21859420063cbf43c9d3f312ddc43d79dfe2f0b6c69630ec40eb8af583892daafd2047465248e77ecaab5c3c12990ada545d6a7d57eb96ceca3", @ANYRES16=r2, @ANYPTR, @ANYRES64=r3], @ANYBLOB="b7b07a04257cb87e620dd85d5d3844e53733986b2b7d716bbc38f392f0199706b6ade453dc348b4330778717fdea06d033dddde21a4bc14b15d27c1e2f78d3ade8b7abb8a08994b9139214cef45d2a1971086f36001529e4f2af91176e56a8aa1725b2b2c6c1fbb88ab9cc5360b434cc94e68787dad6b1d0200279e305358f3fa8c9f8bd893324af63292ba7a1528bbc9ffd4959b98307d502d4cecbcb7215a49c1582fd7f29864f8faf41939b53fb1ed5bf03b92288790c802b58307220fd97bd77129b62db18"], @ANYPTR64=&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYBLOB="b018943d371d0bbab46e551f30ac226b5cd7dcc56e3b4a401518651922afbcceec6c60f3913ecb089ad19538fd50b2", @ANYRES16=r4], @ANYRESOCT=r4, @ANYRES32=r4, @ANYBLOB="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", @ANYPTR64=&(0x7f0000002980)=ANY=[@ANYRESOCT=r2, @ANYRES64=r3], @ANYRES16=0x0, @ANYRESDEC=r2, @ANYRES32=r3], 0x1055) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f00000008c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x1d, 0x4, 0x800, 0x2, 0x3f, 0xccd, 0x4}}, 0x50) creat(&(0x7f0000000240)='./file0/file1\x00', 0x6b) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:04 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000240)={0x9, &(0x7f00000002c0)=[{0x80000001, 0x8000, 0x4}, {0x1, 0x7000000000000000, 0x9, 0x63e2}, {0x3ff, 0xffff, 0x7, 0x1}, {0x9, 0x200, 0x60a7, 0x7f}, {0x2, 0x3, 0x2, 0x4}, {0x100000000, 0x6, 0x80000001, 0xf4}, {0x1, 0x251, 0x6, 0x80}, {0x7, 0x3685, 0x2, 0x7}, {0x6, 0x8, 0x1, 0x1}]}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:05 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x200000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:05 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:05 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80040, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180), 0x4) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x300) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000140)=0x1b, 0x4) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() ioctl$TIOCCONS(r2, 0x541d) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000680)=0xe8) r8 = getuid() stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getgid() fstat(r1, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000a80)=0x0, &(0x7f0000000ac0), &(0x7f0000000b00)) fsetxattr$system_posix_acl(r1, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000e00)=ANY=[@ANYBLOB="0200000001000109ccbe1022fc5f839c6b", @ANYRES32=r4, @ANYBLOB="02000100", @ANYRES32=r5, @ANYBLOB="02000000", @ANYRES32=r6, @ANYBLOB="02000400", @ANYRES32=r7, @ANYBLOB="02000200", @ANYRES32=r8, @ANYBLOB="02000300", @ANYRES32=r9, @ANYBLOB="02000500", @ANYRES32=r10, @ANYBLOB="040004000000000008000200", @ANYRES32=r11, @ANYBLOB="08000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES32=r14, @ANYBLOB="08000200", @ANYRES32=r15, @ANYBLOB="08000300", @ANYRES32=r16, @ANYBLOB="10000100000000002000010000000000"], 0x8c, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000400000000000019000000611048000000e1ff95000000000000a4ac0762c7d6b8504d0600000000000000ad6f415456f996692778be60ec291cfc504dcb2b614bdee815d7f4eb33bf833975aae087280aa9c3daea7bbf2423482e514b77ca08ae9aeb57e86e868168c33e3f4a8177e9f08f29cf03b90b51edcb5ec1065bf8fa178faf3bc1b4105ed0832a66f123f486241e253c2afb644e53aa9e839ea63549e89c246513c5d6dd308d607d9ff70e08ad912dae28c98d768f76a99259ee21b4b3c6a695809cb77ce0e228455470"], &(0x7f0000000100)='GPL\x00'}, 0x48) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r3, 0x1000000000016) 22:53:05 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x400000) write$P9_RLERRORu(r2, &(0x7f0000000080)={0x14, 0x7, 0x2, {{0x7, 'keyring'}, 0x6}}, 0x14) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:06 executing program 3: mkdir(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000480)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000580)=0xc) fstat(0xffffffffffffff9c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x7}, [{0x2, 0x2, r0}, {0x2, 0x5, r1}], {0x4, 0x7}, [{0x8, 0x0, r2}], {}, {0x20, 0x1}}, 0x3c, 0x3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r3, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) ustat(0x9, &(0x7f0000000240)) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:06 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054f14f8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:06 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x80ffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:06 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:06 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x4) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$void(r2, 0x5451) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:06 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ustat(0xff, &(0x7f0000000140)) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x42, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file1\x00') 22:53:06 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r0, @ANYBLOB="000026bd7000000000000200000014000100fe80000000000000000000000000000a080002000000000008000600030000000800050000000000080003000100010014000100fe8000000000000000000000000000aa0800050002000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000480)='./file0\x00', 0x1000000000000073) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000002c0)={0x9, "5d560a334f17ff4dd437963e3fb5e44feb80184bd264de717dcf1dcc6642abc7", 0x3, 0x400, 0x2, 0x50007, 0x200, 0xe}) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000580)='./file0/file0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000240)={0x0}) getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000440), &(0x7f0000000740)=0x4) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000340)={r2, 0x20}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000780)={0x8, "51ec5ab8d3a5640b"}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r4 = socket(0x10, 0x80803, 0x0) write(r4, &(0x7f0000000000)="120000001a002517fc85bc04fef6000d020d", 0x12) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000040)=0x401, 0x4) recvfrom$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:07 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) clock_gettime(0x7, &(0x7f0000000040)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000080)={0x43, 0x3, 0x0, {0x3, 0x22, 0x0, 'trustedmd5sumselfppp1cpusetkeyring'}}, 0x43) 22:53:07 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000006c0)={@remote={[], 0x0}, 0xa, 'ip6tnl0\x00'}) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000380)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0xffffffffffffff43, 0x1) 22:53:07 executing program 0: mkdir(0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x8, 0x155900) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000300)={0xf, 0x8, 0xfa00, {r1, 0x1f}}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @pix_mp={0x4, 0x100000001, 0x30395756, 0x5, 0xc, [{0x3, 0x100000001}, {0x200, 0x8}, {0xc8c, 0x3}, {0x4, 0x1}, {0x343}, {0xfff, 0x9}, {0x7, 0x3}, {0x0, 0x101}], 0x6, 0x3ff, 0x1, 0x0, 0x6}}) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f00000000c0)) ioctl$EVIOCSABS2F(r4, 0x401845ef, &(0x7f0000000140)={0x100000001, 0xfffffffffffffffc, 0x9, 0x6, 0x8, 0x9}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2066.696704][ C0] net_ratelimit: 20 callbacks suppressed [ 2066.696712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2066.708244][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2066.714138][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2066.719958][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2066.725835][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2066.731667][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:07 executing program 5: getpgrp(0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x400000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000001c0)={0xf, 0x8, 0xfa00, {r1, 0x3}}, 0x10) r2 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000200)="a1", 0x1}], 0x1, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x2, 0x7, 0x2}) ptrace$cont(0x7, r2, 0x800000002, 0xfffffffffffffffe) [ 2066.748194][ T9577] attempt to access beyond end of device [ 2066.757366][ T9577] loop0: rw=1, want=130, limit=112 [ 2066.789885][ T9577] buffer_io_error: 14 callbacks suppressed [ 2066.789895][ T9577] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2066.845566][ T9577] attempt to access beyond end of device [ 2066.853660][ T9577] loop0: rw=1, want=131, limit=112 [ 2066.873703][ T9577] Buffer I/O error on dev loop0, logical block 130, lost async page write 22:53:07 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) clone(0x23a20200, &(0x7f0000000040)="e89bd19a00860091e9e0179d6f35", &(0x7f0000000080), &(0x7f00000000c0), 0xfffffffffffffffe) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2066.928079][ T9577] attempt to access beyond end of device [ 2066.934712][ T9577] loop0: rw=1, want=132, limit=112 [ 2066.946686][ T9577] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2066.955240][ T9577] attempt to access beyond end of device [ 2067.006378][ T9577] loop0: rw=1, want=133, limit=112 [ 2067.012348][ T9577] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2067.024551][ T9577] attempt to access beyond end of device [ 2067.039660][ T9577] loop0: rw=1, want=142, limit=112 22:53:07 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5701d00000008a2a514"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2067.077633][ T9577] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2067.093338][ T9577] attempt to access beyond end of device [ 2067.114124][ T9577] loop0: rw=1, want=143, limit=112 22:53:07 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x4, &(0x7f0000000040)={0x0, 0x38, 0x0, @thr={&(0x7f0000000080)="317ed8b4d3f52941cfee5034e80a1c8eeb74cfd73ce3d6acb2637f142c86d7050f6abdefe2b9c7ab5a2c774a111a6c1e6bb10ddb02d376005d2a567cbee1960c41023885b2ad0e2da3e754070b", &(0x7f0000000100)="a2f40a857a7f261937d776e147a47452dcebb0cbe6d484534b60b544380a509c66acce73bd7c15692cb57460402111b961189ed42335663d2c4c2b830f01a357d316da007bbc24d52715962bad18051c26986bf72de264e6b48fe726bab49f610d7bb7ef82f47ad2b796abae59e9d6b74271393b7bde7b0c220d11769ed6630d1180ee90588a4581904ef0055c7eda4389c7f300b6d0d590dc41bd83c34af40a8472fc2b83119ac585aadf9bba8d74b99aa400bc92a04289d99495bb1e0fb01b007a846916c47df5850d06732843fa7b3b66d23fe1788d47ed7f8bd0"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:07 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xc0ffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2067.134904][ T9577] Buffer I/O error on dev loop0, logical block 142, lost async page write 22:53:07 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xfffff000) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2067.185791][ T9577] attempt to access beyond end of device [ 2067.204798][ T9577] loop0: rw=1, want=144, limit=112 [ 2067.210139][ T9577] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 2067.223349][ T9577] attempt to access beyond end of device [ 2067.232260][ T9577] loop0: rw=1, want=145, limit=112 [ 2067.244914][ T9577] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 2067.272367][ T9577] attempt to access beyond end of device [ 2067.290943][ T9577] loop0: rw=1, want=153, limit=112 [ 2067.300595][ T9577] attempt to access beyond end of device [ 2067.312862][ T9577] loop0: rw=1, want=182, limit=112 [ 2067.326044][ T9577] Buffer I/O error on dev loop0, logical block 181, lost async page write [ 2067.335140][ T9577] attempt to access beyond end of device [ 2067.345585][ T9577] loop0: rw=1, want=183, limit=112 [ 2067.356084][ T9577] Buffer I/O error on dev loop0, logical block 182, lost async page write [ 2067.372835][ T9577] attempt to access beyond end of device [ 2067.379989][ T9577] loop0: rw=1, want=184, limit=112 [ 2067.394846][ T9577] attempt to access beyond end of device [ 2067.413827][ T9577] loop0: rw=1, want=185, limit=112 [ 2067.421505][ T9577] attempt to access beyond end of device [ 2067.433373][ T9577] loop0: rw=1, want=206, limit=112 [ 2067.495479][ T9577] attempt to access beyond end of device [ 2067.553507][ T9577] loop0: rw=1, want=207, limit=112 [ 2067.595606][ T9577] attempt to access beyond end of device [ 2067.618612][ T9577] loop0: rw=1, want=208, limit=112 [ 2067.647206][ T9577] attempt to access beyond end of device [ 2067.669349][ T9577] loop0: rw=1, want=209, limit=112 [ 2067.688594][ T9577] attempt to access beyond end of device [ 2067.785434][ T9577] loop0: rw=1, want=258, limit=112 22:53:08 executing program 2: mkdir(0x0, 0x8b) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2067.816765][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.822575][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.822887][ T9577] attempt to access beyond end of device [ 2067.828438][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2067.828485][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2067.866947][ T9577] loop0: rw=1, want=259, limit=112 [ 2067.886493][ T9577] attempt to access beyond end of device [ 2067.905987][ T9577] loop0: rw=1, want=260, limit=112 [ 2067.923788][ T9577] attempt to access beyond end of device [ 2067.944022][ T9577] loop0: rw=1, want=261, limit=112 [ 2067.963661][ T9577] attempt to access beyond end of device [ 2067.985842][ T9577] loop0: rw=1, want=270, limit=112 [ 2068.005241][ T9577] attempt to access beyond end of device 22:53:08 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000240)='./file0/file1\x00', 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2068.028190][ T9577] loop0: rw=1, want=271, limit=112 [ 2068.045240][ T9577] attempt to access beyond end of device [ 2068.068015][ T9577] loop0: rw=1, want=272, limit=112 [ 2068.075062][ T9577] attempt to access beyond end of device [ 2068.084319][ T9577] loop0: rw=1, want=273, limit=112 [ 2068.094717][ T9577] attempt to access beyond end of device [ 2068.104151][ T9577] loop0: rw=1, want=897, limit=112 22:53:09 executing program 2: mkdir(0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x4) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) fgetxattr(r0, &(0x7f0000000380)=@known='trusted.syz\x00', &(0x7f00000003c0)=""/77, 0x4d) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x10, &(0x7f00000002c0)={&(0x7f0000000780)=""/4096, 0x1000, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=r2, 0x4) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) socket$key(0xf, 0x3, 0x2) mknod(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x7, 0x101000) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2068.584741][T11073] Unknown ioctl 44609 22:53:09 executing program 2: mkdir(0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000340)=0x0) sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x4110a42db3ff757) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000200)=@buf={0xc, &(0x7f0000000140)="1e6faff6587341470fae40c2"}) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000380)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000, 0x1}) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000003c0), 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000002c0)={0xa3, 0x7, 0x4, 0x1060000, {r3, r4/1000+30000}, {0x7, 0xe, 0x800, 0xffffffffffff94d3, 0x8000, 0x9, "4ee38e9c"}, 0x8, 0x3, @planes=&(0x7f0000000280)={0x8, 0x5, @fd=r2, 0x80}, 0x4}) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:09 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fed8879fd5d5efdf110000120000000a080002000000000008000600030000000800030004000001080005000000000008000300cb609c41080005000500000014000100fe8000000000000000000000000000495cbeaffaedd3010eb5aa086f76c68fa9601da81462969500050002000000"], 0x3}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:09 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000780)) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:10 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000200)={&(0x7f00000000c0)=[0x4, 0x1200000000000, 0xff, 0x0, 0x2, 0x401], 0x6, 0x0, 0xfffffffffffffff8, 0x4, 0x2, 0x20, {0xa3, 0x81000000000000, 0x4, 0x3, 0x1000, 0x9, 0x5699, 0x1, 0xff, 0x6a, 0x4, 0x8001, 0xd03, 0x3, "b2d165f0023934a319ce2f1868b5c4ce4ad84f563cc60362cf5aaafd7af515e3"}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2070.012041][ T21] attempt to access beyond end of device [ 2070.026367][ T21] loop0: rw=1, want=34153, limit=112 22:53:10 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') close(r0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000200)=""/239) 22:53:10 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = creat(&(0x7f00000011c0)='./file0\x00', 0x100) r4 = syz_open_dev$audion(&(0x7f0000001200)='/dev/audio#\x00', 0x101, 0x82002) ppoll(&(0x7f0000001240)=[{r1, 0x200}, {r2, 0x8220}, {r3}, {r4, 0xa2}], 0x4, &(0x7f0000001280)={0x0, 0x1c9c380}, &(0x7f00000012c0)={0x4}, 0x8) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a4f1f000115a803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x26, 0x10) clone(0x110000, &(0x7f0000000080)="64d76e78c232c44e89587f3716f9b81099d1389ca38c875875a7f8ad50850a9240b63fe2d7a5b40bff2244a41ce91095921d581a17466a0e85362257bead35ea98d1ab2ea9b99a6bfc76fab988d6e2d24903d88263aeb456ffcf0155143f6345fcd371894ad794ee22a2a70fdfa4189ba4b1e0a2d5ff1bba8a2bd39f4a599930", &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="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") ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:10 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xf0ffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:10 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x100000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:11 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9948af2f6ae17c836c000800007fcabfd862aed398bde2bcef99205a2a28ec8a6edbea921a0f09d0308e8c73227522390ecee8aec8d28e6907002113c62d425455984139f1dce8e37b716ced7d2bc097a2df355042e42fd8a4c825aefe", @ANYRES16=r0, @ANYBLOB="000026bd7000000000000200000014000100fe80000000000000000000000000000a080002000000000008000600030000000800050000000000080003000100010014000100fe8000000000000000000000000000aa0800050002000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) r4 = geteuid() mount$fuse(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='fuse\x00', 0x51, &(0x7f00000007c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xd000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@subj_role={'subj_role'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@audit='audit'}]}}) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) r5 = open(&(0x7f0000000240)='./file0\x00', 0x20840, 0x20) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(r5, &(0x7f00000002c0)={0x1f, {0x64, 0x7, 0x60a4, 0xa78, 0x6, 0x8}, 0x7}, 0xa) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:11 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000180)={{0x7, 0x6}, 'port1\x00', 0xa0, 0x40000, 0x4, 0x1000, 0x5, 0x5f, 0x7fffffff, 0x0, 0x6, 0x4c}) clone(0xc004102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$cont(0x20, r0, 0x6, 0xfffffffffffffff8) r2 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001440)='/dev/dlm_plock\x00', 0x80000, 0x0) sendto$netrom(r4, &(0x7f0000001480)="325b5a919fed570da724f2540fa3fc0c73f500b540eec9e3c9f1452ebd7f0fc764455a064b4b42b13da461", 0x2b, 0x0, &(0x7f00000014c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc19ee23070002146738dad570f200000008a2a598"], 0x39) ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000080)={0x7, r1, 0x1}) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r2, 0x0, 0x0) 22:53:11 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000240)={0x2000}) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:12 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r2 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000080)={0x3}, 0x4) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:12 executing program 1: getpid() futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x2, 0x1, 0x2, 0x20, '\x00', 0x3f}, 0x1, [0xffffffffffff8001, 0x3, 0x1f, 0x20, 0x7, 0x5a, 0x9, 0x3, 0x1baa600000000000, 0x20000, 0x5, 0x8, 0x6, 0x2, 0xfffffffffffffc01, 0x2, 0x200, 0x100000001, 0x1, 0x7ff, 0x7fffffff, 0x8d55, 0x7d, 0x8, 0xfffffffffffffffe, 0x2, 0x5, 0x4, 0x3, 0xce, 0x8, 0xa7, 0x100000001, 0x1, 0x9, 0x7fff, 0xd120, 0x3f, 0xfff, 0x9, 0x6, 0x3f, 0x7ff, 0x6, 0x1, 0x0, 0x8, 0xf31, 0x0, 0x0, 0x200, 0x7, 0x2, 0x2, 0xcca, 0x81, 0x7, 0x7, 0x5, 0x3, 0x7, 0x1, 0xa3, 0x0, 0x6, 0xf144, 0xe87c, 0x2, 0x2, 0xfffffffffffffffb, 0xffffffff, 0x800, 0x74d, 0x1, 0x4, 0xe9, 0x2, 0x7ff, 0xe9c, 0x2, 0x3, 0x80000001, 0x8, 0x1, 0x9, 0x40, 0x2e33, 0xd0ed, 0xe61, 0x753e, 0x3, 0x40, 0x7, 0x2, 0x9535, 0x0, 0x0, 0x200, 0x3, 0x7, 0x28, 0x7f, 0xfffffffffffffffa, 0x6cd2461f, 0x81, 0x1000, 0x7, 0x5, 0x2, 0xffffffffffffffe1, 0x3, 0x100000001, 0x9, 0x7, 0x1, 0x99, 0x6, 0xbc, 0x9, 0xfffffffffffffffe, 0x0, 0x1, 0xde16, 0x9, 0x100000000, 0x3, 0x7, 0x7fff], {0x77359400}}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:12 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x1000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2071.976740][ C0] net_ratelimit: 20 callbacks suppressed [ 2071.976748][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2071.988247][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2071.994107][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2072.000087][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:12 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:12 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000200)='./file0/file1\x00') readv(r0, &(0x7f0000000740)=[{&(0x7f0000000240)=""/124, 0x7c}, {&(0x7f00000002c0)=""/101, 0x65}, {&(0x7f0000000340)=""/218, 0xda}, {&(0x7f0000000500)=""/190, 0xbe}, {&(0x7f0000000480)=""/20, 0x14}, {&(0x7f00000005c0)=""/83, 0x53}, {&(0x7f0000000640)=""/91, 0x5b}], 0x7) lseek(r0, 0x0, 0x1) write$selinux_attr(r0, &(0x7f0000000140)='/usr/sbin/ntpd\x00', 0xf) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x50d, 0xfffffffffffffffd, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) recvfrom$inet(r1, &(0x7f00000007c0)=""/178, 0xb2, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2072.107795][ T7] attempt to access beyond end of device [ 2072.113471][ T7] loop0: rw=1, want=130, limit=112 [ 2072.134561][ T21] attempt to access beyond end of device [ 2072.148743][ T7] buffer_io_error: 14 callbacks suppressed 22:53:12 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r2 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000380)) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x8000, 0x2, 0x8000, 0x54, 0x7659}) ptrace$cont(0x18, r0, 0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r4, 0x8, "1acb4d", "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"}}, 0x110) ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000300)={0x3, 0x1, [0xfe6, 0x1, 0x20, 0x8, 0xd1, 0x81, 0x7f, 0x80]}) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2072.148765][ T7] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2072.189612][ T21] loop2: rw=1, want=130, limit=112 [ 2072.194779][ T21] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2072.233712][ T7] attempt to access beyond end of device [ 2072.238070][ T21] attempt to access beyond end of device [ 2072.245677][ T21] loop2: rw=1, want=131, limit=112 [ 2072.252088][ T7] loop0: rw=1, want=131, limit=112 [ 2072.261964][ T21] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2072.267526][ T7] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2072.293495][ T7] attempt to access beyond end of device [ 2072.306440][ T7] loop0: rw=1, want=132, limit=112 [ 2072.318301][ T7] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2072.340486][ T7] attempt to access beyond end of device [ 2072.360502][ T21] attempt to access beyond end of device 22:53:13 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2072.387462][ T7] loop0: rw=1, want=133, limit=112 [ 2072.395413][ T21] loop2: rw=1, want=132, limit=112 [ 2072.445998][ T7] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2072.463175][ T21] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2072.536540][ T7] attempt to access beyond end of device [ 2072.548701][ T21] attempt to access beyond end of device [ 2072.584489][ T7] loop0: rw=1, want=142, limit=112 [ 2072.603149][ T21] loop2: rw=1, want=133, limit=112 [ 2072.616695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2072.622557][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2072.646941][ T7] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2072.660875][ T21] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2072.688323][ T7] attempt to access beyond end of device [ 2072.699819][ T21] attempt to access beyond end of device [ 2072.717303][ T7] loop0: rw=1, want=143, limit=112 [ 2072.726268][ T21] loop2: rw=1, want=142, limit=112 [ 2072.742092][ T7] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 2072.753416][ T21] attempt to access beyond end of device [ 2072.772904][ T21] loop2: rw=1, want=143, limit=112 [ 2072.785318][ T7] attempt to access beyond end of device [ 2072.799525][ T21] attempt to access beyond end of device [ 2072.812379][ T7] loop0: rw=1, want=144, limit=112 [ 2072.826265][ T21] loop2: rw=1, want=144, limit=112 [ 2072.838163][ T7] attempt to access beyond end of device [ 2072.853229][ T21] attempt to access beyond end of device [ 2072.877019][ T7] loop0: rw=1, want=145, limit=112 [ 2072.894647][ T21] loop2: rw=1, want=145, limit=112 22:53:13 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2072.906984][ T7] attempt to access beyond end of device [ 2072.936715][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2072.942550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2072.943798][ T21] attempt to access beyond end of device [ 2072.948429][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2072.959841][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2072.964992][ T7] loop0: rw=1, want=153, limit=112 [ 2072.981356][ T21] loop2: rw=1, want=153, limit=112 [ 2073.001530][ T7] attempt to access beyond end of device [ 2073.018160][ T21] attempt to access beyond end of device [ 2073.042629][ T7] loop0: rw=1, want=182, limit=112 [ 2073.052741][ T21] loop2: rw=1, want=182, limit=112 [ 2073.084183][ T7] attempt to access beyond end of device [ 2073.099857][ T21] attempt to access beyond end of device [ 2073.116244][ T7] loop0: rw=1, want=183, limit=112 [ 2073.127183][ T21] loop2: rw=1, want=183, limit=112 [ 2073.141731][ T7] attempt to access beyond end of device [ 2073.151902][ T21] attempt to access beyond end of device [ 2073.175891][ T7] loop0: rw=1, want=184, limit=112 [ 2073.196372][ T21] loop2: rw=1, want=184, limit=112 [ 2073.224612][ T7] attempt to access beyond end of device [ 2073.239234][ T21] attempt to access beyond end of device [ 2073.272379][ T7] loop0: rw=1, want=185, limit=112 [ 2073.283067][ T21] loop2: rw=1, want=185, limit=112 [ 2073.308332][ T7] attempt to access beyond end of device 22:53:14 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x2000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2073.319705][ T21] attempt to access beyond end of device [ 2073.336223][ T7] loop0: rw=1, want=206, limit=112 [ 2073.356680][ T7] attempt to access beyond end of device [ 2073.362358][ T7] loop0: rw=1, want=207, limit=112 [ 2073.363035][ T21] loop2: rw=1, want=206, limit=112 [ 2073.376683][ T7] attempt to access beyond end of device [ 2073.382339][ T7] loop0: rw=1, want=208, limit=112 [ 2073.388654][ T7] attempt to access beyond end of device [ 2073.406631][ T7] loop0: rw=1, want=209, limit=112 [ 2073.411842][ T7] attempt to access beyond end of device [ 2073.416892][ T21] attempt to access beyond end of device [ 2073.417707][ T7] loop0: rw=1, want=258, limit=112 [ 2073.428292][ T7] attempt to access beyond end of device [ 2073.433935][ T7] loop0: rw=1, want=259, limit=112 [ 2073.439195][ T7] attempt to access beyond end of device [ 2073.444836][ T7] loop0: rw=1, want=260, limit=112 [ 2073.450061][ T7] attempt to access beyond end of device [ 2073.455704][ T7] loop0: rw=1, want=261, limit=112 [ 2073.460916][ T7] attempt to access beyond end of device [ 2073.465022][ T21] loop2: rw=1, want=207, limit=112 [ 2073.466621][ T7] loop0: rw=1, want=270, limit=112 [ 2073.466659][ T7] attempt to access beyond end of device [ 2073.466669][ T7] loop0: rw=1, want=271, limit=112 [ 2073.466698][ T7] attempt to access beyond end of device [ 2073.496712][ T21] attempt to access beyond end of device [ 2073.502374][ T21] loop2: rw=1, want=208, limit=112 [ 2073.509444][ T21] attempt to access beyond end of device [ 2073.515096][ T21] loop2: rw=1, want=209, limit=112 [ 2073.520811][ T21] attempt to access beyond end of device [ 2073.524122][ T7] loop0: rw=1, want=272, limit=112 [ 2073.526536][ T21] loop2: rw=1, want=258, limit=112 [ 2073.526648][ T21] attempt to access beyond end of device [ 2073.526660][ T21] loop2: rw=1, want=259, limit=112 [ 2073.526690][ T21] attempt to access beyond end of device [ 2073.526699][ T21] loop2: rw=1, want=260, limit=112 [ 2073.526726][ T21] attempt to access beyond end of device [ 2073.526735][ T21] loop2: rw=1, want=261, limit=112 [ 2073.526774][ T21] attempt to access beyond end of device 22:53:14 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc4, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2073.526784][ T21] loop2: rw=1, want=270, limit=112 [ 2073.526812][ T21] attempt to access beyond end of device [ 2073.543145][ T7] attempt to access beyond end of device [ 2073.565625][ T7] loop0: rw=1, want=273, limit=112 [ 2073.613783][ T21] loop2: rw=1, want=271, limit=112 [ 2073.625592][ T21] attempt to access beyond end of device [ 2073.644298][ T21] loop2: rw=1, want=272, limit=112 [ 2073.694522][ T21] attempt to access beyond end of device [ 2073.736137][ T21] loop2: rw=1, want=273, limit=112 [ 2073.753635][ T7] attempt to access beyond end of device [ 2073.773019][ T7] loop0: rw=1, want=17609, limit=112 [ 2073.902932][ T21] attempt to access beyond end of device 22:53:14 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x4, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2073.968076][ T21] loop2: rw=1, want=12137, limit=112 [ 2074.274580][ T21] attempt to access beyond end of device [ 2074.298374][ T21] loop2: rw=1, want=32993, limit=112 22:53:15 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x3000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:15 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x1000000000, 0x3}, 0x0) futex(&(0x7f00000000c0)=0x1, 0x800000000006, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x81, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x200800, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7}, @NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r2}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000100)={{{@in=@dev, @in6=@dev}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000240)=0x80, 0x101, 0x6) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) time(&(0x7f0000000040)) tkill(r1, 0x1000000000016) 22:53:16 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000026bd70000000000002000000140001f43437155f2cb3b6d470ea00fe80000000000000000000000200000a080002000000000008007cbaac0600030000000800050000000000080003000100010014800100fe80c68ea71d7817b682"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) socket(0x10, 0xa, 0x1) 22:53:16 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598b2a17d44a329cd8d589f1ed8b5119be19a9e87efdf9586a09fcf2bd31badbd7df0d3868e3da265b45320245dc49b4967250f987492b6043a4b3df8e60cc53bdc88992b3bab086adf11490641bdb360c974cf8e13223ad7c33c807540ce15bd23e67e4da932ad61aca35f2191d4e6d1d08e1cd9da961b5515de5fba78f30f97ab0e1820569d8f7ec28393fd8f2d3833ad54cc7e93b104b64a0b59de632b68a59b75b5b822a69972c6867f96aabe6ca78cfb7f74c7cd74f96d291211e382"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="7a000000e9e5153689f3158c1660678bb0e2516c31241d612840e766f972c119ff8b6a3aa5c2d8237fe069276e11a63a79397d51f726cb63a23bcc092ccb511b52de7d6a581d91e607a6d4fe156bc3d331766648e94819052e61095456a4c79796331a5c20251e5c7d49d7c7b5e1973f4c2f6753b66ba1928f3ef26a9d7b08d0a97a1008efa5c33eea1e21adc0888b8242d4c9281ee4217e5cf79613171771a6bdb46342d629c0968cf91eef42cfd1fcd15be47e0f98a09ec485595075b8a21eb312ad903dead9e0f36dd255367ccb50a6a8ad5e72eccf9a511359a9d0c8e55198ac01fbc5e7"], &(0x7f0000000240)=0x82) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000280)={r3, 0xfffffffffffffeff, 0x8000, 0x7ff, 0x36a6, 0x7ff}, &(0x7f00000002c0)=0x14) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:17 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000ffd000/0x3000)=nil}) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') getrandom(&(0x7f0000000200)=""/84, 0x54, 0x1) [ 2077.096678][ C0] net_ratelimit: 20 callbacks suppressed [ 2077.096689][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2077.108273][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2077.114127][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2077.119930][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2077.125822][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2077.131628][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2077.229725][ T283] attempt to access beyond end of device [ 2077.235862][ T283] loop0: rw=1, want=130, limit=112 [ 2077.247586][ T283] buffer_io_error: 38 callbacks suppressed [ 2077.247599][ T283] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2077.272939][ T283] attempt to access beyond end of device 22:53:18 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) r3 = getegid() chown(&(0x7f0000000140)='./file0/file1\x00', r2, r3) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:18 executing program 3: mkdir(0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000002c0)='em0securityselinuxbdev,trusted/\x00'}, 0x30) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000340)) sched_setscheduler(r0, 0x100003, &(0x7f00000001c0)=0xffffffffffff0001) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = syz_genetlink_get_family_id$SEG6(0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$RTC_PIE_OFF(r3, 0x7006) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:18 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000080)={{0x9, 0x0, 0x4, 0x2, 0x8001, 0x1b}, 0x574c}) 22:53:18 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x4000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:18 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050082000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r3 = fcntl$getown(r0, 0x9) capget(&(0x7f00000000c0)={0x20080522, r3}, &(0x7f0000000140)={0x8, 0x4, 0x5, 0x5, 0x2, 0x1f9}) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2077.281497][ T283] loop0: rw=1, want=131, limit=112 [ 2077.291143][ T283] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2077.301972][ T283] attempt to access beyond end of device [ 2077.309203][ T283] loop0: rw=1, want=132, limit=112 [ 2077.314489][ T283] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2077.332830][ T283] attempt to access beyond end of device [ 2077.339050][ T283] loop0: rw=1, want=133, limit=112 [ 2077.344461][ T283] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2077.353616][ T283] attempt to access beyond end of device [ 2077.359634][ T283] loop0: rw=1, want=142, limit=112 [ 2077.365007][ T283] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2077.377066][ T283] attempt to access beyond end of device 22:53:18 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000480)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000340)='.dead\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='vfat\x00', 0xfffffffffffffffe) keyctl$instantiate(0xc, r2, &(0x7f0000000300)=ANY=[@ANYBLOB="6e657720656372797074667320757365723a76666174002030303030303030cee5b640e419b330303030301730"], 0x2d, r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) io_uring_enter(r1, 0x8001, 0x0, 0x2, &(0x7f0000000400)={0x8001}, 0x8) [ 2077.383343][ T283] loop0: rw=1, want=143, limit=112 [ 2077.388653][ T283] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 2077.397353][ T283] attempt to access beyond end of device [ 2077.435402][ T283] loop0: rw=1, want=144, limit=112 [ 2077.458004][ T283] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 2077.505071][ T283] attempt to access beyond end of device [ 2077.512486][ T283] loop0: rw=1, want=145, limit=112 [ 2077.519125][ T283] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 2077.834247][ T283] attempt to access beyond end of device [ 2077.907549][ T283] loop0: rw=1, want=2201, limit=112 22:53:18 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x5000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:18 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000140), &(0x7f0000000200)=0x4) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2078.030297][ T283] attempt to access beyond end of device [ 2078.065556][ T283] loop0: rw=1, want=4249, limit=112 [ 2078.131811][ T283] attempt to access beyond end of device [ 2078.162216][ T283] loop0: rw=1, want=6297, limit=112 [ 2078.216710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2078.222635][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2078.228508][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2078.234269][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2078.250698][ T283] attempt to access beyond end of device [ 2078.326910][ T283] loop0: rw=1, want=8345, limit=112 [ 2078.392718][ T283] attempt to access beyond end of device [ 2078.420621][ T283] loop0: rw=1, want=10393, limit=112 22:53:19 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000000c0)={{0x4, 0x2, 0x3f7, 0x7f, 'syz1\x00', 0x7ff}, 0x6, 0x400, 0x8, r1, 0x1, 0x4a8, 'syz0\x00', &(0x7f0000000080)=['\x00'], 0x1, [], [0x1, 0x3f, 0x2000000000, 0x380000000]}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:19 executing program 2: mkdir(0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000006c0)=""/116, &(0x7f0000000740)=0x74) r1 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000200)={0x20, 0xb1, 0x0, 'queue1\x00'}) accept4$unix(r1, &(0x7f0000000840)=@abs, &(0x7f00000008c0)=0x6e, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000780)) pivot_root(&(0x7f0000000600)='./file0/file1\x00', &(0x7f00000005c0)='./file0/file0\x00') r3 = creat(&(0x7f0000000380)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) bind$unix(r3, &(0x7f00000007c0)=@file={0x0, './file0/file0\x00'}, 0x6e) getpeername$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, r4, 0x3}, 0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000480)=0x0) write$FUSE_LK(r2, &(0x7f0000000500)={0x28, 0x0, 0x6, {{0x101, 0x40, 0x3, r5}}}, 0x28) setxattr$trusted_overlay_nlink(&(0x7f0000000680)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'L+', 0xfffffffffffffffe}, 0x1d, 0x1) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000540)=@file={0x1, './file0/file0\x00'}, 0x6e) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r6, 0x40d, &(0x7f0000000640)) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000900)={0x0}, &(0x7f0000000940)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000980)={r7, 0x8}, 0x8) [ 2078.498597][ T283] attempt to access beyond end of device [ 2078.531202][ T283] loop0: rw=1, want=11993, limit=112 [ 2078.572526][ T283] attempt to access beyond end of device [ 2078.578699][ T283] loop0: rw=1, want=12022, limit=112 [ 2078.588129][ T283] Buffer I/O error on dev loop0, logical block 12021, lost async page write [ 2078.598470][ T283] attempt to access beyond end of device [ 2078.604714][ T283] loop0: rw=1, want=12023, limit=112 [ 2078.610268][ T283] Buffer I/O error on dev loop0, logical block 12022, lost async page write 22:53:19 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") fdatasync(r1) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:19 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0xfffffffffffffdd8}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$update(0x2, r2, &(0x7f0000000300)="b3bab58a6dd2b7c019118f52f63ef70b531cc14da07a39cddebb8e762627cef200e16850f583429e2ff13166d898", 0x2e) [ 2078.621615][ T283] attempt to access beyond end of device [ 2078.630869][ T283] loop0: rw=1, want=12024, limit=112 [ 2078.636270][ T283] attempt to access beyond end of device [ 2078.645827][ T283] loop0: rw=1, want=12025, limit=112 [ 2078.656336][ T283] attempt to access beyond end of device [ 2078.698508][ T283] loop0: rw=1, want=12046, limit=112 22:53:19 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) mount(&(0x7f0000000140)=ANY=[@ANYBLOB='/\x00'], &(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000240)='debugfs\x00', 0x800000, &(0x7f0000000280)='vfat\x00') write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) connect$rose(r0, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) [ 2078.731333][ T283] attempt to access beyond end of device [ 2078.762226][ T283] loop0: rw=1, want=12047, limit=112 [ 2078.802034][ T283] attempt to access beyond end of device [ 2078.808309][ T283] loop0: rw=1, want=12048, limit=112 [ 2078.813804][ T283] attempt to access beyond end of device [ 2078.820072][ T283] loop0: rw=1, want=12049, limit=112 [ 2078.825840][ T283] attempt to access beyond end of device [ 2078.832116][ T283] loop0: rw=1, want=12098, limit=112 [ 2078.840110][ T283] attempt to access beyond end of device [ 2078.858910][ T283] loop0: rw=1, want=12099, limit=112 [ 2078.864573][ T283] attempt to access beyond end of device [ 2078.919552][ T283] loop0: rw=1, want=12100, limit=112 22:53:20 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400000, 0x11) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xc) r2 = gettid() r3 = semget(0x2, 0x3, 0x1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) getresgid(&(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480)) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000004c0)={{0x9, r4, r5, r6, r7, 0x1b, 0x6}, 0x3, 0x5, 0x7e}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x1e, 0x3, 0x9, 0xb, 0x5, 0x81}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x1000000000016) [ 2079.609429][ T283] attempt to access beyond end of device [ 2079.707713][ T283] loop0: rw=1, want=12101, limit=112 [ 2079.774050][ T283] attempt to access beyond end of device [ 2080.176526][ T283] loop0: rw=1, want=12110, limit=112 [ 2080.208562][ T283] attempt to access beyond end of device 22:53:20 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x6000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:21 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x3, 0x1000000000000000, &(0x7f0000000080), &(0x7f00000000c0)) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) [ 2080.261449][ T283] loop0: rw=1, want=12111, limit=112 [ 2080.323706][ T283] attempt to access beyond end of device [ 2080.371562][ T283] loop0: rw=1, want=12112, limit=112 [ 2080.397914][ T283] attempt to access beyond end of device [ 2080.403714][ T283] loop0: rw=1, want=12113, limit=112 [ 2080.409298][ T283] attempt to access beyond end of device [ 2080.415089][ T283] loop0: rw=1, want=12153, limit=112 22:53:22 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x7000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:22 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x28, &(0x7f0000000100)}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x1000000000016) r3 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000300)={{0x1, 0x1, 0xd61f, 0xd59, '\x00', 0x4}, 0x5, 0x200, 0x100, r2, 0x4, 0x7, 'syz1\x00', &(0x7f0000000180)=['\x00', '/dev/dlm_plock\x00', '/dev/dlm_plock\x00', '\x00'], 0x20, [], [0x7fffffff, 0x6, 0x101, 0x2]}) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000080)=0x95) 22:53:22 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) getpgrp(r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0x25cb0721236948ed, r1, 0xe19a, &(0x7f0000000280)="ea7b234fd28d36518f779dac6154046f895a0e34300bf276bd46d49846d6331f429e84b673092b3923e4045277f90500d4a33180110c8a2835ffaa4f7b7f4308a0ce9de3982f7d7f18b9b5a54e3ce92b6e862c665830") ptrace$cont(0x7, r1, 0x0, 0x0) tee(r2, r2, 0x4, 0xe) 22:53:22 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000002c0)=""/187, &(0x7f00000000c0)=0xbb) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) recvfrom(r0, &(0x7f00000006c0)=""/4096, 0x1000, 0x10101, &(0x7f0000000200)=@in6={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x80) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='./file1\x00', 0x80) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:22 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdfe936f42d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5ff0000000008a2a5980000000000"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:22 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) llistxattr(&(0x7f0000000140)='.\x00', &(0x7f0000000200)=""/44, 0x2c) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:22 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2082.376702][ C0] net_ratelimit: 20 callbacks suppressed [ 2082.376712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2082.388529][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2082.394369][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2082.400230][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2083.016679][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2083.022545][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2083.336706][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2083.342551][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2083.348493][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2083.354306][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2084.065244][ T283] attempt to access beyond end of device [ 2084.092048][ T283] loop2: rw=1, want=36417, limit=112 [ 2084.094460][T30485] attempt to access beyond end of device [ 2084.113006][ T283] attempt to access beyond end of device [ 2084.126892][ T283] loop2: rw=1, want=38465, limit=112 [ 2084.129151][T30485] loop0: rw=1, want=34937, limit=112 [ 2084.145824][ T283] attempt to access beyond end of device 22:53:24 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000240)=0x6, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:24 executing program 2: mkdir(0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) sched_setscheduler(r0, 0xfffffffffffffffe, &(0x7f0000000280)=0x3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:24 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2000000000000002, 0x0, 0x0, 0x400003, 0x4}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x40000) fcntl$addseals(r1, 0x409, 0x8) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$PPPIOCGFLAGS(r3, 0x8004745a, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x38) 22:53:24 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xf000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:24 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0xb) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x29) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2084.175462][ T283] loop2: rw=1, want=40513, limit=112 [ 2084.180140][T30485] attempt to access beyond end of device [ 2084.206251][ T283] attempt to access beyond end of device [ 2084.219050][T30485] loop0: rw=1, want=36985, limit=112 [ 2084.233077][ T283] loop2: rw=1, want=42561, limit=112 [ 2084.252221][T30485] attempt to access beyond end of device [ 2084.261475][T30485] loop0: rw=1, want=39033, limit=112 [ 2084.285989][ T283] attempt to access beyond end of device [ 2084.321228][ T283] loop2: rw=1, want=44609, limit=112 [ 2084.329165][T30485] attempt to access beyond end of device [ 2084.344194][T30485] loop0: rw=1, want=41081, limit=112 [ 2084.393270][ T283] attempt to access beyond end of device [ 2084.428712][ T283] loop2: rw=1, want=46657, limit=112 [ 2084.510632][T30485] attempt to access beyond end of device [ 2084.562520][T30485] loop0: rw=1, want=44305, limit=112 22:53:25 executing program 1: syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000001c0)) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000100)={@empty, @broadcast}, &(0x7f0000000140)=0xc) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{r4, r5/1000+10000}}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r3, 0x1000000000016) [ 2084.586253][ T283] attempt to access beyond end of device 22:53:25 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = syz_open_dev$media(&(0x7f0000000240)='/dev/media#\x00', 0x2ac, 0x20000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000002c0)={0x7}, 0x4) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000006c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2084.654151][ T283] loop2: rw=1, want=48705, limit=112 [ 2084.694493][T30485] attempt to access beyond end of device [ 2084.722578][ T283] attempt to access beyond end of device [ 2084.732064][T30485] loop0: rw=1, want=48353, limit=112 [ 2084.743218][ T283] loop2: rw=1, want=50753, limit=112 [ 2084.765603][ T283] attempt to access beyond end of device [ 2084.804051][T30485] attempt to access beyond end of device [ 2084.826554][ T283] loop2: rw=1, want=52801, limit=112 [ 2084.840071][T30485] loop0: rw=1, want=52801, limit=112 [ 2084.886284][T30485] attempt to access beyond end of device 22:53:25 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2084.942713][ T283] attempt to access beyond end of device [ 2084.967280][T30485] loop0: rw=1, want=52953, limit=112 [ 2085.001531][ T283] loop2: rw=1, want=54849, limit=112 [ 2085.065334][ T283] attempt to access beyond end of device [ 2085.071217][ T283] loop2: rw=1, want=58353, limit=112 [ 2085.087339][ T283] attempt to access beyond end of device [ 2085.093018][ T283] loop2: rw=1, want=62401, limit=112 22:53:25 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001540)='/dev/mixer\x00', 0x20100, 0x0) write$P9_RATTACH(r2, &(0x7f0000001580)={0x14, 0x69, 0x2, {0x2, 0x1, 0x6}}, 0x14) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcf19fddf7bcfc33ea0986f4f6409333a8adc36a6f1f0dd106d803200b90b5a2000000000ee2368b5a37000000000000000000018a2a598"], 0x39) r3 = request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)='@vboxnet0\x00', 0xfffffffffffffffa) r4 = add_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="02031d3cd89ad087637309cd6662a4314d5aeca2a67d4bde090af37353a04cdcb604eecd0dfddb3c49a3de69215f1cdaf8e4ece1cc9e83cd62b29d26fd315c95a340ab6982a1307c6da7c09060d16bcc1409693357bce16f4a569d276afce0ab73ae7f434e327795368adc2772aff81ecfc9560ff32006ed076d853232118087ba9a02a679", 0x85, 0xfffffffffffffff8) r5 = request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='@GPL/\x00', 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r4, r5}, &(0x7f0000000440)=""/87, 0x57, &(0x7f0000001500)={&(0x7f00000004c0)={'md4\x00'}, &(0x7f0000000500)="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", 0x1000}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000080)='@GPL/\x00') ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2085.112754][ T283] attempt to access beyond end of device [ 2085.137635][ T283] loop2: rw=1, want=63337, limit=112 [ 2085.162322][ T283] attempt to access beyond end of device [ 2085.191194][ T283] loop2: rw=1, want=63338, limit=112 [ 2085.224489][ T283] buffer_io_error: 14 callbacks suppressed [ 2085.224502][ T283] Buffer I/O error on dev loop2, logical block 63337, lost async page write [ 2085.254055][ T283] attempt to access beyond end of device [ 2085.279687][ T283] loop2: rw=1, want=63339, limit=112 [ 2085.295685][ T283] Buffer I/O error on dev loop2, logical block 63338, lost async page write [ 2085.323651][ T283] attempt to access beyond end of device [ 2085.346659][ T283] loop2: rw=1, want=63340, limit=112 [ 2085.365990][ T283] Buffer I/O error on dev loop2, logical block 63339, lost async page write [ 2085.393091][ T283] attempt to access beyond end of device [ 2085.413388][ T283] loop2: rw=1, want=63341, limit=112 [ 2085.426344][ T283] Buffer I/O error on dev loop2, logical block 63340, lost async page write [ 2085.453775][ T283] attempt to access beyond end of device [ 2085.473063][ T283] loop2: rw=1, want=130, limit=112 [ 2085.491161][ T283] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2085.508207][ T283] attempt to access beyond end of device [ 2085.514209][ T283] loop2: rw=1, want=131, limit=112 [ 2085.524787][ T283] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2085.534798][ T283] attempt to access beyond end of device [ 2085.546165][ T283] loop2: rw=1, want=132, limit=112 [ 2085.552471][ T283] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2085.575466][ T283] attempt to access beyond end of device [ 2085.600289][ T283] loop2: rw=1, want=133, limit=112 [ 2085.626719][ T283] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2085.665830][ T283] attempt to access beyond end of device [ 2085.741535][ T283] loop2: rw=1, want=2541, limit=112 22:53:26 executing program 1: r0 = getpid() r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r1, 0x891a, &(0x7f0000000240)={'veth0\x00', @ifru_data=&(0x7f0000000200)="43b801232a0100536ae703246b9c94f0659e21b15ad1e978dbaa1050e364293c"}) r2 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000080)) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0x1000, "574ac673d73b1872c4645cd1a18424c903a3fd49abbc1deacd540abc7a03cefd1dd42dd4362309fed1baad8ea1df35e6c9bd4052a93f540fe43b8b48b03f55435bd8142055d891b2ee189d6337a36cd255b3ecb0bc076fb32450dcaacf587d6d05b1b86357b0b073b8d967ca8d2f8c18f34a359dca340911c5c308e286967de887ce5185ca9bf88d3f943b5235f9b3384791a2085d122a45731c458eaeb639902c64878ca5d3b1e2da85081925a760f5714005ed65cf3da6dfe5c99d731ddd15fe3dbce3818d0c93b8bca5c0f28c8fac1114bcaea9f02b9db7dec331baa54d1b1b7d9f5d0713b82ba6d46e2eba14eb7aee1c4cb4f1190866c35477b0159d80c8712b0b31088bafb3229d9e8fbd472dbd3a9abfdc024317e5881add45758694148e2fede4c6a997ff4634aba483eb64b19496fcc09b02ae67e959255823226082cecc37840bc987938f1b8653e4083bd8adff8fc3ec103214d04924b6d4995364d88f6f0b4816131d67f92edcb9287281d007cc7e2a007b665688e667430a8069c52eefc6740cf8bd9508b1767ee62dc83b4bf9e11eb8e365140201a12f65ef87fc7b24da388388cddf1e65f48d72b39072675d9820c4e89b7bb2706293d3d576e30ec2e45975c4ca8f1bcd2f15f51bbc3784412bfafdcbec4c886badc8a41cd4e297aa8831c3003d3990ae6f571a546e6398d4102c8dc59f5ba94a0900a63e56e690ee08e254ae702a9d2c6a087b88f6c6df45c567a0193b410013301072c759b4c9b9a6d402b976d91641d263a51bf82b76b9cc931960cd72d46a885ae43a5969d46b7f992fe6b9fc063c969a635e0645d828d450fdf4e5a5f1fb1786d0ad9223747366ff0582f7792d1bc53af8635607d6d91bc76601e07171b5a9e088269055fedc03a233fe4c210416884779f14a2706809905c81cdcf8215061b5d32988a1506c4ebaaf6ad27eb16639459b37443ae92ce1e2a837ac1dbcc8354c0be0b8422acbb549d137a075e27cfe911fecc9c019ab8d1962878a8e98fe53c592dea28a890a0bc6f38a0a8087dba1a77cdc646584a0079b5c0873597e1e5d2691ab80d3eb2479e3de6fa02464c270b1619caf96ec7d54d820fb8e55f33aa087e691863483c2c6527434d1f8e7c105bc9f1ed96e71786296ffa071549c48fb78b1c13675cbd4c1e04c4406a1e102259d465e2876b6895d98a295a90e74b651331a2bcf31500a315f00b116834481b85eb38ee72ce25075a916eb0b125673914bcf0df186f4baa0c45f6547151c1638944439ba2752bf7705509ae7a6465c3aaaa8fcc0165e8a8c628d5cabf87e74356af1acd7873013585eedc43b1ca2683ad298ff10d4a9f574f7f5c59fa54c99825dbf8cb1c00fa9f5b5c4378e295b4ac0091189b1f7b0df1f99111f1c923f0f7c39f35b1aed836a28c4aa589e0d81290b069603d9df8a5fd98b2329e891bf73accfda211de73183453ecc79eb5295c6554487d77fbe59d1d6ca9ceb8baa22225096a2a2c90b75afbdc41e60805a64958aaad973017018f9aa26963dd901030ca016cc1f25cf49dc014fa5eb9fafecea03cbdc9c45b865be6cb14712c0473adebfcdbb11f2af761572d2793cf3179674912b260c42b1e6882578638cc4215328d63766c739683fc14eba242cd71c7fa5701cce9ea38f92d159a6ec0a96ede2ddf69d08ae41983f32da8a5673019cf396fa051783cf4bfb97125de1e43d683867a33335ef07e7aec4bddaf8d537105bf5790a834fe2af9c124b28b411599240e3923afa5bb1b77849e5e8b5ed183ee3a0c550637bfd6b5ad125d82f7cd65073ba6ea63edb3dc30b6b4281c2d046a45af5bfb7af926447b2e7cc16766defcece935775305098986ae6ea3951277923a876e8e374442c52158176b04f29e00736063c06863dd985111f95062e0a975820603231c14cf310f4c3bfdfbf451004715d9c65678b333135b9968cadd668b382da65a55e424576713d68e6064a34dad89c30304a007bb329481f2518d4e160694fa187f89d3d043c01a19bfe2bcdb81ea442b77bf7155918ef6afb3c95180aa4341011c9d8df92a37192da3c6df7461dacf5ae94ffb0b19c70402949ecf694dbc9b372402776fba14f891c4040ea5426948abe443e77346f14179cc29bb89fee7a8e3a36ba720f4104ab724561e596b2190bb6fc3a032d7eb330129d6a9879b9ae8d07a64fb0e7b8806337476175933edc537f44615373f1a89c914e04964a188f9c69ffe24748788a7ffc596ebab83325afdb3f8f32b0bd3d462008ed366230410dd30a601c64e5eaabb92f169b56cbcc300d53df33259339028c59aa97a5cac7a2233ce74a8c030c84337839808bd6d3700748284dbb252e02864686a5986f62460aa44b7094add36eb662f2d5e56d09656da71d6c87e03e5046869edabaa322701e53c0af7b1885a1b20efcdd53e96401cc22bc8756a715430b162f848dbaafd81bbbd6b0973ac1e9a3b60d0e4abdb2011a3a798fb6bcf009ae48175c6af997b1595de7cd0906c8bb04a659899a7ce41897e87853b2421c8e02e547fed92cad1f223acc86fec5911112f7dad3d0e15ce1c3f7ad365fac755b5b0d7f72d188b7e6d7cf2610f0853cd051a2a796d62eabc996c5b09abf915d7235ea71ac9d59f87512563cfa8d82e216759ddf3eaa1d9fe84baf482328d0276c6d8976bbf64c8b84e09fb727e60c604f78f948786638213dd373d57fb472ee46d55af15d2901bfb6e54c757a623c9cde51af278edb9fac69cd477dd182b443da9dc0f94bf546a03b27b99b2d604ba01e0f8c96a24c183f87d7aa87f2e435ae124f8876b05f2d4e09600e6733f99310fb49564b0a5d2aebdf221b368ad9df5ae70178986d78995e3af9b7777eccb75e8b08d916cf7b0f3c4e2c507341e6f871c3f89abe642ece8df5e270c80af623d5f7ca6fdc8d1c86215cb321ea7e236f05bb5affee6faf9a94cf22eb6da9d8ae35929b9bf8d3996512762b15465b80049dd893ec5a478450bde5005137c0dcc33dcfb796d0085fb664ae724d5a6a7940b2f5b3df3558f759aba78e9b5f30dca8335fb3cfff09f9d29f0ac841f32a188ea9f29e7c8f9390f6d58b3db5ba1df83ef2ea9f4414a9904eb19af5757f2537a082bce73ee68abf1dac80742d64e2b66c5ffc0ab45c5016c276ad8e06edc0c19a4d2c78b9233c6d13ba63c4bef513f6f1b9e18a88080286329e5652885b225927959642d0fce47abf70f5836e8cca37ad4e1049f44e7ddb82ffcbe21724ff5e0b07a412a6b3d1729d7f5ba2edffee596b9923d1f477114d92d059179ef71eb20b67e10efaf46a47cb5f3d1789d282b9e558a971670e382c619baf099b7b2465c9b7e4dab2f762cd30166cd412e24f6148c0a17fec76f5c4696954ce78a4ea03f85240b5ff95aa350dd687e83ed3582f0a51c5ec8eb20639543a6e9f3cd2bfdc52038e6d3242d092b1b976daee52e3b0555ffa94451265c23cc06c50ed507aaf55b127d411f0b20288c3c4f1326f0ca719b6f759c77d91a85e05f72fbd518cb2ded8cd858070529ca246564d452dd4cd22eac525c1318a758e518dd6993ea986e4378f3c7be5310445e984a3c702bd5ff506e6466a5fd78326293e3d013f0e7e7b88ecd1433f44c37bbd26847d44854aff291731a849ffe9b22457062ae0e423087ee9ab48a5d73f9c9c31677fd2f0b1c207b1375a04519433aa82594d14ac6113cc5a220ad587d28a9c9566811947dbc454bfbdf1827272097f42bc4754c948d20cb83b3d50a4c4515e4bc496839a0ed8f01db0928cb130576989a9d3bdf7c735c6abc4dbfd62a1ce235d590de5aa6d12e49e2a6606db35a528e48b204ad2e84e2ef2e7ef8d97b67f21c0bd88ae2c3eed2569bea41a5069673736114b9ce94c5a0f6ad78f2075ea530694938fed2d35e53e8c9d848a6a243cad0f974070466376148842b554c2804a1a8e4391b737e878ced7d35025767fb5e0dffa22ed3a5ee2b2ee252df51ef42fa79e6ca1e3f67bde7792a02d9356063a284c2d723e061f982ba1d154e5b613a315e915fb3dd6d5ddea0871b34a2b0adef2eebac2a22b1847584981343e7e1105292ef0e5184c5ab024154e7087b009d1557eac8b807853e368666670c2f410f1652230bb36ae35e2f5ddadb34f9e3694ab76eabcb435a675b9ff17a4fcd47d909580137b5576dc1fde3713d31329c43d7d2cf8d4314b7325f6bf5122c9d30c4b11fcf76e70ab1ba8f0addf5de551001fd4ef396272b125902ddb68544f4f5d3fee2075e5a4cbf49e20fcf88a9659c925c1a5d0654eca7f3874acbedf541c1cdeb287fdea24209bc270a9ce541a17fe40b76a7c930c668c99a0a3e8c40228ff437ad211692e955314da0bb5a2be9d7cfa27d65bbd2e95d553abfc12118030f84d9075915b470b290a5d516202df5a456431ec8254a5c4ba0d6c268457e54f71f36395b6bd8002201f2e9fb4e00bc1a53b44662f30f497c7e29cf6588db44b2bc7f8dafcf110cb777cfa990fb070aba735486b4c11a05ab7b3cba126528a8f3ad2c612f5bcad66f7ad26f1591cf691072812eece2727b78aa8790142e85ae5b360d2e4ae121c0c0fc8e5b3b0d3953bdd8b8ecd444b38b87e27612ceb3002a9a35f6b9986bcfd808a16aede6df40580a7c7c897f332dc6b01ba49e5d7f5ec3728ec821bb2b60fbcdd64d79e12c4bb8ac144c23ea848bc0c6fc9b558985becd197200174f22abf4a54b2025f4802146b8f367a8b1dae537af0637eb29bd518a8f0828eba6648eb637a13df48819d7ba56ca55c28b601a1aa813d929f06b7c560a45ff2747e3a8c8d3d89e43f76aacd650552d35db8a3f7dee5d20d53cca9fe00f14cd9b00812266f753e743d24ece4ba865413264d3af73063a31dcbeef467834fbc1e5e678ae77637a1bc3c55717e956d2dc180d598e8c6ad50f7a725989b0797305603d4e7738168aebec871ca9863b709de7e6f2e8b6ff0782e4c2472c8a62c42aebf897bfa6d9a74040edf3ace383e4ed555553af1a3f54315c68269c983103c47dc1349a9b98be0f25cb8ea1fb074a6197bf0e40183e1d42328c1db98c7d5d341b9ad18f4d7b55f7694b57eacecf16b103ad765dce5db828d6bb3975272aa7e56ef71c17a4718105f773c322fe1ceb2285f1fb4136a9cefc09e28d5ba97831f2d5a12da223c6df2e660f421cec4a15bca6e088aa01926dd2dcd0479d2cca97f24e5c7e6394bf3c0dec2f68a477bfb1823356d37a8fbc2213b874ea41cdc0816c9a5819445213ac1f480cece4face880a9a1b30c4fa283a4c741943ac0f088d0c3773e559a09e5dbefac8831594042db978633c87e3a6305a417562515c42bafe3da6f80fa03ecea123efc951e6fdb75aefbd029d5b12165152b606ac9090b0461cb1203a1e9511c356fe278fbd0ab232a16033a01336104e1344512d0d311478ac78d0df0114bc688d4fb5717755364a08605e5d072fe168c61c5b827504b5c0496f7d4e566fb8a60fa5fb917fa3973164a224d2d7b0162f6366d296957cd50cddb162f71f0cf738ed263e3607bdc465ed5a2cfe69206224b7fbce1f265e5a3d0bc99c8d5f5cb293c75d018e46202230b42941a6129ae72727a970e3337fe8ad2897e589b230fa26abc24ca498982643f80a7223ec75ecd61fb37942ff40cdaf527db3f9a8c2c68e43eeb61a0c5425c2d7c1b35347fdbf22fbc5687324b8d1b8ba0985a38f479d842c8033ae09b183fd5311567b05ea60ab6013363186d2cfad31685b79f0d"}, &(0x7f0000000140)=0x1008) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x7f, 0x1, 0x5, 0x0, r4}, &(0x7f00000001c0)=0x10) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x400000000000000, 0x0, 0x0, 0x1) futex(&(0x7f0000000040)=0x1, 0x0, 0x0, 0x0, 0x0, 0x3) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r5 = gettid() timer_create(0xfffffffffffffffc, &(0x7f0000001540)={0x0, 0x34, 0x2, @thr={&(0x7f0000001340)="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", &(0x7f0000001440)="b029fe194cc697a6c570fe9af0a405f2be09a5b27dde7cb925b9193fd58cd57c07dca83bd753f4a9241dc402f6a335ca318a63dc304457d8161ebd52b7010022af8192aba0a2a375f25a3e1308856122405b65cd05c5ea370e6c3d732093e3c5887123eaa6ce06019c1f316c50a9d50fc37e2f9ab2354c347bd400b7363ace527264669d7f70855cb7a9994df2628b7a0322e7b88196c219ff761cdce3fd77c6bd61868c95580a98452211e536775ff9c17edfa15ae64bd4bfac4cdefa3920b4ff702bf8b14f3a5e58b0bb"}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fcntl$setstatus(r2, 0x4, 0x4000) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r5, 0x1000000000016) 22:53:27 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x13000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:27 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = shmat(0xffffffffffffffff, &(0x7f0000fff000/0x1000)=nil, 0x1000) shmdt(r0) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r1, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:27 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:28 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000000140)={0x8, 0xd1d, 0x9}) 22:53:28 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) ioprio_set$uid(0x3, r2, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UI_GET_VERSION(r3, 0x8004552d, &(0x7f00000001c0)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:28 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) [ 2087.496667][ C0] net_ratelimit: 20 callbacks suppressed [ 2087.496677][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2087.502613][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2087.514569][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2087.520399][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2087.526239][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2087.532345][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:28 executing program 0: mkdir(0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x400200) ioctl$RTC_UIE_ON(r0, 0x7003) sigaltstack(&(0x7f0000ffa000/0x6000)=nil, &(0x7f0000000040)) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x10000, 0x0) getsockopt$netlink(r3, 0x10e, 0xd, &(0x7f0000000140)=""/1, &(0x7f0000000180)=0x1) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, 0x0) tkill(r2, 0xc) 22:53:28 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:28 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x8001, 0x4000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="054fcff8dcdf7bcfc33ea0d95bfeb3fbeaafa6f236a6f1f000116d8032696972810002000000000000cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x4, 0x0) 22:53:29 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:29 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4000, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2088.616679][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2088.622569][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2088.628453][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2088.634216][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:30 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") getitimer(0x3, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:30 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000200)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000400)={@initdev, @multicast2, @empty}, &(0x7f0000000480)=0xc) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') connect$nfc_llcp(r0, &(0x7f00000002c0)={0x27, 0x1, 0x0, 0x7, 0x0, 0x1ff, "9853924571f65d9b3f400fa0a92362fa8a9ac81824c9e24240bfb800cdaf037bbc66c848825aea95e1f5a7b551dbc390903a64e46cb500499d952372170c6e", 0xa2}, 0x60) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0xe94) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000240)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) nanosleep(0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x2, 0x5, 0x14, &(0x7f0000ffc000/0x4000)=nil, 0x6}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000340)={0x0, 0xfffffffffffffff7}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000003c0)={r3, 0x5}, 0x8) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') eventfd(0x5) 22:53:30 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x3f000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:30 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000080)={0x7, 0x7, 0x8001, 0x9, 0x6e6, 0x5, 0x100000000}) r1 = getpid() sched_setattr(r1, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x1000000000016) [ 2089.618266][ T21] attempt to access beyond end of device [ 2089.645701][ T21] loop0: rw=1, want=130, limit=112 22:53:30 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x1) r0 = dup(0xffffffffffffff9c) bind$bt_sco(r0, &(0x7f0000000340)={0x1f, {0x7f, 0x72, 0x14, 0x8, 0xffffffffffffff74}}, 0xfffffffffffffe67) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x204000, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x979c0ce7bda90f91}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000280)={0xff, 0x3b77577e, 0x2, @stepwise={0x5, 0x0, 0xffffffff, 0x401, 0x6, 0x3ff}}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) r3 = semget(0x2, 0x1, 0x80) semtimedop(r3, &(0x7f0000000140)=[{0x3, 0x2, 0x1800}, {0x0, 0x380000, 0x800}, {0x2, 0x5, 0x1800}, {0x2, 0x9, 0x1000}, {0x1, 0x6, 0x1800}], 0x5, &(0x7f0000000200)={0x0, 0x989680}) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000240)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2089.673985][ T21] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2089.724063][ T21] attempt to access beyond end of device [ 2089.736118][ T21] loop0: rw=1, want=131, limit=112 [ 2089.741702][ T21] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2089.992197][ T21] attempt to access beyond end of device [ 2090.053848][ T21] loop0: rw=1, want=132, limit=112 [ 2090.095612][ T21] attempt to access beyond end of device [ 2090.133667][ T21] loop0: rw=1, want=133, limit=112 [ 2090.177635][ T21] attempt to access beyond end of device [ 2090.204894][ T21] loop0: rw=1, want=142, limit=112 [ 2090.242870][ T21] buffer_io_error: 2 callbacks suppressed [ 2090.242883][ T21] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2090.316200][ T21] attempt to access beyond end of device [ 2090.337447][ T21] loop0: rw=1, want=143, limit=112 [ 2090.356478][ T21] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 2090.384283][ T21] attempt to access beyond end of device [ 2090.405645][ T21] loop0: rw=1, want=144, limit=112 [ 2090.429158][ T21] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 2090.460183][ T21] attempt to access beyond end of device [ 2090.473573][ T21] loop0: rw=1, want=145, limit=112 [ 2090.479045][ T21] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 2090.664090][ T21] attempt to access beyond end of device [ 2090.692950][ T21] loop0: rw=1, want=2193, limit=112 [ 2090.737919][ T21] attempt to access beyond end of device [ 2090.755186][ T21] loop0: rw=1, want=4241, limit=112 [ 2090.777947][ T21] attempt to access beyond end of device [ 2090.783753][ T21] loop0: rw=1, want=6289, limit=112 [ 2090.800737][ T21] attempt to access beyond end of device [ 2090.806541][ T21] loop0: rw=1, want=8337, limit=112 22:53:31 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x9) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)={0xffffffffffffff09, r0, 0xfffffffffffffffe, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0xffffffffffffff24}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000380)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x80000000) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000240)=[@timestamp, @mss, @window={0x3, 0x70}, @timestamp], 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x1, 0x2) 22:53:31 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:31 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x2873b895a0cf05a8, 0x0) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) fstat(0xffffffffffffff9c, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)={0x108, 0x28, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x11, @pid=r0}, @nested={0xf0, 0x4c, [@typed={0x40, 0x54, @binary="a7237fa09f58439e1ba45277417142d31b924cdf96170f1ec29a01180731016f8fcbc101bfe90d1e3213bf2645bd351c74c0d074400046502ef6"}, @generic="df6ed41ae982da3af831e2ce7529a24a29e2a85416d88187f5befc975bcf6d67feb13f7de2f2d10fc135b043e78609a63865426972aec77face8f8fcb822fc3b9d32a88370cfa2b5a9bcd7a44638fe4583c570980650dd9f74040f8f550151ddba5d0ccff0f5c2216de5a037a432e5da5eb98da32b777d41534a4543dc496dac85cca177481d53dd8694bd7d5acf907f2781a8381db8fa", @typed={0x14, 0x48, @ipv6=@ipv4={[], [], @loopback}}]}]}, 0x108}, {&(0x7f0000000300)={0x170c, 0x3d, 0x2, 0x70bd25, 0x25dfdbfb, "", [@generic="c070f30a13b409157271a3c9e1c231b2a584d6d180790626f5ea8a02f64d478c5a3a3a20381e80b4a81e4d5af11866b43c116974655824441ee53aa0bbd6ff7c8991254c9a96801665b768c9542cb6c7e8beeeed4e86ecebeaba202b282d9c062a1fa71d6958aa6f436530dbfe2102e9b62415b473e395b03b6219714ebfe8098af10bd7e9837c85d0e1acdbebe507d2b1b5d9257aff466fb25e5b2d3ca67518", @nested={0x114c, 0x5, [@generic="693b39b6c8a88b943dab935d85e2d9f8dd846c65a9874508e2b2be6a082422266e8b3bcdc84b3bb373a3bbac4ee0f18a2208879160755481a24de07f20a4c1e33f51b127e75c8d32f10822be63aed76579f9d97f1562cbf5f427567e9954c5358b81d5d9a068a8e0926ba924d43d83eee4354982dfbae00aaf827d1f272389793e5e467f82c7cdc9b7e3c81b332226d50753def1c3741fc0106abe7fd9d1ef76f87c210fbe93a1a9f1e44f73279a30b7a27177ab576740", @generic="f2d8642c5bfdf446", @generic="9d412fc6e0035ac37774669f6ac9e303a99f3233e687a3bbf5f89736e50f905d498a375b05dfb1321cb05081f5d467e20da9e7bbf4f029e9badb400382537ff79f4800598fb2280902bc57f7e61d2c87d86ac14480921a662c1a3e3b46f61b2d28332e00de6ae06743c154cff2fc0a6f7df4f88b18eaf4aa9364b7", @generic="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", @typed={0xc, 0x4b, @u64=0x1}]}, @generic="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", @typed={0xc, 0x3f, @u64=0x1f}, @nested={0x2e0, 0xd, [@generic="c98de244d2bef736db2f9352492e2517d5227860b8145248ccc46b4b4b37397c463fdcea864f11000dab953eee99461076e051d6c081f9d622fe55c2f2b4cfee8f1b34b30beca296a989dd72f1d10cedf6edd4dc555e578dae01ddbfe63fe5eabdd7cb63c04d3eab8bc850141c47653785d8dbd0ee0e", @generic="0e23283a179c1f99a9cb03559569161846312500ad9eb305c00a4e54e5c5c09b92c9aef8f9bbdf43c888e9fe22ff8ac3d6ee611603b63c41a6983523d5b3e482ee571247a7f8cbeb957daadb9a6f19a6805f7618a8f7d2ccc483033d436d8e91e6f269197d7779e5ba7159589244c86f4d84f6b245cdbdefb83906d05720c06d509e2f0fdbed75d4931d6322b27d65418509c320083c8a474d50d365825e025c79e5a53c7f51c3b160c41e999395623e7434f00d8e4ad62d22dc63f869625d4d07a98c1d31e70d07e36bd927b09af5c6fec2aa5e5880cf7faae887c9e09e4be8cd69f490ba8e80e33c059323adde11c85b33a7705c4870", @generic="93cab00c2dcaf0febe56304f6da26bbde0515eff08776faf7d0d8aaf27bbc0b101fcabf15c4e6712ded73f33a4e245728774cfaa26dec75e0ddd6d5bcb7f94d32aaaf4ae72455991f6e67c27964cb5aa79c334af2ad59ecd059b3cafe19fbbad9bc1e21b3bac6afb52d35af74a96e3fb92f5f932d43aeb0289ec11e6c8e823492ec1a424fe42e1bded69d334c7d1d9256b775cc38e3b6e89", @generic="58b37f50f41836955718f6294ce0f7e0f399cc47261b9a4a3b08cbd06945e6d0c5973889c10d81974c5c5432a2a3cb8c47ae1df8e16837900a6f96739feda66ccaa4cfee95413620cb1c5ec555be2d57ce4a5c61eebb45c116797a7c20b322b5d263a35b9dbda775f6aad533a77edea9d88eaf33b21ee3dcb01ad95f2eed589d41c54df3417e624b342106cd32a232dc793f42f074bdee9e429ae62bda03b0e32c2992b721c7e6cc5d5828bb87454cc35819a24af89478e8a03a3a956dae3e4bb3ac6e28", @typed={0x8, 0x52, @pid=r1}, @typed={0x8, 0x7, @ipv4=@remote}]}, @typed={0x14, 0x20, @ipv6=@rand_addr="cd660499fb82a8f12a90700d4851c12f"}, @nested={0x114, 0x19, [@typed={0xc, 0x3e, @str='ppp0\x00'}, @generic="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", @typed={0x8, 0x52, @uid=r3}]}]}, 0x170c}, {&(0x7f0000001ac0)={0x1334, 0x13, 0x20, 0x70bd27, 0x25dfdbfd, "", [@generic="c4c4a29d67c692291d601a108cc1750e83e58ce64a636373214761f02c05894d4bcb7c36ee488056b902ae5ebfc8cf9e79ad8f435ca5092df80bb20d8575fbce9d992c68c1adee4154d69efe92f3cd3b92b5d071c17092b8e9e47a373efb0389f919a0c07686a4e8c9fd0859d8e6bd00b40665a88803422090a2076b0254f1ba6b6fb4585bd941a17a23e3e19459c19ff59feecb5926ac61205306495aaa6b232ca906c5488ba7b10b0ba1077ef9595af2bb6e7275976c4a675ca9a76444", @nested={0xf8, 0x16, [@generic="f714a0dd3a6e0aaf14657404c52485b1b06acafd968d0eac52b55368cf2599befac9e8ab036338f88ea8e6cd7d42ead6a95afb175e431752eecacf86d3b6a3dce42964eeab99d2e03cb7b13993cd831fd4029f4eca621f671b391c0365905febfbb930fb4963d3d653d16f097960fda92327d777469c4e7de0686777a35d5cef9f15c12e594305901796878a8b3df4fd44b3248b0b7605147039269a891c6789f7efb71006ba0849ec4d0ecae096b58e2c2461c427f9c5", @generic="b69a14666fe439a62e93a08ebe7c11e66a2180d56f773ee107d9f3c171b8a545ec0c68fcbf17c4d8686427cace3dd9865a5d03f4cd7e", @typed={0x4, 0x52}]}, @generic="40f2a8b9d351a23064b714acf36e71d951997a3c99b64965a85f74f3f22d5ade508e88a8f2cbf6ac768480e482b27fd961047aa9eb70f29ef7f460c9dbfdbec0bf127dc97cddaff30928c957a843f7921a3e9322299863edfff90a8cd16696bee566f151f1f464afadb78328bfb6326587f9a8ae881156b2f77c4a1251a7521dbadfea80b8b48aff8e96a375118daa72f934935dd986d0f6aacb2240b4e8a59bcab67252370a18f2c06877e35a6dfc79486d13443b828d3ca951ca420610783f55", @generic="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", @typed={0x8, 0x51, @uid=r4}, @generic="8d0aa469109132b8c1a83711f6d45f6bdf71c5936214a135a609133bcbc403160c7b02fd196825b8519d75c826551529e60876ad5b1b36e902d6cf36524a7e39c73ff6d195ee2127629d60f6b63e31203bfa815557e6305c7fd7b147951f6ce97fbe568c02e812d809d70ef06e5b08937315b77f1b9518142a5b244fcf4462c8f8a4ab942f32042c5406d07e3ca157f37092eb4fa7cd5153c0d6bcfb772a14a48609ed58d3"]}, 0x1334}], 0x3, 0x0, 0x0, 0x4010}, 0x4000000) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:31 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x8cffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2090.828584][ T21] attempt to access beyond end of device [ 2090.847669][ T21] loop0: rw=1, want=10385, limit=112 22:53:32 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) [ 2091.654204][ T21] attempt to access beyond end of device [ 2091.660300][ T21] loop0: rw=1, want=12433, limit=112 [ 2091.674927][ T21] attempt to access beyond end of device [ 2091.680801][ T21] loop0: rw=1, want=14481, limit=112 [ 2091.717012][ T21] attempt to access beyond end of device [ 2091.885864][ T21] loop0: rw=1, want=17777, limit=112 22:53:32 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xe5000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2091.992103][ T21] attempt to access beyond end of device [ 2092.018477][ T21] loop0: rw=1, want=21809, limit=112 [ 2092.025944][ T283] attempt to access beyond end of device [ 2092.034241][ T283] loop4: rw=1, want=33649, limit=112 [ 2092.047036][ T21] attempt to access beyond end of device [ 2092.056942][ T21] loop0: rw=1, want=25841, limit=112 [ 2092.086261][ T21] attempt to access beyond end of device 22:53:32 executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f0000000500)='\x00'}, 0xb) ptrace$setregset(0x4205, r0, 0x3, &(0x7f0000000400)={&(0x7f0000000300)="ef2031ae3f11a0fb97109b2e74346d5e8d22cca638e9ddfaf45760061a8658dceda4d5efd15edcfd0a4f4c7c9f55819ddacb52d5ff46a63a1844f76162258b6ae972d6cf5a7081a5d16fe0f280a49c1b1840f484bc398473c2f4ca165cd418061bcaa17157cd19f00fab58216bad592c7ab38e3f7c98c8d26c110ab66d6d13d583b2eaa880f6d9efe9ef9a795b684852778f80170bc64c5574a5757c064e2a8617f9ee9481216e1ac0a0189bea04f510c11756a00ac6bec3be54e2aa9780e93da6c82f5c7e175424708159dd89", 0xcd}) r2 = syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x92, 0x8000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r3, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2092.107432][ T21] loop0: rw=1, want=32065, limit=112 [ 2092.132250][ T21] attempt to access beyond end of device [ 2092.144233][ T21] loop0: rw=1, want=32889, limit=112 22:53:33 executing program 5: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)='.*(ppp0\x00', 0xffffffffffffffff}, 0x30) r0 = getpgrp(0x0) getpgrp(r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) write$P9_RATTACH(r1, &(0x7f0000000180)={0x14, 0x69, 0x1, {0xc0, 0x4, 0x6}}, 0x14) r2 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x6, 0x0) tkill(r2, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2092.776703][ C0] net_ratelimit: 20 callbacks suppressed [ 2092.776712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2092.788266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2092.794115][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2092.799935][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:34 executing program 0: mkdir(0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x800, 0x0) sendmsg$unix(r0, &(0x7f0000000480)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000002c0)="78f3d41a3d9ee3c2913963eccea532c6bbe0163a56fc73fd870b0645346bcb0054391ca00f9dc2ba405d55720c6536662e70b49cd0b138921220fef26f3f20e0b3725c1862d22201fa6817023175fd2f5255cbbb5540103bb2ea765f836c79ab5f0073bcd4bf7b3a14594c28faa65f4aa5b6de602b97ed85d674c0ea83c8989815d2443f7a770a9344175740f864aa57babd4e26902a5e2bea57b17a546bfba749b99ba7ec759aae6e65e96dba95c82a863dcd48a7c0ad854af842b0bc84be026339c3099580a13ce7c08333c9aaec38a5752b9bc7b78f40c7", 0xd9}, {&(0x7f0000000140)="271ee8ad8eff13ac2852714f369b74b2f8bf456e557375831d94e95b92845aa8de1287e16f11027c43ef", 0x2a}], 0x2, &(0x7f0000000400)}, 0x40004) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:34 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in6, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:34 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000080)={0x7, 0x0, [{0xbe6, 0x0, 0x51eb0421}, {0x31f, 0x0, 0x8}, {0xb9c, 0x0, 0x1}, {0x995, 0x0, 0x1}, {0xb7d, 0x0, 0xc0}, {0x86c, 0x0, 0x1}, {0x779, 0x0, 0xa1d}]}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x1000000000016) 22:53:34 executing program 3: lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:34 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xe5ffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:34 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[], 0xfffffffffffffe72) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2093.343470][ T283] attempt to access beyond end of device [ 2093.376666][ T283] loop0: rw=1, want=130, limit=112 [ 2093.416665][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2093.422490][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2093.442069][ T283] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2093.459748][ T283] attempt to access beyond end of device [ 2093.465673][ T283] loop0: rw=1, want=131, limit=112 [ 2093.736723][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2093.742550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2093.748444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2093.754214][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2094.136286][ T283] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2094.145412][ T283] attempt to access beyond end of device [ 2094.151222][ T283] loop0: rw=1, want=132, limit=112 [ 2094.156488][ T283] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2094.165214][ T283] attempt to access beyond end of device [ 2094.171042][ T283] loop0: rw=1, want=133, limit=112 [ 2094.176282][ T283] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2094.184986][ T283] attempt to access beyond end of device [ 2094.190928][ T283] loop0: rw=1, want=142, limit=112 [ 2094.230414][ T283] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2094.274148][ T283] attempt to access beyond end of device [ 2094.280145][ T283] loop0: rw=1, want=143, limit=112 [ 2094.285357][ T283] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 2094.295689][ T283] attempt to access beyond end of device [ 2094.301585][ T283] loop0: rw=1, want=144, limit=112 [ 2094.309971][ T283] attempt to access beyond end of device [ 2094.315686][ T283] loop0: rw=1, want=145, limit=112 [ 2094.325116][ T283] attempt to access beyond end of device [ 2094.330995][ T283] loop0: rw=1, want=2969, limit=112 [ 2094.340789][ T283] attempt to access beyond end of device [ 2094.346523][ T283] loop0: rw=1, want=4561, limit=112 22:53:35 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000200)="eb666174000204010002000270f70970af9d9916dce8ff8f04fcfbb31a5baf8d6576686c98ae17ce5b6363db562ea86f8b9d97440d920c0d9e2977ad6d200fb411779b0ffdee7659b0c8a88f2f6edd2478ea792edb41d9859b73de0b9f27e4b64cabdd4339738bbd6f24bec726e52ab23597880db06bea002ecc81154b65c285610524e1ff03000000000000d8fdb48f8a61f5", 0x93}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:35 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x1}, 0x8) r3 = syz_open_dev$dmmidi(&(0x7f0000000200)='/dev/dmmidi#\x00', 0x3, 0x40280) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x0, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:35 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xf6ffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2094.700620][T11753] FAT-fs (loop2): invalid media value (0xe8) [ 2094.706726][T11753] FAT-fs (loop2): Can't find a valid FAT filesystem 22:53:36 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000300)={0xcd00000000000000, 0x4, 0x9, 0xf, 0x1}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(0x0) r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x0, 0x40000) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8e000000", @ANYRES16=r1, @ANYBLOB="000026bd7000000000000200000014000100fe80000000000000000000000000000a080002000000000008000600030000000800050000000000080003000100010014000100fe8000000000000000000000000000aa0800050002000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x141) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2095.477484][T11753] FAT-fs (loop2): invalid media value (0xe8) [ 2095.483552][T11753] FAT-fs (loop2): Can't find a valid FAT filesystem 22:53:36 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x39, 0xeafc, 0x5, 0x7}, {0x8, 0x100000000, 0x2, 0x1}, {0x6, 0x3, 0x4, 0x4881}, {0x4, 0x9, 0x0, 0x80000001}, {0x41, 0x1aa, 0x0, 0x100000000}, {0x2, 0xff, 0x97, 0x7}, {0xffff, 0x0, 0x8000, 0xfff}]}) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vfio/vfio\x00', 0x402, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000140)=0x7f) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x8000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0x80000000) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000000c0)={0xfe00000000000000, 0xfffffffffffffff8}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r0, 0x1000000000016) 22:53:36 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x80000001, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2095.569979][ T9577] attempt to access beyond end of device [ 2095.605870][ T9577] loop0: rw=1, want=130, limit=112 22:53:36 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xfeffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2095.631664][ T27] audit: type=1326 audit(1555455216.353:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11784 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0 [ 2095.654218][ T9577] buffer_io_error: 2 callbacks suppressed [ 2095.654230][ T9577] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2095.669169][ T9577] attempt to access beyond end of device [ 2095.675269][ T9577] loop0: rw=1, want=131, limit=112 [ 2095.682183][ T9577] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2095.691865][ T9577] attempt to access beyond end of device [ 2095.697656][ T9577] loop0: rw=1, want=132, limit=112 [ 2095.703077][ T9577] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2095.711980][ T9577] attempt to access beyond end of device [ 2095.717985][ T9577] loop0: rw=1, want=133, limit=112 [ 2095.724959][ T9577] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2095.756547][ T9577] attempt to access beyond end of device [ 2095.766225][ T9577] loop0: rw=1, want=142, limit=112 [ 2095.775227][ T9577] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2095.791302][ T9577] attempt to access beyond end of device [ 2095.801357][ T9577] loop0: rw=1, want=143, limit=112 [ 2095.811355][ T9577] Buffer I/O error on dev loop0, logical block 142, lost async page write [ 2095.821356][ T9577] attempt to access beyond end of device [ 2095.833649][ T9577] loop0: rw=1, want=144, limit=112 [ 2095.840998][ T9577] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 2095.854499][ T9577] attempt to access beyond end of device [ 2095.861598][ T9577] loop0: rw=1, want=145, limit=112 [ 2095.891153][ T9577] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 2095.901142][ T9577] attempt to access beyond end of device [ 2095.913820][ T9577] loop0: rw=1, want=153, limit=112 [ 2095.919170][ T9577] attempt to access beyond end of device [ 2095.924859][ T9577] loop0: rw=1, want=182, limit=112 [ 2095.924881][ T9577] Buffer I/O error on dev loop0, logical block 181, lost async page write [ 2095.943996][ T9577] attempt to access beyond end of device [ 2095.956617][ T9577] loop0: rw=1, want=183, limit=112 [ 2095.964007][ T9577] Buffer I/O error on dev loop0, logical block 182, lost async page write [ 2095.984026][ T9577] attempt to access beyond end of device [ 2095.990855][ T9577] loop0: rw=1, want=184, limit=112 [ 2095.996111][ T9577] attempt to access beyond end of device [ 2096.007575][ T9577] loop0: rw=1, want=185, limit=112 [ 2096.012882][ T9577] attempt to access beyond end of device [ 2096.024115][ T9577] loop0: rw=1, want=206, limit=112 [ 2096.030654][ T9577] attempt to access beyond end of device [ 2096.036474][ T9577] loop0: rw=1, want=207, limit=112 [ 2096.046922][ T9577] attempt to access beyond end of device [ 2096.052732][ T9577] loop0: rw=1, want=208, limit=112 [ 2096.063484][ T9577] attempt to access beyond end of device [ 2096.074778][ T9577] loop0: rw=1, want=209, limit=112 [ 2096.085064][ T9577] attempt to access beyond end of device [ 2096.091817][ T9577] loop0: rw=1, want=258, limit=112 [ 2096.102039][ T9577] attempt to access beyond end of device [ 2096.109650][ T9577] loop0: rw=1, want=259, limit=112 [ 2096.114923][ T9577] attempt to access beyond end of device [ 2096.125787][ T9577] loop0: rw=1, want=260, limit=112 [ 2096.132114][ T9577] attempt to access beyond end of device [ 2096.148441][ T9577] loop0: rw=1, want=261, limit=112 [ 2096.153855][ T9577] attempt to access beyond end of device [ 2096.164442][ T9577] loop0: rw=1, want=270, limit=112 [ 2096.172201][ T9577] attempt to access beyond end of device [ 2096.182730][ T9577] loop0: rw=1, want=271, limit=112 [ 2096.191460][ T9577] attempt to access beyond end of device [ 2096.202435][ T9577] loop0: rw=1, want=272, limit=112 [ 2096.247403][ T9577] attempt to access beyond end of device [ 2096.272735][T11799] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006900) [ 2096.273039][ T9577] loop0: rw=1, want=273, limit=112 [ 2096.280660][T11799] FAT-fs (loop4): Filesystem has been set read-only [ 2096.282180][T11799] FAT-fs (loop4): error, invalid access to FAT (entry 0x00006641) [ 2096.305851][ T9577] attempt to access beyond end of device [ 2096.311837][ T9577] loop0: rw=1, want=4065, limit=112 22:53:37 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=0x0) getpgrp(r1) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000040)={0x2, 0x3, 0x23b, 0x5, r2}) tkill(r2, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) r4 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x1, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400)={r0, r5, r6}, 0xc) write$P9_RGETLOCK(r4, &(0x7f0000000200)={0x29, 0x37, 0x1, {0x0, 0x80000001, 0x0, r1, 0xb, 'em1\\nodev\\}'}}, 0x29) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r2, 0x0, 0x0) 22:53:37 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) process_vm_readv(r2, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000003c0)=""/61, 0x3d}], 0x3, &(0x7f0000000e40)=[{&(0x7f00000007c0)=""/243, 0xf3}, {&(0x7f0000000480)=""/11, 0xb}, {&(0x7f00000008c0)=""/118, 0x76}, {&(0x7f0000000500)=""/46, 0x2e}, {&(0x7f0000000940)=""/210, 0xd2}, {&(0x7f0000000a40)=""/232, 0xe8}, {&(0x7f0000000b40)=""/209, 0xd1}, {&(0x7f0000000580)=""/41, 0x29}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000d40)=""/209, 0xd1}], 0xa, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:37 executing program 2: sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) r2 = request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)=',vmnet0\x00', 0x0) keyctl$instantiate(0xc, r2, &(0x7f00000002c0)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', '-,'}, 0x1b, r3) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000140)=0x40) 22:53:37 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xffff8000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2096.392661][ T27] audit: type=1326 audit(1555455217.113:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11784 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ba8a code=0x0 22:53:37 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000200)=0x8000000000, 0x2080000000000000, 0x0, 0x0, 0x0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x15) r2 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x6, 0x0) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000000c0)={0x40, "e546899492004f01fda4db2ef03679cec2f79afb363018aa32001312740092ee", 0x3, 0x1}) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x1f, 0x3, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000140)={0x818, 0x7, 0x20}) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000300)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000180)=[{}], 0x0, [{}, {}]}, 0x98) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r3, 0x100000000800f) 22:53:37 executing program 5: r0 = getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcd37bcfc33ea0e936f43d09333a8af236a6f1f000116d803200bf0b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x3, 0x400) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x9, 0x5b57, 0x400, 0x0, 0x8, 0x20800, 0x2, 0x36, 0x401, 0x9, 0x3b04, 0x1, 0x7, 0x5, 0xe50f, 0x6, 0x5, 0x0, 0x0, 0xaa72, 0x7f, 0x100000000, 0x40, 0x8, 0x9, 0x9, 0xa585, 0x0, 0x3, 0x80000000, 0x5, 0x7, 0x80000000, 0x8, 0x2, 0x0, 0x3836875d, 0x0, @perf_config_ext={0x80000000, 0x4}, 0x20, 0x8, 0x7, 0x7, 0x7, 0xb1d, 0x2}, 0xffffffffffffffff, 0x9, r3, 0x9) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x2000000001f, r0, 0xffffffffffffffff, 0x4) 22:53:37 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000580)=@nl=@unspec, &(0x7f0000000500)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000600), &(0x7f00000006c0)=0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="64000000a1aa8f752b89814bc5c3c8d84a046ffd4b28515921257d4f645e3329b813898fecfb3dc0e9d2390627e0d1b64cbd156a2db616eb61c2e6b3cae41b766f6f5c4a9ecf29ff6966848881a048c1399f6fc4c0703be000f97179a68bc3e7b45b85628d200c37fc65549da4b39e8756752d891d77048cd7035556cc623c5f0051d60310c9947671c57577293185cdeecd823822d24498d49c7efe1fbe293dd71648f5917e", @ANYRES16=r0, @ANYBLOB="000026bd7000000000000200000014000100fe80000000000000000000000000000a080002000000000008000600030000000800050000000000080003000100010014000100fe8000000000000000000000000000aa0800050002000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) dup(r3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') lsetxattr$trusted_overlay_nlink(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000400)='trusted.overlay.nlink\x00', &(0x7f0000000480)={'U+', 0x3}, 0x28, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2097.206691][T30485] attempt to access beyond end of device [ 2097.212692][T30485] loop3: rw=1, want=130, limit=112 [ 2097.224412][T30485] attempt to access beyond end of device [ 2097.238349][T30485] loop3: rw=1, want=131, limit=112 [ 2097.265244][T30485] attempt to access beyond end of device [ 2097.278572][T30485] loop3: rw=1, want=132, limit=112 [ 2097.301211][T30485] attempt to access beyond end of device [ 2097.325057][T30485] loop3: rw=1, want=133, limit=112 [ 2097.371730][T30485] attempt to access beyond end of device [ 2097.408003][T30485] loop3: rw=1, want=142, limit=112 [ 2097.442056][T30485] attempt to access beyond end of device [ 2097.461782][T30485] loop3: rw=1, want=143, limit=112 22:53:38 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xffffc000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:38 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0x12d) r3 = syz_open_procfs(r1, &(0x7f00000000c0)='net/igmp6\x00') setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x40000) wait4(r0, &(0x7f0000000140), 0x8, &(0x7f0000000180)) setsockopt(r4, 0x9, 0x8, &(0x7f0000000300)="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", 0x1000) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2097.499436][T30485] attempt to access beyond end of device [ 2097.525994][T30485] loop3: rw=1, want=144, limit=112 [ 2097.600530][T30485] attempt to access beyond end of device [ 2097.651414][T30485] loop3: rw=1, want=145, limit=112 [ 2097.691947][T30485] attempt to access beyond end of device [ 2097.896684][ C0] net_ratelimit: 20 callbacks suppressed [ 2097.896695][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2097.908226][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2097.914120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2097.919944][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2097.925815][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2097.931712][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2098.065875][T30485] loop3: rw=1, want=497, limit=112 22:53:39 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xfffff000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2099.026679][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2099.032518][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2099.038392][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2099.044159][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:39 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x90, 0x3c041) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:39 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x2, 0x10082) r1 = accept4(r0, &(0x7f0000000200)=@caif=@dbg, &(0x7f0000000140)=0x80, 0x800) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r2 = creat(&(0x7f0000000380)='./file0/file0/file0\x00', 0x200000000) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) getsockopt$ax25_int(r1, 0x101, 0x1, &(0x7f0000000180), &(0x7f0000000340)=0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000280)=""/75, 0x0, 0x800, 0x1}, 0x18) nanosleep(0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:39 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x1071c1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000002c0), 0x4) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r1, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000300)=""/129) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)={&(0x7f0000000400)='./file0/file0\x00', 0x0, 0x8}, 0x10) 22:53:40 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0xd00, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0x5, 0x4}, {0x9, 0xd}, {0x10, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x0, 0x100}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x92a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0, 0xed, 0xfffffffffffffffc) 22:53:40 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)) r0 = getpgid(0xffffffffffffffff) getpgrp(r0) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 22:53:41 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendto$inet(r1, &(0x7f0000000180)="804d0725ff3383631c1df7f262d7eaa72554e22677ade66506db7b2a8334b9da5e82e0eb86d304c4c0248fff90c670cfbdb5020dd317583e797cb719f66a19feb34eb6ad6015f5cd7f5984c6f7e6c23af2acf1baf9d1feba52c97b4f4db740336de52e02c5a65329f9976eb4ce7e9834158c96b6fddd89134241c6bbc72c56a6ced7145bbfb1a75c919c66e76eda1ea986895a73415c53864014f970a12f8d5838b66cd8e69faeba4d9ca560df695baee03d1c088a61245ab9a90e4da7050968c5bc41180b6b4e1818a56ae392931f103e2b211a6d7701d0b22638fdd2d001638c7da61be7c46a", 0xe7, 0x40008c0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = open(&(0x7f0000000300)='./file0\x00', 0x100, 0x114) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000340)=0x3) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x101000, 0x0) getsockopt$inet_dccp_int(r4, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) tkill(r2, 0x1000000000016) ptrace$setsig(0x4203, r2, 0x200, &(0x7f0000000100)={0x15, 0x0, 0x38000000000}) 22:53:41 executing program 2: mkdir(0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000500)=ANY=[@ANYBLOB="04000000e204000003000000000000000010000000000000000000000000000000000080000000000000010000000000956e0000000000001c0c0000000000000200000006000000b78c6fdc1b0844088fbc3324cb68546d191f7768779293931742324c221710df771904447f497abb97a4fcacb7c65946bd0d8ccabc589a6de08abe8ab61c590e494c57accb466f6db4ff4d8e9c6696736562ef0f56a0ad8c560ff115281e59a350a018783422db8df75be79c7e62ab56aaec87a106f0819647dd8ffc41aefc59859323e5176d9fd9670aba609ad4b44276954dd0fc5632959d629fabdbcabba39a36c1d00207d63a508ecf26fc3411d24e4ec3f163d31d98b5f5f66aae0e9f2197884eca12f2db2c6a841b58261bba3ee780c15b7be63f03c3de4a4df1afa988ebadaa6da24a0a"]) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:41 executing program 0: mkdir(0x0, 0x1f) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000002c0)={0x5, 0x401, 0x7fff, 0x8, [], [], [], 0x3f, 0x33, 0x3, 0x40, "ddb0c34a8bd372938dc33deaf7eb4ac9"}) r2 = creat(&(0x7f00000000c0)='./file0/file0\x00', 0xa3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:41 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) accept4$inet(r1, 0x0, &(0x7f00000002c0), 0x800) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000240)={0x1, 0x0, [{0x68, 0x4, 0x0, 0x0, @irqchip={0x81, 0x6}}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2101.098946][T30485] attempt to access beyond end of device [ 2101.129307][T30485] loop0: rw=1, want=39257, limit=112 [ 2101.168936][T30485] attempt to access beyond end of device [ 2101.190966][ T283] attempt to access beyond end of device [ 2101.196922][ T283] loop3: rw=1, want=130, limit=112 [ 2101.205434][T30485] loop0: rw=1, want=39873, limit=112 [ 2101.207573][ T283] buffer_io_error: 22 callbacks suppressed [ 2101.207583][ T283] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2101.229198][ T283] attempt to access beyond end of device [ 2101.234920][ T283] loop3: rw=1, want=131, limit=112 [ 2101.239417][ T21] attempt to access beyond end of device [ 2101.240180][ T283] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2101.248475][ T21] loop2: rw=1, want=32801, limit=32760 [ 2101.254359][ T283] attempt to access beyond end of device [ 2101.268788][ T283] loop3: rw=1, want=132, limit=112 [ 2101.284578][ T283] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2101.302758][ T283] attempt to access beyond end of device [ 2101.334875][ T283] loop3: rw=1, want=133, limit=112 [ 2101.351866][ T283] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2101.378080][ T283] attempt to access beyond end of device [ 2101.401202][ T283] loop3: rw=1, want=142, limit=112 [ 2101.419039][ T283] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2101.445326][ T283] attempt to access beyond end of device [ 2101.473956][ T283] loop3: rw=1, want=143, limit=112 [ 2101.480946][ T283] Buffer I/O error on dev loop3, logical block 142, lost async page write [ 2101.494618][ T283] attempt to access beyond end of device [ 2101.521348][ T283] loop3: rw=1, want=144, limit=112 [ 2101.541099][ T283] Buffer I/O error on dev loop3, logical block 143, lost async page write [ 2101.579171][ T283] attempt to access beyond end of device [ 2101.607980][ T283] loop3: rw=1, want=145, limit=112 [ 2101.640891][ T283] Buffer I/O error on dev loop3, logical block 144, lost async page write [ 2101.671858][ T283] attempt to access beyond end of device [ 2101.685720][ T283] loop3: rw=1, want=153, limit=112 22:53:42 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xffffff8c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2101.692971][ T283] attempt to access beyond end of device [ 2101.704321][ T283] loop3: rw=1, want=182, limit=112 [ 2101.711223][ T283] Buffer I/O error on dev loop3, logical block 181, lost async page write [ 2101.735794][ T283] attempt to access beyond end of device [ 2101.752655][ T283] loop3: rw=1, want=183, limit=112 [ 2101.764779][ T283] Buffer I/O error on dev loop3, logical block 182, lost async page write [ 2101.794632][ T283] attempt to access beyond end of device [ 2101.812009][ T283] loop3: rw=1, want=184, limit=112 [ 2101.828779][ T283] attempt to access beyond end of device [ 2101.841846][ T283] loop3: rw=1, want=185, limit=112 [ 2101.877206][ T283] attempt to access beyond end of device [ 2101.912744][ T283] loop3: rw=1, want=206, limit=112 [ 2101.960522][ T283] attempt to access beyond end of device [ 2102.021834][ T283] loop3: rw=1, want=207, limit=112 [ 2102.037985][ T283] attempt to access beyond end of device [ 2102.061832][ T283] loop3: rw=1, want=208, limit=112 22:53:42 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x581, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x197}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x3f23e982, 0x4, [0x7fffffff, 0x8, 0x100, 0x80000001]}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000100)={0x0, 0x12, 0x8000000000000000, @thr={0x0, 0x0}}, &(0x7f0000000140)) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000080)=0x200, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp], 0x1) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0xf) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video1\x00', 0x2, 0x0) tkill(r3, 0x1000000000016) [ 2102.115961][ T283] attempt to access beyond end of device [ 2102.171381][ T283] loop3: rw=1, want=209, limit=112 22:53:42 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$inet6(0xa, 0x0, 0x5) dup2(r2, r3) tkill(r1, 0x1000000000016) [ 2102.214905][ T283] attempt to access beyond end of device [ 2102.278592][ T283] loop3: rw=1, want=258, limit=112 [ 2102.313260][ T283] attempt to access beyond end of device [ 2102.371579][ T283] loop3: rw=1, want=259, limit=112 [ 2102.405959][ T283] attempt to access beyond end of device [ 2102.462981][ T283] loop3: rw=1, want=260, limit=112 [ 2102.494742][ T283] attempt to access beyond end of device [ 2102.538338][ T283] loop3: rw=1, want=261, limit=112 [ 2102.567332][ T283] attempt to access beyond end of device [ 2102.581129][ T283] loop3: rw=1, want=270, limit=112 [ 2102.586411][ T283] attempt to access beyond end of device [ 2102.592371][ T283] loop3: rw=1, want=271, limit=112 [ 2102.597921][ T283] attempt to access beyond end of device [ 2102.612067][ T283] loop3: rw=1, want=272, limit=112 [ 2102.631407][ T283] attempt to access beyond end of device [ 2102.641493][ T283] loop3: rw=1, want=273, limit=112 [ 2102.663113][ T283] attempt to access beyond end of device [ 2102.681859][ T283] loop3: rw=1, want=425, limit=112 22:53:43 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) fsetxattr$security_smack_transmute(r2, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x2) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) [ 2103.186709][ C0] net_ratelimit: 20 callbacks suppressed [ 2103.186720][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2103.198365][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2103.204288][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2103.210105][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:44 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x2, 0x5, [0x5, 0xb2a, 0x100000001, 0x996, 0x20]}, &(0x7f00000000c0)=0x12) write$nbd(r2, &(0x7f0000000180)={0x67446698, 0x0, 0x3, 0x0, 0x4, "a4c7def97b5a6825d444d26c27b02fdfb33829d23466056401d4f8388ef21f0e5b721ef6fb90c9f2973a0168cb4b0e3f64e16f2435c333e0ff69d66e276de5203871d0f854c019e4963d64040c797b94dd79a5362f0a2ffb3f779d9140a13b6268e11885c89754a5d10968d6600c276b8c1cb4ca5f80c11363ca69e9ec6edab58d95fc5c4f74d4d36a23bb843c9c026450ded8d3f908aeef7227e042521ec1a836fd729c48ad7ef19afb8108d720540a23cd05d7462117212fce81390faec0"}, 0xcf) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r3, 0x3f}, &(0x7f0000000140)=0x8) 22:53:44 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:53:44 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) signalfd(r0, &(0x7f0000000140)={0x1}, 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:44 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8000, 0x1}, 0x2}, 0x20, 0x1, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd915, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2103.816673][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2103.822592][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:53:44 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x0, 0xae03) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) r3 = semget(0x1, 0x0, 0xc) semctl$IPC_INFO(r3, 0x4, 0x3, &(0x7f0000000040)=""/249) [ 2103.897902][ T9577] attempt to access beyond end of device [ 2103.903609][ T9577] loop0: rw=1, want=130, limit=112 [ 2103.923882][ T9577] attempt to access beyond end of device [ 2103.960041][ T9577] loop0: rw=1, want=131, limit=112 [ 2103.966538][ T9577] attempt to access beyond end of device [ 2104.007776][ T9577] loop0: rw=1, want=132, limit=112 [ 2104.015891][ T9577] attempt to access beyond end of device [ 2104.033954][ T9577] loop0: rw=1, want=133, limit=112 [ 2104.051742][ T9577] attempt to access beyond end of device [ 2104.081659][ T9577] loop0: rw=1, want=142, limit=112 [ 2104.093841][ T9577] attempt to access beyond end of device [ 2104.135020][ T9577] loop0: rw=1, want=143, limit=112 [ 2104.146728][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2104.152556][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2104.158481][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2104.160826][ T9577] attempt to access beyond end of device [ 2104.164248][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2104.205664][ T9577] loop0: rw=1, want=144, limit=112 [ 2104.229587][ T9577] attempt to access beyond end of device [ 2104.256018][ T9577] loop0: rw=1, want=145, limit=112 [ 2104.281048][ T9577] attempt to access beyond end of device [ 2104.307166][ T9577] loop0: rw=1, want=153, limit=112 [ 2104.332761][ T9577] attempt to access beyond end of device [ 2104.359238][ T9577] loop0: rw=1, want=182, limit=112 [ 2104.384345][ T9577] attempt to access beyond end of device [ 2104.413800][ T9577] loop0: rw=1, want=183, limit=112 [ 2104.444932][ T9577] attempt to access beyond end of device [ 2104.477379][ T9577] loop0: rw=1, want=184, limit=112 22:53:45 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xffffffe5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2104.501500][ T9577] attempt to access beyond end of device [ 2104.521391][ T9577] loop0: rw=1, want=185, limit=112 [ 2104.552455][ T9577] attempt to access beyond end of device [ 2104.574059][ T9577] loop0: rw=1, want=206, limit=112 [ 2104.595128][ T9577] attempt to access beyond end of device [ 2104.617055][ T9577] loop0: rw=1, want=207, limit=112 [ 2104.636283][ T9577] attempt to access beyond end of device [ 2104.657047][ T9577] loop0: rw=1, want=208, limit=112 [ 2104.676959][ T9577] attempt to access beyond end of device [ 2104.697984][ T9577] loop0: rw=1, want=209, limit=112 [ 2104.718214][ T9577] attempt to access beyond end of device [ 2104.739998][ T9577] loop0: rw=1, want=258, limit=112 [ 2104.759099][ T9577] attempt to access beyond end of device [ 2104.780845][ T9577] loop0: rw=1, want=259, limit=112 [ 2104.800499][ T9577] attempt to access beyond end of device [ 2104.820195][ T9577] loop0: rw=1, want=260, limit=112 22:53:45 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101000, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080)=0x51, 0x4) [ 2104.825401][ T9577] attempt to access beyond end of device [ 2104.832483][ T9577] loop0: rw=1, want=261, limit=112 [ 2104.839183][ T9577] attempt to access beyond end of device [ 2104.844824][ T9577] loop0: rw=1, want=270, limit=112 [ 2104.850050][ T9577] attempt to access beyond end of device [ 2104.859431][ T9577] loop0: rw=1, want=271, limit=112 [ 2104.864710][ T9577] attempt to access beyond end of device 22:53:45 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="64000000d45e099defb5e8f660399ce53faf12a0c25f623686b39e7c4f5c0227e112ceeb6fca4e4dd1ab174b5ea3d59097f0291098650456be63f1e7f2afc573d77d9b93f636b909d5e90d18b1b8a385344ce52b45d7fb528f4926ad63d45da8cbb507552ff32f7572", @ANYRES16=r0, @ANYBLOB="000026bd7000000000000200000014000100fe80000000000000000000000000000a08000a000000000008000600030000000800050000000000080003000100010014000100fe8000000000000000000000000000aa0800050002000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000240)='y\x00', 0x11d, 0x2) [ 2104.896953][ T9577] loop0: rw=1, want=272, limit=112 [ 2104.902160][ T9577] attempt to access beyond end of device [ 2104.926536][ T9577] loop0: rw=1, want=273, limit=112 [ 2105.091605][ T9577] attempt to access beyond end of device [ 2105.112559][ T9577] loop0: rw=1, want=4977, limit=112 [ 2105.225752][ T9577] attempt to access beyond end of device [ 2105.284183][ T9577] loop0: rw=1, want=7585, limit=112 [ 2105.387393][ T9577] attempt to access beyond end of device [ 2105.425524][ T9577] loop0: rw=1, want=10481, limit=112 [ 2105.559135][ T9577] attempt to access beyond end of device [ 2105.618544][ T9577] loop0: rw=1, want=10897, limit=112 22:53:46 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000240)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000002c0)={{0xffffffffffffffff, 0x3, 0xff, 0x3, 0x4}, 0x80000001, 0x2}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:46 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xfffffff6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:46 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400080, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) futex(&(0x7f0000000040), 0x8e, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x1000000000016) 22:53:47 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) r2 = syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000280)=[@in6={0xa, 0x4e22, 0x8, @ipv4={[], [], @loopback}, 0x41a}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @multicast1}], 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x12, &(0x7f00000002c0)=0x7fffffff, 0x4) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40011}, 0x24048000) 22:53:47 executing program 2: mkdir(0x0, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:48 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xfffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:48 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x0, &(0x7f0000000180)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e23, @loopback}}}, 0x108) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2108.296678][ C0] net_ratelimit: 20 callbacks suppressed [ 2108.296689][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.308201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2108.314067][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.319871][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2108.325696][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2108.331483][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:50 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0x301) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:50 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0', [{0x20, 'em0'}, {0x20, 'vfat\x00'}, {0x20, '//,em0+eth0'}, {}, {}, {0x20, 'vfat\x00'}, {}, {0x20, 'vfat\x00'}], 0xa, "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"}, 0x1030) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000200)={0x6, 0x1, @stop_pts=0xfffffffffffffffe}) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:53:50 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x87, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f0000000200)={0x6}) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0x8c, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000080)) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x80000001, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x8000000000000012, 0x0, @tid=r1}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400, 0x0) tkill(r1, 0x1000000000016) [ 2109.302899][T30485] attempt to access beyond end of device [ 2109.350249][T30485] loop2: rw=1, want=35529, limit=112 [ 2109.362844][T30485] attempt to access beyond end of device [ 2109.380266][T30485] loop2: rw=1, want=37577, limit=112 [ 2109.403313][T30485] attempt to access beyond end of device [ 2109.415114][T30485] loop2: rw=1, want=39625, limit=112 [ 2109.420596][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2109.420647][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2109.420737][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2109.420792][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:53:50 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/pid_for_children\x00') timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:50 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2109.602871][T30485] attempt to access beyond end of device [ 2109.633437][T30485] loop2: rw=1, want=41673, limit=112 [ 2109.642822][T30485] attempt to access beyond end of device [ 2109.648664][T30485] loop2: rw=1, want=43721, limit=112 [ 2109.657990][T30485] attempt to access beyond end of device [ 2109.663638][T30485] loop2: rw=1, want=45769, limit=112 [ 2109.668823][T30485] attempt to access beyond end of device [ 2109.674600][T30485] loop2: rw=1, want=48777, limit=112 [ 2109.691604][T30485] attempt to access beyond end of device [ 2109.698472][T30485] loop2: rw=1, want=52809, limit=112 [ 2109.713214][T30485] attempt to access beyond end of device [ 2109.718941][T30485] loop2: rw=1, want=58177, limit=112 [ 2109.734226][T30485] attempt to access beyond end of device [ 2109.739956][T30485] loop2: rw=1, want=63337, limit=112 [ 2109.748562][T30485] attempt to access beyond end of device [ 2109.754235][T30485] loop2: rw=1, want=63338, limit=112 [ 2109.760399][T30485] buffer_io_error: 38 callbacks suppressed [ 2109.760410][T30485] Buffer I/O error on dev loop2, logical block 63337, lost async page write [ 2109.775093][T30485] attempt to access beyond end of device [ 2109.780884][T30485] loop2: rw=1, want=63339, limit=112 [ 2109.786184][T30485] Buffer I/O error on dev loop2, logical block 63338, lost async page write [ 2109.786222][T30485] attempt to access beyond end of device [ 2109.800763][T30485] loop2: rw=1, want=63340, limit=112 [ 2109.806076][T30485] Buffer I/O error on dev loop2, logical block 63339, lost async page write [ 2109.814874][T30485] attempt to access beyond end of device [ 2109.820569][T30485] loop2: rw=1, want=63341, limit=112 [ 2109.825886][T30485] Buffer I/O error on dev loop2, logical block 63340, lost async page write [ 2109.835130][T30485] attempt to access beyond end of device [ 2109.844825][T30485] loop2: rw=1, want=130, limit=112 [ 2109.856064][T30485] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2109.905231][T30485] attempt to access beyond end of device [ 2109.921684][T30485] loop2: rw=1, want=131, limit=112 [ 2109.930717][T30485] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2109.947421][T30485] attempt to access beyond end of device [ 2109.953828][T30485] loop2: rw=1, want=132, limit=112 [ 2109.966428][T30485] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2110.023413][T30485] attempt to access beyond end of device [ 2110.052927][T30485] loop2: rw=1, want=133, limit=112 [ 2110.062302][T30485] Buffer I/O error on dev loop2, logical block 132, lost async page write 22:53:50 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)={0x0, 0x0}) process_vm_readv(r0, &(0x7f0000001840)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/111, 0x6f}, {&(0x7f00000016c0)=""/161, 0xa1}, {&(0x7f0000001780)=""/177, 0xb1}], 0x5, &(0x7f0000001d40)=[{&(0x7f00000018c0)=""/192, 0xc0}, {&(0x7f0000001980)=""/188, 0xbc}, {&(0x7f0000001a40)=""/199, 0xc7}, {&(0x7f0000001b40)=""/158, 0x9e}, {&(0x7f0000000480)=""/4, 0x4}, {&(0x7f0000001c00)=""/101, 0x65}, {&(0x7f0000000500)=""/23, 0x17}, {&(0x7f0000001c80)=""/140, 0x8c}], 0x8, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r1, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:50 executing program 0: sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe800000000000000000000a080002000500000008000600030000000800036db7fe410008000500000000000800030001000100080005002500000014000100fe8000000000000000000000000000aaf0ff05000200000000000000adcc1365e77c5c1e4c6533490a487b3c31777f"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f00000000c0)=0x8001, 0x8) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2110.080430][T30485] attempt to access beyond end of device [ 2110.086208][T30485] loop2: rw=1, want=2437, limit=112 22:53:51 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000026bd7000000000000200000014000100fe8000000000000020ffff0a0100010000000000080006000300050000000000080003000100010014000100fe6300000000000000000000000000aa080005000200009700000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000740)={{{@in6=@ipv4={[], [], @loopback}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) syz_mount_image$reiserfs(&(0x7f0000000240)='reiserfs\x00', &(0x7f00000002c0)='./file0/file1\x00', 0x8000, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000300)="78556b3046f0fca152a327787987bda427679b00f2a40ed7cacb368d236dc09d92f6109f6dd78f0b5587d308cb42ee8fbace29dd63af7e9df8e14201fd993a295d4fff149af5a80ce9f5d3aaa2df716a1bf40749441f151aaf295b661d19fe336339b737348b10ab5e4372ad03bd1a4b4bb4219637c1ebc3f95fd1ed6f36f90b851c667064a16dde211220b01171539809e4d145f02a44f83e6547d6035a48b91f39418feab5b988a4a772d930d336b98d0a", 0xb2, 0x3ff}], 0xb34ff50fa7bcb215, &(0x7f0000000840)={[{@errors_ro_remount='errors=ro-remount'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@usrjquota='usrjquota'}, {@noacl='noacl'}, {@jdev={'jdev', 0x3d, './file0'}}, {@balloc_no_unhash_reloc='block-allocator=no_unhashed_relocation'}, {@nouser_xattr='nouser_xattr'}], [{@mask={'mask', 0x3d, 'MAY_READ'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@appraise_type='appraise_type=imasig'}, {@uid_eq={'uid', 0x3d, r2}}, {@uid_lt={'uid<', r3}}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:51 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000040)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x220000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x400}) 22:53:51 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000002c0)='./file0/file1\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x6}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video1\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000300)={0x1, 0x0, {0x1df5, 0xffffffff, 0x3017, 0x6, 0x9, 0x7, 0x3, 0x7}}) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:51 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x100) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/245) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054f205106cc1bee23070002146738dad5700000000008a2a59800"/53], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, 0x0, 0x20000005, &(0x7f0000000040)) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) r3 = creat(&(0x7f0000000180)='./file0\x00', 0x7c7b18fff2d61dcb) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000001c0)=0x7) [ 2110.526504][ T283] attempt to access beyond end of device [ 2110.533850][ T283] loop3: rw=1, want=130, limit=112 [ 2110.561201][ T283] Buffer I/O error on dev loop3, logical block 129, lost async page write 22:53:51 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'hwsim0\x00', {0x2, 0x4e24, @local}}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'ipddp0\x00', {0x2, 0x4e20, @local}}) tkill(r3, 0x1000000000016) [ 2110.583600][ T283] attempt to access beyond end of device [ 2110.616734][ T283] loop3: rw=1, want=131, limit=112 [ 2110.621898][ T283] Buffer I/O error on dev loop3, logical block 130, lost async page write 22:53:51 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x2000, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x23001500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x220, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000240)=0x74b5b6a, 0x4) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f03d09333a8af237a6f1f000116d803200b90b5a205106cc1bee2707000214673857c337316c5e1d7ea2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000280)=0xedb, 0x4) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2110.679674][ T283] attempt to access beyond end of device [ 2110.700749][ T283] loop3: rw=1, want=132, limit=112 [ 2110.739971][ T283] attempt to access beyond end of device [ 2110.759651][ T283] loop3: rw=1, want=133, limit=112 [ 2110.780563][ T283] attempt to access beyond end of device [ 2110.800164][ T283] loop3: rw=1, want=142, limit=112 [ 2110.811014][ T283] attempt to access beyond end of device [ 2110.824443][ T283] loop3: rw=1, want=143, limit=112 [ 2110.837228][ T283] attempt to access beyond end of device [ 2110.843519][ T283] loop3: rw=1, want=144, limit=112 [ 2110.863879][ T283] attempt to access beyond end of device [ 2110.900705][ T283] loop3: rw=1, want=145, limit=112 [ 2110.930797][ T283] attempt to access beyond end of device [ 2110.959341][ T283] loop3: rw=1, want=761, limit=112 22:53:52 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() getgroups(0x6, &(0x7f00000002c0)=[0xee00, 0x0, 0x0, 0xee00, 0xffffffffffffffff, 0x0]) r4 = getegid() r5 = getgid() lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0/file2\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x6}, [{0x2, 0x5, r1}], {0x4, 0x7}, [{0x8, 0x0, r2}, {0x8, 0x2, r3}, {0x8, 0x1, r4}, {0x8, 0x5, r5}], {0x10, 0x7}, {0x20, 0x7}}, 0x4c, 0x1) 22:53:52 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:52 executing program 5: r0 = getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000080)=r0) 22:53:52 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000040), 0x0, 0x2, 0x0, 0x0, 0x1) futex(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x80000000) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x40000) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe2(&(0x7f0000000080), 0x4000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:53:52 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x2) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x4, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x3, 0x7, 0xe94, 0x5}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="a8f1ce1dc149a6226503dd9b9d039b4452cbb0842627985bf06504884a23621ecc4bd665f223602a", 0x28, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000002c0)={r4, 0x0, 0xf7}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'tgr128\x00'}}, &(0x7f0000000380)="5cfc9c69897f41d9f050cafdde7021f0d80f8b19c7ce0275545d181f1332b16bb7945cbd2d8ac74bb4f95d59a4a600869914ec0afb00af8143f8ca1f5291418a261d0ddac6fc7bbef8b0388cde9a47578d5e9a8f", &(0x7f00000016c0)=""/4096) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:52 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f00000002c0)={[{0x2f, 'pids'}, {0x0, 'memory'}]}, 0xe) write$P9_RREADDIR(r1, &(0x7f0000000240)={0x30, 0x29, 0x2, {0x0, [{{0x0, 0x0, 0x2}, 0x3, 0x4, 0xd, './file0/file0'}]}}, 0x30) mknod(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2111.560746][ T21] attempt to access beyond end of device [ 2111.566904][ T21] loop2: rw=1, want=130, limit=112 [ 2111.572068][ T21] attempt to access beyond end of device [ 2111.572087][ T21] loop2: rw=1, want=131, limit=112 [ 2111.596893][ T21] attempt to access beyond end of device [ 2111.623213][ T21] loop2: rw=1, want=132, limit=112 [ 2111.632018][ T21] attempt to access beyond end of device [ 2111.641302][ T21] loop2: rw=1, want=133, limit=112 [ 2111.672644][ T21] attempt to access beyond end of device [ 2111.717721][ T21] loop2: rw=1, want=142, limit=112 [ 2111.743564][ T21] attempt to access beyond end of device [ 2111.754542][ T21] loop2: rw=1, want=143, limit=112 [ 2111.788661][ T21] attempt to access beyond end of device [ 2111.834056][ T21] loop2: rw=1, want=144, limit=112 [ 2111.871311][ T21] attempt to access beyond end of device [ 2111.956848][ T21] loop2: rw=1, want=145, limit=112 [ 2111.990620][ T21] attempt to access beyond end of device [ 2112.014630][ T21] loop2: rw=1, want=153, limit=112 [ 2112.025973][ T21] attempt to access beyond end of device [ 2112.035232][ T21] loop2: rw=1, want=182, limit=112 [ 2112.050341][ T21] attempt to access beyond end of device [ 2112.056380][ T21] loop2: rw=1, want=183, limit=112 [ 2112.079493][ T21] attempt to access beyond end of device [ 2112.092851][ T21] loop2: rw=1, want=184, limit=112 [ 2112.101568][ T21] attempt to access beyond end of device [ 2112.113593][ T21] loop2: rw=1, want=185, limit=112 [ 2112.123091][ T21] attempt to access beyond end of device [ 2112.135032][ T21] loop2: rw=1, want=206, limit=112 [ 2112.144076][ T21] attempt to access beyond end of device [ 2112.156135][ T21] loop2: rw=1, want=207, limit=112 [ 2112.164894][ T21] attempt to access beyond end of device [ 2112.180025][ T21] loop2: rw=1, want=208, limit=112 [ 2112.185591][ T21] attempt to access beyond end of device [ 2112.196167][ T21] loop2: rw=1, want=209, limit=112 22:53:53 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:53:53 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) write$smack_current(r1, &(0x7f00000001c0)='vmnet0^*@em0+!bdevvboxnet1[bdev*\x00', 0x21) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000240)=0x1, 0x800000000006, 0xffffffffffffffff, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x13c50000, 0x208842) getsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000300)=""/189, &(0x7f00000003c0)=0xbd) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000140)=0x84) mount(&(0x7f0000000400)=@sg0='/dev/sg0\x00', &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='sysv\x00', 0xcd35982f17035795, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x7, 0x100}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x1, 0x10}, 0xc) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r5 = syz_open_procfs(r0, &(0x7f0000000280)='auxv\x00') ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000200)={0x800100f, 0x200, 0x1}) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, 0x0) tkill(r4, 0x1000000000016) 22:53:53 executing program 0: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000af000000349c5c9fc24d00ab67b43f9e7086abac5fafff221a6071961370bfb6d39a53cab3c14ea8848ab1dbfd144dc40449b988e68a0b01ce9779c5b99ebe6786a550320f915349c94cc9036a3c57ced4ed4cc6de3ee4de5a9475aaae5d20b071dee8e6df9655f588d9390aebaa493993d911a6c755e2a248b674bcf01ef93365a99a39dd9c62648b976803b8eebef7961355ffc067ccaebada5d11cdf7d6d55d11e25e1c181bb3ec6da7a8a98f16f3141e7f"], &(0x7f0000000140)=0xd3) mkdir(0x0, 0x2) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000003c0)={0x81, 0x0, [0x0, 0x2, 0x170, 0x1]}) r2 = getpgrp(0xffffffffffffffff) sched_setscheduler(r2, 0x7, &(0x7f0000000200)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x42000, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x1fffb) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r5 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x1) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2112.726434][ T283] attempt to access beyond end of device [ 2112.734732][ T283] loop0: rw=1, want=130, limit=112 [ 2112.761460][ T283] attempt to access beyond end of device [ 2112.773074][ T283] loop0: rw=1, want=131, limit=112 [ 2112.784813][ T283] attempt to access beyond end of device [ 2112.810092][ T283] loop0: rw=1, want=132, limit=112 [ 2112.843121][ T283] attempt to access beyond end of device [ 2112.861992][ T283] loop0: rw=1, want=133, limit=112 22:53:53 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x7, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x9, 0x80800) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e22, @empty}, {0x2, 0x4e24, @remote}, 0x30d, 0x0, 0x0, 0x0, 0xd3, 0x0, 0xbf8, 0x2, 0x7}) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000200)={0x3f, "543eae9f16043c7a394478394293a70f43fabfeeb5566edbcfb10a32cd9738a3", 0x421, 0x3, 0xebb, 0x5, 0x5}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, 0x0) mq_timedreceive(r2, &(0x7f0000000300)=""/234, 0xea, 0x61536147, 0x0) tkill(r1, 0x1000000000016) [ 2112.887438][ T283] attempt to access beyond end of device [ 2112.902843][ T283] loop0: rw=1, want=142, limit=112 [ 2112.913048][ T283] attempt to access beyond end of device [ 2112.933516][ T283] loop0: rw=1, want=143, limit=112 [ 2113.063860][ T283] attempt to access beyond end of device [ 2113.109137][ T283] loop0: rw=1, want=144, limit=112 22:53:53 executing program 2: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000240)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000140)=""/15, 0x1100000, 0x1800, 0xffff}, 0x18) [ 2113.133644][ T283] attempt to access beyond end of device [ 2113.160352][ T283] loop0: rw=1, want=145, limit=112 [ 2113.170523][ T8167] attempt to access beyond end of device [ 2113.176361][ T8167] loop2: rw=1, want=130, limit=112 [ 2113.184574][ T283] attempt to access beyond end of device [ 2113.196899][ T283] loop0: rw=1, want=2209, limit=112 [ 2113.202213][ T8167] attempt to access beyond end of device [ 2113.217995][ T283] attempt to access beyond end of device [ 2113.223732][ T8167] loop2: rw=1, want=131, limit=112 [ 2113.233731][ T283] loop0: rw=1, want=4257, limit=112 [ 2113.240092][ T8167] attempt to access beyond end of device [ 2113.247244][ T8167] loop2: rw=1, want=132, limit=112 [ 2113.255508][ T283] attempt to access beyond end of device [ 2113.263313][ T8167] attempt to access beyond end of device [ 2113.273736][ T283] loop0: rw=1, want=7009, limit=112 [ 2113.280061][ T8167] loop2: rw=1, want=133, limit=112 [ 2113.292409][ T8167] attempt to access beyond end of device [ 2113.301733][ T283] attempt to access beyond end of device [ 2113.312079][ T8167] loop2: rw=1, want=142, limit=112 [ 2113.318327][ T283] loop0: rw=1, want=9089, limit=112 [ 2113.323649][ T8167] attempt to access beyond end of device [ 2113.338916][ T8167] loop2: rw=1, want=143, limit=112 [ 2113.345736][ T283] attempt to access beyond end of device [ 2113.356243][ T8167] attempt to access beyond end of device [ 2113.363064][ T283] loop0: rw=1, want=11601, limit=112 [ 2113.378837][ T8167] loop2: rw=1, want=144, limit=112 22:53:54 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2113.392363][ T8167] attempt to access beyond end of device [ 2113.401214][ T283] attempt to access beyond end of device [ 2113.411557][ T8167] loop2: rw=1, want=145, limit=112 [ 2113.420998][ T283] loop0: rw=1, want=14297, limit=112 [ 2113.434979][ T283] attempt to access beyond end of device [ 2113.444984][ T8167] attempt to access beyond end of device [ 2113.449835][ T283] loop0: rw=1, want=14326, limit=112 [ 2113.455118][ T8167] loop2: rw=1, want=2193, limit=112 [ 2113.462368][ T283] attempt to access beyond end of device [ 2113.494740][ T8167] attempt to access beyond end of device [ 2113.505244][ T283] loop0: rw=1, want=14327, limit=112 [ 2113.513421][ T283] attempt to access beyond end of device [ 2113.524454][ T8167] loop2: rw=1, want=4241, limit=112 [ 2113.547060][ T283] loop0: rw=1, want=14328, limit=112 [ 2113.567607][ T8167] attempt to access beyond end of device [ 2113.575054][ T283] attempt to access beyond end of device [ 2113.580875][ C0] net_ratelimit: 20 callbacks suppressed [ 2113.580883][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2113.580938][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2113.581033][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2113.581090][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2113.621013][ T8167] loop2: rw=1, want=5913, limit=112 22:53:54 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000240)={{0xcd4, 0x7, 0x6, 0x4, 0x4c4d, 0x40}, 0x100000000}) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$void(r1, 0x5450) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') close(r2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2113.772921][ T283] loop0: rw=1, want=14329, limit=112 [ 2113.795946][ T283] attempt to access beyond end of device [ 2113.865315][ T283] loop0: rw=1, want=14350, limit=112 [ 2113.921502][ T283] attempt to access beyond end of device [ 2113.948204][ T283] loop0: rw=1, want=14351, limit=112 [ 2113.967338][ T283] attempt to access beyond end of device [ 2113.986481][ T283] loop0: rw=1, want=14352, limit=112 [ 2114.044249][ T283] attempt to access beyond end of device [ 2114.086430][ T283] loop0: rw=1, want=14353, limit=112 [ 2114.124823][ T283] attempt to access beyond end of device [ 2114.141438][ T283] loop0: rw=1, want=14402, limit=112 [ 2114.216681][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2114.222511][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2114.536711][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2114.542550][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2114.548415][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2114.554209][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2114.717192][ T283] attempt to access beyond end of device [ 2114.941330][ T283] loop0: rw=1, want=14403, limit=112 [ 2114.952297][ T283] buffer_io_error: 47 callbacks suppressed [ 2114.952310][ T283] Buffer I/O error on dev loop0, logical block 14402, lost async page write [ 2114.972630][ T283] attempt to access beyond end of device [ 2114.978400][ T283] loop0: rw=1, want=14404, limit=112 22:53:55 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3199d070") r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000200)='/dev/zero\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d80320000005a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, &(0x7f0000000280)=0x8) timer_create(0x7, &(0x7f0000000180)={0x0, 0x2, 0x0, @thr={&(0x7f0000000040)="e1b46c5d996770ae0f96d04be14335e6570760", &(0x7f0000000080)="2c11b963d2f1089ef524087d24ea3fc0f43503af151644ca21edf83862f459351bc6a4a374c7d86817ab9e333cc14a9e7d3afb9bc3d56a9020490e1fbfb4ac28b5a952593e65448bbf4996574a97c1"}}, &(0x7f00000001c0)) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 2114.983701][ T283] Buffer I/O error on dev loop0, logical block 14403, lost async page write [ 2115.026746][ T283] attempt to access beyond end of device 22:53:55 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2115.072883][ T283] loop0: rw=1, want=14405, limit=112 [ 2115.083415][ T283] Buffer I/O error on dev loop0, logical block 14404, lost async page write [ 2115.092361][ T283] attempt to access beyond end of device [ 2115.098263][ T283] loop0: rw=1, want=14414, limit=112 [ 2115.111605][T30485] attempt to access beyond end of device 22:53:55 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2115.112177][ T283] Buffer I/O error on dev loop0, logical block 14413, lost async page write [ 2115.131793][ T283] attempt to access beyond end of device [ 2115.142866][T30485] loop4: rw=1, want=36337, limit=112 [ 2115.148740][ T283] loop0: rw=1, want=14415, limit=112 [ 2115.158755][T30485] attempt to access beyond end of device [ 2115.164411][T30485] loop4: rw=1, want=38385, limit=112 [ 2115.165825][ T283] Buffer I/O error on dev loop0, logical block 14414, lost async page write [ 2115.173888][T30485] attempt to access beyond end of device [ 2115.186256][T30485] loop4: rw=1, want=40521, limit=112 [ 2115.198351][T30485] attempt to access beyond end of device [ 2115.200793][ T283] attempt to access beyond end of device [ 2115.215305][ T283] loop0: rw=1, want=14416, limit=112 [ 2115.216622][T30485] loop4: rw=1, want=44553, limit=112 [ 2115.221707][ T283] Buffer I/O error on dev loop0, logical block 14415, lost async page write [ 2115.236341][T30485] attempt to access beyond end of device [ 2115.258146][T30485] loop4: rw=1, want=50713, limit=112 22:53:56 executing program 2: mkdir(0x0, 0xc3) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) setitimer(0x2, &(0x7f0000000140)={{0x77359400}, {0x77359400}}, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2115.288520][ T283] attempt to access beyond end of device [ 2115.291351][T30485] attempt to access beyond end of device [ 2115.307979][T30485] loop4: rw=1, want=54305, limit=112 [ 2115.314044][ T283] loop0: rw=1, want=14417, limit=112 [ 2115.330272][ T283] Buffer I/O error on dev loop0, logical block 14416, lost async page write [ 2115.342416][ T283] attempt to access beyond end of device [ 2115.345373][ T9577] attempt to access beyond end of device [ 2115.348506][ T283] loop0: rw=1, want=14745, limit=112 [ 2115.359943][ T9577] loop2: rw=1, want=130, limit=112 [ 2115.379866][ T9577] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2115.423049][ T9577] attempt to access beyond end of device [ 2115.443065][ T9577] loop2: rw=1, want=131, limit=112 [ 2115.449412][ T9577] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2115.482090][ T9577] attempt to access beyond end of device [ 2115.501898][ T9577] loop2: rw=1, want=132, limit=112 [ 2115.507585][ T9577] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2115.516196][ T9577] attempt to access beyond end of device [ 2115.526647][ T9577] loop2: rw=1, want=133, limit=112 [ 2115.536758][ T9577] attempt to access beyond end of device [ 2115.542408][ T9577] loop2: rw=1, want=142, limit=112 [ 2115.556433][ T9577] attempt to access beyond end of device [ 2115.596737][ T9577] loop2: rw=1, want=143, limit=112 [ 2115.608849][ T9577] attempt to access beyond end of device [ 2115.614496][ T9577] loop2: rw=1, want=144, limit=112 22:53:56 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) openat$cgroup_type(r0, &(0x7f0000000240)='cgroup.type\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r1, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYRES32], 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2115.646648][ T9577] attempt to access beyond end of device [ 2115.652315][ T9577] loop2: rw=1, want=145, limit=112 [ 2115.672162][ T9577] attempt to access beyond end of device [ 2115.689003][ T9577] loop2: rw=1, want=4201, limit=112 [ 2115.706334][ T9577] attempt to access beyond end of device [ 2115.714942][ T9577] loop2: rw=1, want=7257, limit=112 [ 2115.724916][ T9577] attempt to access beyond end of device [ 2115.735248][ T9577] loop2: rw=1, want=9305, limit=112 [ 2115.744813][ T9577] attempt to access beyond end of device [ 2115.754588][ T9577] loop2: rw=1, want=11353, limit=112 [ 2115.763150][ T9577] attempt to access beyond end of device [ 2115.768999][ T9577] loop2: rw=1, want=13401, limit=112 [ 2115.790789][ T9577] attempt to access beyond end of device [ 2115.796900][ T9577] loop2: rw=1, want=15449, limit=112 [ 2115.808017][ T9577] attempt to access beyond end of device [ 2115.814298][ T9577] loop2: rw=1, want=17497, limit=112 [ 2115.826438][ T9577] attempt to access beyond end of device [ 2115.868074][ T9577] loop2: rw=1, want=19545, limit=112 [ 2115.892011][ T9577] attempt to access beyond end of device [ 2115.909628][ T9577] loop2: rw=1, want=21593, limit=112 [ 2115.925485][ T9577] attempt to access beyond end of device [ 2115.931335][ T9577] loop2: rw=1, want=23681, limit=112 [ 2115.951035][ T9577] attempt to access beyond end of device [ 2115.994075][ T9577] loop2: rw=1, want=27721, limit=112 22:53:56 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000400)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) getgroups(0x40000000000000f0, &(0x7f0000000200)=[0xee00, 0x0]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={r1, r2, r3}, 0xc) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r5, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r6 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) clock_settime(0x0, &(0x7f00000000c0)={0x0, 0x989680}) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[], 0x925aee5c2baa23b5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000006c0)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$SG_GET_TIMEOUT(r6, 0x2202, 0x0) 22:53:56 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0x7fff}, 0x4) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) tkill(r1, 0x1000000000016) 22:53:56 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2116.174592][ T9577] attempt to access beyond end of device [ 2116.249142][ T9577] loop2: rw=1, want=32313, limit=112 22:53:57 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2116.309078][ T9577] attempt to access beyond end of device [ 2116.337195][ T9577] loop2: rw=1, want=32889, limit=112 [ 2116.514718][T12361] overlayfs: filesystem on './file0' not supported [ 2117.189897][T12366] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) [ 2117.198010][T12366] FAT-fs (loop3): Filesystem has been set read-only [ 2117.205735][T12366] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) 22:53:57 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2117.235643][T12366] FAT-fs (loop3): error, invalid access to FAT (entry 0x00006500) 22:53:58 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2117.282853][ T283] attempt to access beyond end of device [ 2117.343890][ T283] loop4: rw=1, want=36449, limit=112 [ 2117.418215][ T283] attempt to access beyond end of device [ 2117.446129][ T283] loop4: rw=1, want=39089, limit=112 22:53:58 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') signalfd(r1, &(0x7f0000000240)={0x9}, 0x8) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) utimensat(r1, &(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000340)={{r2, r3/1000+10000}}, 0x100) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2117.522515][ T283] attempt to access beyond end of device [ 2117.552441][ T283] loop4: rw=1, want=39969, limit=112 22:53:59 executing program 5: r0 = getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000340)=0x14, 0x80000) r3 = syz_open_dev$sndpcmc(&(0x7f0000003000)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffc1, 0x10040) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000003080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000003140)={&(0x7f0000003040), 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x1c, r4, 0xa16084aa207b59f1, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000380)) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000240)) ioctl$TIOCCONS(r6, 0x541d) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl$void(r5, 0xc0045878) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000180)=&(0x7f00000000c0)={&(0x7f0000000080)={&(0x7f0000000040)}}, &(0x7f00000001c0)=0x18) 22:53:59 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$TIOCCBRK(r0, 0x5428) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl(r3, 0xd3, &(0x7f0000000200)="86f7776c8237ecce408be2637dd19e45c9da9dec94cbdb9df33bd997a727b06fa511a2afacf2ee25520b373afb41ed63ac5170da71d0a56f629ede6b7e55acbebf06e87e5d4a595d24f3e4b188a1cb49f7ee54a79564be13c58355db049e95889c8fa936") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:53:59 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2118.616248][ T283] attempt to access beyond end of device [ 2118.638102][ T283] loop3: rw=1, want=130, limit=112 [ 2118.673501][ T283] attempt to access beyond end of device [ 2118.696722][ C0] net_ratelimit: 20 callbacks suppressed [ 2118.696731][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2118.707595][ T283] loop3: rw=1, want=131, limit=112 [ 2118.708203][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2118.719124][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2118.720086][ T283] attempt to access beyond end of device [ 2118.724885][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2118.724995][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2118.742081][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2118.798954][ T283] loop3: rw=1, want=132, limit=112 [ 2118.834468][ T283] attempt to access beyond end of device [ 2118.875650][ T283] loop3: rw=1, want=133, limit=112 [ 2118.916673][ T283] attempt to access beyond end of device [ 2118.922347][ T283] loop3: rw=1, want=142, limit=112 [ 2118.927548][ T283] attempt to access beyond end of device [ 2118.933187][ T283] loop3: rw=1, want=143, limit=112 [ 2118.938524][ T283] attempt to access beyond end of device [ 2118.944164][ T283] loop3: rw=1, want=144, limit=112 [ 2118.949416][ T283] attempt to access beyond end of device [ 2118.955067][ T283] loop3: rw=1, want=145, limit=112 [ 2118.962939][ T283] attempt to access beyond end of device [ 2118.986694][ T283] loop3: rw=1, want=2193, limit=112 [ 2118.995908][ T283] attempt to access beyond end of device [ 2119.016645][ T283] loop3: rw=1, want=4241, limit=112 [ 2119.025756][ T283] attempt to access beyond end of device [ 2119.040220][ T283] loop3: rw=1, want=6289, limit=112 [ 2119.061212][ T283] attempt to access beyond end of device [ 2119.079787][ T283] loop3: rw=1, want=8337, limit=112 [ 2119.143419][ T283] attempt to access beyond end of device [ 2119.163695][ T283] loop3: rw=1, want=10385, limit=112 [ 2119.200917][ T283] attempt to access beyond end of device [ 2119.220886][ T283] loop3: rw=1, want=12433, limit=112 [ 2119.256452][ T283] attempt to access beyond end of device [ 2119.281742][ T283] loop3: rw=1, want=14481, limit=112 [ 2119.314990][ T283] attempt to access beyond end of device [ 2119.335356][ T283] loop3: rw=1, want=16529, limit=112 [ 2119.366505][ T283] attempt to access beyond end of device [ 2119.389141][ T283] loop3: rw=1, want=18577, limit=112 [ 2119.431047][ T283] attempt to access beyond end of device [ 2119.471387][ T283] loop3: rw=1, want=22073, limit=112 [ 2119.540441][ T283] attempt to access beyond end of device [ 2119.562228][ T283] loop3: rw=1, want=26105, limit=112 [ 2119.594872][ T9577] attempt to access beyond end of device [ 2119.613139][ T9577] loop0: rw=1, want=130, limit=112 [ 2119.624028][ T283] attempt to access beyond end of device [ 2119.632971][ T9577] attempt to access beyond end of device [ 2119.642278][ T283] loop3: rw=1, want=32265, limit=112 [ 2119.651477][ T9577] loop0: rw=1, want=131, limit=112 [ 2119.666129][ T9577] attempt to access beyond end of device [ 2119.681329][ T283] attempt to access beyond end of device [ 2119.690176][ T9577] loop0: rw=1, want=132, limit=112 [ 2119.695507][ T283] loop3: rw=1, want=32889, limit=112 [ 2119.704413][ T9577] attempt to access beyond end of device [ 2119.714154][ T9577] loop0: rw=1, want=133, limit=112 [ 2119.722846][ T9577] attempt to access beyond end of device [ 2119.731805][ T9577] loop0: rw=1, want=142, limit=112 [ 2119.746059][ T9577] attempt to access beyond end of device [ 2119.756815][ T9577] loop0: rw=1, want=143, limit=112 [ 2119.767661][ T9577] attempt to access beyond end of device [ 2119.778610][ T9577] loop0: rw=1, want=144, limit=112 [ 2119.783858][ T9577] attempt to access beyond end of device [ 2119.789603][ T9577] loop0: rw=1, want=145, limit=112 [ 2119.794876][ T9577] attempt to access beyond end of device [ 2119.800673][ T9577] loop0: rw=1, want=153, limit=112 [ 2119.805920][ T9577] attempt to access beyond end of device [ 2119.811797][ T9577] loop0: rw=1, want=182, limit=112 [ 2119.817072][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2119.817129][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2119.817221][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2119.817266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2119.840865][ T9577] attempt to access beyond end of device [ 2119.846631][ T9577] loop0: rw=1, want=183, limit=112 [ 2119.851884][ T9577] attempt to access beyond end of device [ 2119.879224][ T9577] loop0: rw=1, want=184, limit=112 [ 2119.893669][ T9577] attempt to access beyond end of device [ 2119.921838][ T9577] loop0: rw=1, want=185, limit=112 [ 2119.939717][ T9577] attempt to access beyond end of device 22:54:00 executing program 2: mkdir(0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='task\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=0x0, &(0x7f0000000240)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e22, 0x9, @local, 0x3}}, 0x1, 0x1, 0x1, 0x8001, 0x4}, &(0x7f0000000340)=0x98) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:00 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:00 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080203000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa08000500020000008d3a9d928429d1b111990e60382e13bd075bb997b4a04b3620d0a5cb2a4cb57a9726ef706b89328f8b560b3b2c15eabab12cf9e3885ffdfe2dc432dc70de9edf9f70e2"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2119.963659][ T9577] loop0: rw=1, want=206, limit=112 [ 2119.985836][ T9577] buffer_io_error: 25 callbacks suppressed [ 2119.985848][ T9577] Buffer I/O error on dev loop0, logical block 205, lost async page write [ 2120.003669][ T9577] attempt to access beyond end of device [ 2120.014671][ T9577] loop0: rw=1, want=207, limit=112 [ 2120.020153][ T9577] Buffer I/O error on dev loop0, logical block 206, lost async page write [ 2120.028825][ T9577] attempt to access beyond end of device [ 2120.034550][ T9577] loop0: rw=1, want=208, limit=112 [ 2120.039957][ T9577] Buffer I/O error on dev loop0, logical block 207, lost async page write [ 2120.048609][ T9577] attempt to access beyond end of device [ 2120.054320][ T9577] loop0: rw=1, want=209, limit=112 [ 2120.059554][ T9577] Buffer I/O error on dev loop0, logical block 208, lost async page write [ 2120.068227][ T9577] attempt to access beyond end of device [ 2120.073965][ T9577] loop0: rw=1, want=258, limit=112 [ 2120.079211][ T9577] Buffer I/O error on dev loop0, logical block 257, lost async page write [ 2120.087867][ T9577] attempt to access beyond end of device [ 2120.093595][ T9577] loop0: rw=1, want=259, limit=112 [ 2120.098839][ T9577] Buffer I/O error on dev loop0, logical block 258, lost async page write [ 2120.107640][ T9577] attempt to access beyond end of device [ 2120.113362][ T9577] loop0: rw=1, want=260, limit=112 [ 2120.118638][ T9577] Buffer I/O error on dev loop0, logical block 259, lost async page write [ 2120.127367][ T9577] attempt to access beyond end of device [ 2120.133076][ T9577] loop0: rw=1, want=261, limit=112 [ 2120.164520][ T9577] Buffer I/O error on dev loop0, logical block 260, lost async page write [ 2120.189662][ T9577] attempt to access beyond end of device [ 2120.201029][ T9577] loop0: rw=1, want=270, limit=112 22:54:00 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:00 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x7ff, 0x2) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x0, 0x2, 0x3, 0xfffffffffffffff7, 0x1, "f5da6e37dde516224973de5ebe103557500fc3983ccedf9f052a1ed8f26be56c079acb43733daa4d7f17a12d710624086e171ad62da8849bd94ce86c35902e", 0xb}, 0x60) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2120.220446][ T9577] Buffer I/O error on dev loop0, logical block 269, lost async page write [ 2120.246716][ T9577] attempt to access beyond end of device [ 2120.254040][ T9577] loop0: rw=1, want=271, limit=112 [ 2120.259309][ T9577] Buffer I/O error on dev loop0, logical block 270, lost async page write [ 2120.269181][ T9577] attempt to access beyond end of device [ 2120.274823][ T9577] loop0: rw=1, want=272, limit=112 [ 2120.310062][ T9577] attempt to access beyond end of device [ 2120.315729][ T9577] loop0: rw=1, want=273, limit=112 [ 2120.376909][ T9577] attempt to access beyond end of device [ 2120.396247][ T9577] loop0: rw=1, want=497, limit=112 22:54:01 executing program 1: r0 = getpid() mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x94, 0x100) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) utimensat(r1, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{r2, r3/1000+10000}}, 0x100) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x1, 0x0, 0x0, 0xffffffffffffffff) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0x80003, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x10, &(0x7f0000000140)={&(0x7f0000000080)=""/150, 0x96, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r5, 0x10, &(0x7f00000001c0)={&(0x7f0000001300)=""/4096, 0x1000, r6}}, 0xd) timer_create(0x7, &(0x7f0000000240)={0x0, 0x12, 0x0, @tid=r4}, &(0x7f0000044000)=0x0) write$P9_RRENAMEAT(r5, &(0x7f0000000300)={0x7, 0x4b, 0x2}, 0x7) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f0000000000)={{r8, r9+10000000}, {0x77359400}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r5, 0x5411, 0x0) tkill(r4, 0x1000000000016) 22:54:01 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:01 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x1, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:54:02 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) setxattr$trusted_overlay_nlink(&(0x7f0000001700)='./file0/file1\x00', &(0x7f0000001740)='trusted.overlay.nlink\x00', &(0x7f0000001780)={'U+', 0xffffffff}, 0x28, 0x2) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f0000000200)='./file0/file1\x00', 0x5, 0x7, &(0x7f0000001600)=[{&(0x7f0000000240)="be2624dffb5bbe9facdd6211f6a61bfc8f64c31edc2f8a3c5583bf6db30f8a2ee92b4d7095e36994f43add38f16938f895", 0x31, 0x69}, {&(0x7f0000000280)="37d668872b9e007f0b5b0517949498a14ff00b0fa96c7656a62934813c44260a0c0a212007fd21ca7a7f9733cd20bcabd9210e300b1afd978c763745f2550be1f1fca666ce05d49f1ca7e791dd979b1dd1dbe5e3861e7cad1b14fe65ab75c37302b39e2e7a3c85846a24e4bebb2f9de04b50e7257ad84b647551df3e87e962a9664e5c561237dc342eab136ecee6ef0d79", 0x91, 0x1}, {&(0x7f0000000340)="585cb2b2e2e4e1286588a3f934cbb851f1d970babadc8e45af9979ae9e9107c4764302f25e9ab62795f105fadbf74faad3904d06198c52a036d8ba8b1afeefe6caf3f68348a8d2857d111a9510aa5d7b35edea890d2bb1c67d17288440f113628c14a7abd7de347bf3252e18812d971d76b861ae809a50f42a0fc03615a98e22e8164774acf7c67fd385703b5c9e7974daf7b13cbce414a0ae2a6ddab753f6585c8e4ce29ee97dbceb97b7a0b32c79ca00d5ad042e0420662c81173b315e48b5c0f671d925d4ff62ec5cf7674f4d2f89359a8aa9188634eb51e39280a7d46714b52f19da72009c4ba730efa3bd1dc4f9c7", 0xf1, 0x1}, {&(0x7f0000000480)="dd09326a23cdfdfd05d3ed7d85c2ffa3838810dcff964e0d81fcf758f0fb53c1e222546eab2818", 0x27, 0x7}, {&(0x7f0000000500)="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", 0x1000, 0x5}, {&(0x7f0000001500)="e18b68c10635998b7dceafb2461f6da7cf080e72141b85089fc40d7c9c42a384e9c90e5eb7dcbdedbf54a5f9753f58d6fe4c039cc31e74bbcd54bc0c303e889e9cb7ee8afbcce9bb030775b9841a32cc88aea4c874fd0e1703f9afc9fbf009ca91e9", 0x62, 0x1000}, {&(0x7f0000001580)="35341a60917d0e6d1446fc4171965556822928bc5fcde7375741be26f0d8f722a7f3b52942ff2b4e0fd8b74e6a6bbccb0e0fb9a00e170b384f0c302417afd3e88384174fe8244bd91aed0bf447", 0x4d, 0x7f}], 0x1008001, &(0x7f00000016c0)={[{@usrjquota='usrjquota'}], [{@seclabel='seclabel'}]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:02 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xa, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:54:02 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12, 0x0, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2122.219147][T30485] attempt to access beyond end of device [ 2122.245336][T30485] loop2: rw=1, want=35041, limit=112 [ 2122.755978][T30485] attempt to access beyond end of device [ 2122.767906][T30485] loop2: rw=1, want=37089, limit=112 [ 2122.778222][T30485] attempt to access beyond end of device [ 2122.784029][T30485] loop2: rw=1, want=39137, limit=112 [ 2122.798692][T30485] attempt to access beyond end of device [ 2122.843481][T30485] loop2: rw=1, want=39969, limit=112 22:54:04 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000240), &(0x7f00000002c0)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0xffffffffffffffac, 0x2) 22:54:04 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffc, 0x200) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x4e24, @empty}}}, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20002) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0xffffffffffffffff) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000380)={0x6d7, 0x1, 0xab7, 0x0, 0x6, 0x54c4, 0x5, 0x2, 0x5, 0xa56, 0x4, 0x3, 0x0, 0x7b, 0x7, 0xfff, 0x1431, 0x9, 0xc0d000}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x1ff) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000140)=0x6, &(0x7f0000000200)=0x4) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:04 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:04 executing program 5: r0 = getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4203, r0, 0xffff, 0x8) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0xffffffffffffffff, r1, 0x0, 0x0) 22:54:04 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000000140)={&(0x7f0000000040)="47e87d2949f4e862ed693181c14fc0f9f50ce06563acc9ae213f3d2de81dc2b4ed6bbab3c5b31fcdd778bc0dda35f8d436ba0e38f2a21c4b8846c24bc008b1a6a9dd4fe77ee583cdf9dc2e433085c2e950719b968bac4adfebe5764c14b60b8ae554d3aab8cb309e4a48aa38092b6228ed104f4096707a2a5712d6b7a30e628aab33a746e6b8d5aa21baf95ffcbc7f4cefdbb3e61378566af8ce0e84ef83a7c75e66b527411244db0b152d79fa6a9b0b2f5e0c285e89ad00fd26e9a02f8e13277ffaa9f0211138", 0xc7}) tkill(r1, 0x1000000000016) 22:54:04 executing program 5: getpgid(0x0) getpgid(0xffffffffffffffff) getpgid(0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)) getpgrp(0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) getpgrp(r0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SIOCAX25OPTRT(r1, 0x89e7, &(0x7f0000000180)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x76}) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r2, 0x0, 0x0) [ 2123.976681][ C0] net_ratelimit: 20 callbacks suppressed [ 2123.976691][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.988183][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2123.994011][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2123.999836][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:04 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:04 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) io_uring_setup(0x769, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x2e}) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:54:04 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:05 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x2010, r0, 0x10000000) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2124.342078][T30485] attempt to access beyond end of device [ 2124.349059][T30485] loop0: rw=1, want=130, limit=112 [ 2124.358533][T30485] attempt to access beyond end of device [ 2124.368092][T30485] loop0: rw=1, want=131, limit=112 [ 2124.377201][T30485] attempt to access beyond end of device [ 2124.390399][T30485] loop0: rw=1, want=132, limit=112 [ 2124.406264][T30485] attempt to access beyond end of device [ 2124.416392][T30485] loop0: rw=1, want=133, limit=112 [ 2124.425951][T30485] attempt to access beyond end of device [ 2124.441617][T30485] loop0: rw=1, want=142, limit=112 [ 2124.464107][T30485] attempt to access beyond end of device [ 2124.493259][T30485] loop0: rw=1, want=143, limit=112 [ 2124.515594][T30485] attempt to access beyond end of device [ 2124.531341][T30485] loop0: rw=1, want=144, limit=112 [ 2124.543810][T30485] attempt to access beyond end of device [ 2124.549532][T30485] loop0: rw=1, want=145, limit=112 [ 2124.554723][T30485] attempt to access beyond end of device [ 2124.606150][T30485] loop0: rw=1, want=153, limit=112 [ 2124.616687][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2124.622494][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2124.656071][T30485] attempt to access beyond end of device [ 2124.694502][T30485] loop0: rw=1, want=182, limit=112 22:54:05 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) epoll_create(0xfffffffffffffffe) [ 2124.791563][T30485] attempt to access beyond end of device 22:54:05 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x4000000000004, &(0x7f0000000200)=0x9) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2124.866867][T30485] loop0: rw=1, want=183, limit=112 [ 2124.911628][T30485] attempt to access beyond end of device [ 2124.936665][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2124.942567][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2124.948456][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2124.954226][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2124.969713][T30485] loop0: rw=1, want=184, limit=112 [ 2124.993150][T30485] buffer_io_error: 12 callbacks suppressed [ 2124.993162][T30485] Buffer I/O error on dev loop0, logical block 183, lost async page write [ 2125.045527][T30485] attempt to access beyond end of device [ 2125.066962][T30485] loop0: rw=1, want=185, limit=112 [ 2125.085986][T30485] Buffer I/O error on dev loop0, logical block 184, lost async page write [ 2125.119158][T30485] attempt to access beyond end of device [ 2125.148522][T30485] loop0: rw=1, want=206, limit=112 22:54:05 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ioctl$sock_rose_SIOCRSCLRRT(r1, 0x89e4) mknod(&(0x7f0000000240)='./file0/file0\x00', 0x0, 0x8) write$P9_RLINK(r1, &(0x7f00000002c0)={0x7, 0x47, 0x2}, 0x7) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2125.173453][T30485] Buffer I/O error on dev loop0, logical block 205, lost async page write [ 2125.202690][T30485] attempt to access beyond end of device [ 2125.210737][ T283] attempt to access beyond end of device [ 2125.217674][ T283] loop3: rw=1, want=130, limit=112 [ 2125.220568][T30485] loop0: rw=1, want=207, limit=112 [ 2125.222973][ T283] Buffer I/O error on dev loop3, logical block 129, lost async page write [ 2125.236757][ T283] attempt to access beyond end of device [ 2125.242569][ T283] loop3: rw=1, want=131, limit=112 [ 2125.243026][T30485] Buffer I/O error on dev loop0, logical block 206, lost async page write [ 2125.248109][ T283] Buffer I/O error on dev loop3, logical block 130, lost async page write [ 2125.265401][ T283] attempt to access beyond end of device [ 2125.271292][ T283] loop3: rw=1, want=132, limit=112 [ 2125.276939][ T283] Buffer I/O error on dev loop3, logical block 131, lost async page write [ 2125.280690][T30485] attempt to access beyond end of device [ 2125.285701][ T283] attempt to access beyond end of device [ 2125.297506][ T283] loop3: rw=1, want=133, limit=112 [ 2125.304751][ T283] Buffer I/O error on dev loop3, logical block 132, lost async page write [ 2125.313589][ T283] attempt to access beyond end of device [ 2125.330340][ T283] loop3: rw=1, want=142, limit=112 [ 2125.335669][ T283] Buffer I/O error on dev loop3, logical block 141, lost async page write [ 2125.340984][T30485] loop0: rw=1, want=208, limit=112 [ 2125.351858][ T283] attempt to access beyond end of device [ 2125.371008][ T283] loop3: rw=1, want=143, limit=112 [ 2125.378718][T30485] Buffer I/O error on dev loop0, logical block 207, lost async page write [ 2125.389972][ T283] attempt to access beyond end of device [ 2125.403671][ T283] loop3: rw=1, want=144, limit=112 [ 2125.409130][T30485] attempt to access beyond end of device [ 2125.419635][ T283] attempt to access beyond end of device [ 2125.425472][T30485] loop0: rw=1, want=209, limit=112 [ 2125.434359][ T283] loop3: rw=1, want=145, limit=112 [ 2125.439844][T30485] attempt to access beyond end of device [ 2125.450362][ T283] attempt to access beyond end of device [ 2125.456182][T30485] loop0: rw=1, want=258, limit=112 [ 2125.463881][T30485] attempt to access beyond end of device [ 2125.470503][ T283] loop3: rw=1, want=393, limit=112 [ 2125.479893][T30485] loop0: rw=1, want=259, limit=112 [ 2125.489816][T30485] attempt to access beyond end of device [ 2125.502911][T30485] loop0: rw=1, want=260, limit=112 [ 2125.512927][T30485] attempt to access beyond end of device [ 2125.526136][T30485] loop0: rw=1, want=261, limit=112 [ 2125.535898][T30485] attempt to access beyond end of device [ 2125.559112][T30485] loop0: rw=1, want=270, limit=112 [ 2125.571345][T30485] attempt to access beyond end of device [ 2125.584248][T30485] loop0: rw=1, want=271, limit=112 [ 2125.596756][T30485] attempt to access beyond end of device [ 2125.602604][T30485] loop0: rw=1, want=272, limit=112 [ 2125.608020][T30485] attempt to access beyond end of device [ 2125.613853][T30485] loop0: rw=1, want=273, limit=112 [ 2125.623152][T30485] attempt to access beyond end of device [ 2125.629063][T30485] loop0: rw=1, want=2721, limit=112 [ 2125.639852][T30485] attempt to access beyond end of device [ 2125.645672][T30485] loop0: rw=1, want=4769, limit=112 [ 2125.655956][T30485] attempt to access beyond end of device [ 2125.661948][T30485] loop0: rw=1, want=6817, limit=112 [ 2125.672471][T30485] attempt to access beyond end of device [ 2125.678337][T30485] loop0: rw=1, want=8865, limit=112 [ 2125.696943][T30485] attempt to access beyond end of device [ 2125.711252][T30485] loop0: rw=1, want=10913, limit=112 22:54:06 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xc50) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000680)=""/227) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000580)) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000340)) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x22) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x206, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r4, 0x1000000000016) [ 2125.747988][T30485] attempt to access beyond end of device [ 2125.764112][T30485] loop0: rw=1, want=12961, limit=112 [ 2125.809551][T30485] attempt to access beyond end of device [ 2125.832645][T30485] loop0: rw=1, want=14241, limit=112 22:54:07 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:07 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:54:07 executing program 2: sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file1\x00', &(0x7f0000000240)='./file0/file1\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) r2 = add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x1}, &(0x7f0000000740)="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", 0x1000, 0xffffffffffffffff) r3 = request_key(&(0x7f0000000380)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='vfat\x00', 0xfffffffffffffffb) keyctl$negate(0xd, r2, 0x9, r3) mq_notify(r0, &(0x7f0000000200)={0x0, 0x24, 0x0, @tid=r1}) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x2000000000000) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f0000000480)={0x88, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x8, 0x4, 0x10}, 0x2c) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x5, 0x3, 0x5, 0x4471, 0x0, 0x52, 0x24001, 0xa, 0x1, 0xed7, 0x0, 0x1, 0xfffffffffffffff8, 0x6, 0xff, 0x1, 0x20, 0x0, 0x6, 0xa18c, 0x4, 0x4, 0x7, 0x0, 0x284, 0x8000, 0xab, 0x357, 0x4, 0x0, 0x1, 0x8, 0x6, 0x40, 0x9, 0x9, 0x0, 0x9, 0x2, @perf_config_ext={0x8, 0x9}, 0x100, 0x0, 0x1, 0x0, 0x3, 0x7, 0x80000000}, r1, 0x0, r0, 0x9) 22:54:08 executing program 2: mkdir(0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x3, 0x80) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000240)=""/18, &(0x7f0000000280)=0x12) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000200)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fdatasync(r1) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000780)=""/4096) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file1\x00', 0x6000, 0x0) 22:54:08 executing program 5: r0 = getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r1, 0x0, 0x0) 22:54:08 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) tkill(r1, 0x1000000000016) 22:54:08 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2128.152923][T30485] attempt to access beyond end of device [ 2128.195220][T30485] loop0: rw=1, want=36345, limit=112 22:54:09 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2128.257206][T30485] attempt to access beyond end of device [ 2128.288936][T30485] loop0: rw=1, want=38393, limit=112 [ 2128.321186][T30485] attempt to access beyond end of device [ 2128.326906][T30485] loop0: rw=1, want=41145, limit=112 [ 2128.330950][T30485] attempt to access beyond end of device [ 2128.337916][T30485] loop0: rw=1, want=43041, limit=112 22:54:09 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f00000002c0)=""/152, &(0x7f0000000240)=0x98) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2128.484829][T12648] attempt to access beyond end of device [ 2128.496146][T12648] loop2: rw=2049, want=130, limit=112 [ 2128.510635][T12648] attempt to access beyond end of device [ 2128.519008][T12648] loop2: rw=2049, want=131, limit=112 [ 2128.526072][T12648] attempt to access beyond end of device [ 2128.532521][T12648] loop2: rw=2049, want=132, limit=112 [ 2128.538727][T12648] attempt to access beyond end of device [ 2128.545237][T12648] loop2: rw=2049, want=133, limit=112 [ 2128.551274][T12648] attempt to access beyond end of device [ 2128.559521][T12648] loop2: rw=2049, want=142, limit=112 [ 2128.565154][T12648] attempt to access beyond end of device [ 2128.580961][T12648] loop2: rw=2049, want=143, limit=112 [ 2128.620051][T12648] attempt to access beyond end of device [ 2128.648499][T12648] loop2: rw=2049, want=144, limit=112 [ 2128.668178][T12648] attempt to access beyond end of device [ 2128.725027][T12648] loop2: rw=2049, want=145, limit=112 [ 2128.777866][T12648] attempt to access beyond end of device [ 2128.851030][T12648] loop2: rw=2049, want=241, limit=112 22:54:09 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) stat(&(0x7f0000000140)='./file0/file2\x00', &(0x7f0000000200)) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:09 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = openat$cgroup(0xffffffffffffff9c, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0xffff) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000080)={0xa, 0x6, 0x5, 0x1}, 0xa) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2129.021426][ T9577] attempt to access beyond end of device [ 2129.030868][ T9577] loop2: rw=1, want=793, limit=112 [ 2129.080738][ T9577] attempt to access beyond end of device [ 2129.096701][ C0] net_ratelimit: 20 callbacks suppressed [ 2129.096712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.108368][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.114237][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.120069][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.125931][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2129.131749][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2129.163345][ T9577] loop2: rw=1, want=822, limit=112 [ 2129.199120][ T9577] attempt to access beyond end of device [ 2129.238259][ T9577] loop2: rw=1, want=823, limit=112 [ 2129.273934][ T9577] attempt to access beyond end of device [ 2129.306698][ T9577] loop2: rw=1, want=824, limit=112 [ 2129.344626][ T9577] attempt to access beyond end of device [ 2129.413133][ T9577] loop2: rw=1, want=825, limit=112 22:54:10 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2129.462354][ T9577] attempt to access beyond end of device [ 2129.472425][ T9577] loop2: rw=1, want=846, limit=112 [ 2129.484417][ T9577] attempt to access beyond end of device [ 2129.507397][ T9577] loop2: rw=1, want=847, limit=112 [ 2129.512580][ T9577] attempt to access beyond end of device [ 2129.549933][ T9577] loop2: rw=1, want=848, limit=112 [ 2129.560489][ T9577] attempt to access beyond end of device [ 2129.577046][ T9577] loop2: rw=1, want=849, limit=112 [ 2129.595066][ T9577] attempt to access beyond end of device [ 2129.611538][ T9577] loop2: rw=1, want=898, limit=112 [ 2129.624532][ T9577] attempt to access beyond end of device [ 2129.635230][ T9577] loop2: rw=1, want=899, limit=112 [ 2129.652355][ T9577] attempt to access beyond end of device [ 2129.683305][ T9577] loop2: rw=1, want=900, limit=112 [ 2129.713431][ T9577] attempt to access beyond end of device [ 2129.739495][ T9577] loop2: rw=1, want=901, limit=112 [ 2129.763838][ T9577] attempt to access beyond end of device [ 2129.790976][ T9577] loop2: rw=1, want=910, limit=112 [ 2129.816179][ T9577] attempt to access beyond end of device [ 2129.843639][ T9577] loop2: rw=1, want=911, limit=112 [ 2129.870859][ T9577] attempt to access beyond end of device 22:54:10 executing program 3: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x5, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000980)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, r2, 0x500, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4107, 0x0, {0x14, 0x18, {0x1c, @bearer=@l2={'eth', 0x3a, 'nlmon0\x00'}}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x210, r1, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6df580f1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xaa}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xde54}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffeffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x760b}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff001}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb2d800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}]}, 0x210}, 0x1, 0x0, 0x0, 0x800}, 0x80) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000002a969fe336ad96bb10509123697aa8b8c255fc50e1503cf29a6c4324f7ffeea7a9768fb981ca50db1bd866fad8ed93db02a42d305aaf0443f6367a6eae628b72d3208c2a5fc2bd8511f9d4698e3276bffc4103f30e03e971a5111fb922ab201a854f7417bf0e0fd1629f5495deb5ed786110c2d322f43f4350e543aafcc9341bbbb54cf9c0ce6f4d7981ba7050f2d330d557446c2bd9a2d1d8031665cd89fb38326d8426e131e7b8c3b1e68eed4deb9286ded7731a5086217e8605", @ANYRES16=r3, @ANYBLOB="000026bd7000000000000200000014000100fe80000000000000000000000000000a080002000000000008000600030000000800050000000000080003000100010014000100fe8000000000000000000000000000aa0800050002000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000009c0)={0x1, @time, 0x80, {0x9, 0x8}, 0x80000001, 0x1, 0x3}) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000600)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2129.913038][ T9577] loop2: rw=1, want=912, limit=112 [ 2129.960422][ T9577] attempt to access beyond end of device [ 2129.989735][ T9577] loop2: rw=1, want=913, limit=112 [ 2130.009072][ T9577] buffer_io_error: 35 callbacks suppressed [ 2130.009083][ T9577] Buffer I/O error on dev loop2, logical block 912, lost async page write [ 2130.071770][ T9577] attempt to access beyond end of device 22:54:10 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r1 = shmget(0x0, 0x3000, 0x54000000, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000040)=""/89) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r2, 0x1000000000016) [ 2130.123556][ T9577] loop2: rw=1, want=1001, limit=112 [ 2130.216747][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2130.222568][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2130.228441][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2130.234205][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:11 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYPTR64], 0xfffffffffffffe22) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:11 executing program 5: getpgrp(0xffffffffffffffff) clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = dup3(r1, r1, 0x80000) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x13b, 0x100000000, 0x7f, 0x0, 0x8, 0x5, 0x8, 0xfffffffffffffff7, 0x4, 0x3, 0x81}, 0xb) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e9a397598856fbf1ea36a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:54:12 executing program 3: mkdir(0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x101000, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000580)={0x0, 0x1, 0x8, &(0x7f0000000500)=0x2}) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r1, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet6(r2, &(0x7f00000006c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000700)=0x1c, 0x800) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x6) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4e21, 0x8000, @mcast1, 0xb7}}, 0x0, 0x1, 0x0, "87219630c1f0c38a4106c42884c3de31436d124d3e24ac1321e5aed474edd31edae5b447742cbaee9ab5b3a623f80f2ce8178949c81111ea95f2bb72162c48660c50c0487775212537eb4e397e588925"}, 0xd8) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) setxattr$security_evm(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)='security.evm\x00', &(0x7f0000000400)=@ng={0x4, 0x0, "67ef75296311f041"}, 0xa, 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r2) 22:54:12 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x113, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0x401}}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:12 executing program 2: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c80)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000dc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000d80)={&(0x7f0000000cc0)={0xac, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2ece}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x50c}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9b98}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7625}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2d9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x7, 0x667, 0x81, {}, {0x77359400}, {0x1, 0x9, 0xffff, 0x7fff}, 0x1, @can={{0x4, 0x62, 0x7f, 0xa11c}, 0x7, 0x3, 0x0, 0x0, "d1f47dba910c105d"}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4080) mkdir(0x0, 0x0) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r0, 0x0, 0x5, &(0x7f0000000500)='vfat\x00'}, 0x30) sched_setscheduler(r4, 0x2, &(0x7f0000000580)=0x4003) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r5 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r6 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000020000, 0x0, 0x0, 0x40000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000300)={&(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @empty}, 0x0, 0x4, 0x2, 0x2}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000280)="7264cd23bdaf85805a109875915b18bc293f8b5cafc48d154221608e0ac3b3ae51de8002e59efc6446ed14f9ba97c4a4020fd91d270cb719a59e844dc7007101622bab4e103c3bef4756c7e0a089508d70d976513263506bf4808e3dbdbaeff586f063acca61fe248cb813483a7a38f0a67d25f0", 0x74}, {&(0x7f0000000780)="65a727acc03991651264a0d0a4c81c9eafe4e576d8d6c8522fb2488e6162ae4d5b839e1b90bb9f879ac9ffd7f478d227c44a110cd79ca25f7170ee00fc0c5a4a143672ec2e4df724f3bc34cf85e327ff4da24f196120d9638322ce92", 0x5c}, {&(0x7f0000000800)="a663743a27ec435000c8d4535c67e078d9af4b56ff6bf12ccc52ae18a7d5f694bf8c34af6e5ca3ba401afea1dac40ec26795ba48009b197b57d3f7bd2a193543a06f9f832071bf15dbd14f27fadcf0ca35c41420c03dc5900f001e1b540e138674c5147719f9c1ce6906aa7a670dd6e0b51fac42a1aa634ac86944c84a4573cba869a8bafbcb2e5a19c9015b4a600fd6ec12379c26fb160028e0aa1db7c8138bbcf00a00c08b2dddecc8aa7b415fc5b2cbd1369ba5675145a1c2f4a613fb8ae5f9aefb1a08d1a71b4bd2309e94f31a2bec8bd0c9f7bff143f056ee7c4d11278743c628e522", 0xe5}, {&(0x7f0000000900)="cac15d306b8cce5792f10f9aea5d2b0ad09311d4cdc5d931c0c3907ce268a2513bccffa557cff7aacfe3013a8b76a22ad3ce4da03deed5928b99d62e31ea9c8897b697d4482f9c9d86df51f53de7af4d67bf76510f854ee01c973795274b170ca5d62c0a1826b83a67a35c2256ebfbbf40fd00fc5ac0ead5565430111dca28939caed1632b2ee290f6bb2c32a8f8fef1907d3036f81b7e6ff62f207430151aa6bf3bcd12ec07f4f84b0379412f8c26461743088cb7fa249deb2e33982a30bfc9ae79bf2b1f9d6610ef02", 0xca}, {&(0x7f0000000a00)="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", 0xfa}, {&(0x7f0000000b00)="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", 0xff}], 0x6}, 0x20000000) 22:54:12 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000200)={0x4, 0x8, 0xfa00, {r3, 0x8}}, 0x10) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:12 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/79, 0x4f) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000140)={0x9, 0x3, 0xb87d, 0x0, 'syz1\x00', 0x2208}) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:12 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:13 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000200)='./file0/file1\x00', 0x422, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:13 executing program 0: mkdir(0x0, 0x0) r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x502) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140), &(0x7f0000000200)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], 0x17) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000240)=0x10000, 0x4) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ftruncate(r4, 0x0) 22:54:13 executing program 3: mkdir(0x0, 0x104) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:54:14 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000100)) r2 = getpid() write$evdev(r1, &(0x7f0000000140)=[{{}, 0x17, 0x8e6, 0x2}, {{0x0, 0x7530}, 0x13, 0x3d, 0xd32}, {{0x77359400}, 0x1f, 0x843, 0x100000000}, {{0x77359400}, 0x0, 0xffffffff, 0x9}], 0x60) sched_setattr(r2, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f0000000080)) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r3 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x6, 0xce}, 0x0, 0x0, &(0x7f0000000240)={0x9, 0x1ff, 0x6d98, 0x4}, &(0x7f0000000280)=0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x6}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)=r4, 0x4) timer_create(0x0, &(0x7f0000044000)={0x0, 0xf, 0x1, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r3, 0x1000000000016) 22:54:14 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@sack_perm, @window={0x3, 0x7, 0x8}, @window={0x3, 0x401, 0x101}, @mss={0x2, 0x80000001}, @mss={0x2, 0x7}, @sack_perm], 0x6) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L+', 0x6}, 0x28, 0x3) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8400018}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r4, 0x115, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) r5 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r3, 0x40bc5311, &(0x7f00000006c0)={0x7fffffff, 0x0, 'client1\x00', 0xffffffff80000000, "5a84e15c9f95b15f", "112e678ba42cc6c85ee9fca2f37c1e70935e8bc5e74d5d090dc9f7d37a285992", 0x9}) keyctl$clear(0x7, r5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2133.987135][ T21] attempt to access beyond end of device [ 2134.085162][ T21] loop4: rw=1, want=36233, limit=112 [ 2134.177679][ T21] attempt to access beyond end of device [ 2134.212402][ T21] loop4: rw=1, want=38281, limit=112 [ 2134.276025][ T21] attempt to access beyond end of device [ 2134.303673][ T21] loop4: rw=1, want=40329, limit=112 22:54:15 executing program 5: 22:54:15 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000300)={'bpq0\x00', 0xfff}) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x8, 0x281, 0x1, 0x7, 0x0, 0x1000, 0x2000, 0x4, 0x0, 0x6, 0x5, 0x80, 0x3ff, 0x92d, 0xfff, 0x100, 0x7, 0x40, 0xe7e, 0xffffffffffffff26, 0x65d, 0xe38b, 0xfffffffffffffffb, 0x9, 0xffffffffffff8001, 0xe9e, 0x4, 0x20, 0x7fffffff, 0x9c, 0x6, 0x7, 0x5, 0x5, 0x4, 0xffff, 0x0, 0xeb7, 0x0, @perf_bp={&(0x7f0000000200), 0x1}, 0x14, 0x2, 0x80000001, 0x3, 0x5, 0x0, 0x4}, r3, 0x4, r2, 0x2) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0/file0\x00') 22:54:15 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:15 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x200041) r2 = geteuid() getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={r0, r2, r3}, 0xc) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x8000000000, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r4, 0x1000000000016) [ 2134.333428][ T21] attempt to access beyond end of device [ 2134.368563][ T21] loop4: rw=1, want=41681, limit=112 [ 2134.376710][ C0] net_ratelimit: 20 callbacks suppressed [ 2134.376724][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2134.388207][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2134.394027][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2134.399860][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2135.016679][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2135.022502][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:54:15 executing program 5: 22:54:16 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() r2 = syz_open_procfs(r0, &(0x7f0000000040)='sessionid\x00') ioctl$UI_DEV_DESTROY(r2, 0x5502) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) 22:54:16 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x3, 0x20000) r1 = add_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)="f473ef00ed4b86465ecd90012d6c3aed03449c832cdeda020f674a24146e00b731bb7a4baea1cf8935d5ec0d10dac591c4fe82cfc319ad52e92922e1252492538fac5093bf8c04968bccdc345f91dd5c49a0f3f2319e2f79cc1d6b4209ed91de28fdd5de9215fa2377d2", 0x6a, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r1) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000340)='./file1\x00', 0x2) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x7, 0x4) [ 2135.336685][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2135.342494][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2135.348473][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2135.354244][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:16 executing program 5: r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="39000000140081ae00d175040f62b04a2b546f2a66bf8c6e3fa1bcb3735858eba3390983b34f897506e606dbb7d553b4a40000000000000008", 0x39}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup(0xffffffffffffff9c, 0x0, 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) [ 2135.404278][ T283] attempt to access beyond end of device 22:54:16 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x1e9f, 0x20040) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000480)={0x7, 0xb85c000000000000}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file0\x00', 0x301002, 0x40) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000380)={0x7, 0x1, 0x2, 0x0, 0x6, 0x3, 0x8000, 0xffff, 0xffffffffffff8001, 0x100000000000, 0x10001, 0x1, 0x0, 0x100, 0x101, 0x3ff, 0x2, 0x7, 0x4}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) r2 = getuid() mount$9p_xen(&(0x7f0000000140)='cgroup&\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000, &(0x7f0000000280)={'trans=xen,', {[{@cache_loose='cache=loose'}, {@afid={'afid', 0x3d, 0x3}}, {@afid={'afid', 0x3d, 0x1}}, {@access_any='access=any'}, {@access_user='access=user'}, {@access_any='access=any'}, {@cache_fscache='cache=fscache'}], [{@func={'func', 0x3d, 'FILE_MMAP'}}, {@fsname={'fsname', 0x3d, '+'}}, {@permit_directio='permit_directio'}, {@fowner_lt={'fowner<', r2}}, {@appraise_type='appraise_type=imasig'}, {@subj_role={'subj_role', 0x3d, 'nodev'}}]}}) [ 2135.458458][ T283] loop0: rw=1, want=37889, limit=112 [ 2135.474806][ T21] attempt to access beyond end of device [ 2135.483959][ T21] loop2: rw=1, want=130, limit=112 [ 2135.491271][ T21] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2135.509205][ T21] attempt to access beyond end of device [ 2135.515017][ T21] loop2: rw=1, want=131, limit=112 [ 2135.526156][ T21] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2135.547480][ T283] attempt to access beyond end of device [ 2135.552421][ T21] attempt to access beyond end of device [ 2135.567645][ T283] loop0: rw=1, want=42329, limit=112 [ 2135.572395][ T21] loop2: rw=1, want=132, limit=112 [ 2135.592060][ T21] Buffer I/O error on dev loop2, logical block 131, lost async page write [ 2135.612257][ T21] attempt to access beyond end of device [ 2135.660694][ T21] loop2: rw=1, want=133, limit=112 [ 2135.668095][ T283] attempt to access beyond end of device [ 2135.685229][ T21] Buffer I/O error on dev loop2, logical block 132, lost async page write [ 2135.697064][ T283] loop0: rw=1, want=51697, limit=112 [ 2135.718409][ T21] attempt to access beyond end of device [ 2135.757012][ T21] loop2: rw=1, want=142, limit=112 [ 2135.777961][ T21] Buffer I/O error on dev loop2, logical block 141, lost async page write [ 2135.824866][ T21] attempt to access beyond end of device [ 2135.851271][ T21] loop2: rw=1, want=143, limit=112 [ 2135.910210][ T21] Buffer I/O error on dev loop2, logical block 142, lost async page write [ 2135.968156][ T21] attempt to access beyond end of device [ 2135.998382][ T21] loop2: rw=1, want=144, limit=112 [ 2136.031249][ T21] Buffer I/O error on dev loop2, logical block 143, lost async page write [ 2136.078199][ T21] attempt to access beyond end of device [ 2136.106133][ T21] loop2: rw=1, want=145, limit=112 [ 2136.130709][ T21] Buffer I/O error on dev loop2, logical block 144, lost async page write 22:54:16 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="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"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cachefiles\x00', 0x8000, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000500)=0xfffffffffffffebe) getpgid(r3) ioctl$EVIOCSABS3F(r2, 0x401845ff, &(0x7f0000000240)={0x0, 0xfb9, 0x40, 0x7, 0xc4, 0x2}) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0xfffffffffffffffe) 22:54:16 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) close(r0) [ 2136.214312][ T21] attempt to access beyond end of device [ 2136.269242][ T21] loop2: rw=1, want=5377, limit=112 22:54:17 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x20000001, 0x800000000006, 0x2, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x20000000, &(0x7f0000000040)) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r1, 0x1000000000016) [ 2136.373615][ T21] attempt to access beyond end of device [ 2136.430019][ T21] loop2: rw=1, want=8873, limit=112 [ 2136.466699][ T21] attempt to access beyond end of device [ 2136.472376][ T21] loop2: rw=1, want=10921, limit=112 [ 2136.481700][ T21] attempt to access beyond end of device [ 2136.487385][ T21] loop2: rw=1, want=12969, limit=112 [ 2136.491182][ T21] attempt to access beyond end of device [ 2136.499035][ T21] loop2: rw=1, want=15017, limit=112 [ 2136.508628][ T21] attempt to access beyond end of device 22:54:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x6, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x79, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) [ 2136.524902][ T21] loop2: rw=1, want=17065, limit=112 [ 2136.534247][ T21] attempt to access beyond end of device [ 2136.550265][ T21] loop2: rw=1, want=19113, limit=112 [ 2136.560112][ T21] attempt to access beyond end of device [ 2136.565817][ T21] loop2: rw=1, want=21289, limit=112 22:54:17 executing program 3: mkdir(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000026bd7000000000000200000814000100fe80000000000000000000000000000a080002000000000008000600030000000800050000000000080003000100010014000100fe8000000000000000000000000000aa0800050002000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x1, @rand_addr="1e212eeb354f2106157364d6c8380d8c", 0x1}, @in6={0xa, 0x4e20, 0x4, @loopback, 0x1}, @in6={0xa, 0x4e22, 0x3, @local, 0x1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @broadcast}], 0x74) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f00000001c0)=0xe8) sendto(r1, &(0x7f0000000340)="4bcba3fd42adbf79eaf3887dab85a9515a85eb9dc7edd2da06d72a2b5e91cc52c14402f755e5d0b7f81084972339616103672172aaf7db5bb573383f2c2f26302d07e94ef964901399c7cecef22ed227abbda0574e0615c2d7137ad8d49dd2f93448f475e569e37e7fead4d61cfa27c920cbfbb8afd24c694dacfd048054b6b6d4350f6eb377237be15a6e5dbad3aee46bcc961e1660518c", 0x98, 0x800, &(0x7f00000007c0)=@xdp={0x2c, 0x1, r2, 0x1e}, 0x80) [ 2136.590127][ T21] attempt to access beyond end of device [ 2136.608608][ T21] loop2: rw=1, want=25313, limit=112 [ 2136.633634][ T21] attempt to access beyond end of device [ 2136.655872][ T21] loop2: rw=1, want=30289, limit=112 [ 2136.720117][ T21] attempt to access beyond end of device [ 2136.729576][ T21] loop2: rw=1, want=32889, limit=112 22:54:18 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x6, 0x0) close(r0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x79, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 22:54:18 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 22:54:18 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="580000001400192344834b80043f679a10ffff7f0477d69be134859d79b6272df6154e32f61b26a054e8b0f23d12cdf1e4220000000001008048bb069bcd64009400050028925a3d000000000000008400f0fffeff2c707f", 0x58}], 0x1) 22:54:18 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:18 executing program 5: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_execute_func(&(0x7f0000000140)="410f01f964ff0941c3c4e2c99758423e46d8731266420fe2e3c402159ae70f2b36c442019dcc6f") rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x8) sync() [ 2138.052588][ T21] attempt to access beyond end of device [ 2138.111254][ T21] loop2: rw=2049, want=130, limit=112 [ 2138.163195][ T21] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 2138.216072][ T21] attempt to access beyond end of device [ 2138.253102][ T21] loop2: rw=2049, want=131, limit=112 [ 2138.277931][ T21] Buffer I/O error on dev loop2, logical block 130, lost async page write [ 2138.315935][ T21] attempt to access beyond end of device [ 2138.341715][ T21] loop2: rw=2049, want=132, limit=112 [ 2138.366000][ T21] attempt to access beyond end of device [ 2138.390672][ T21] loop2: rw=2049, want=133, limit=112 [ 2138.415906][ T21] attempt to access beyond end of device [ 2138.878632][ T21] loop2: rw=2049, want=142, limit=112 [ 2138.911721][ T21] attempt to access beyond end of device [ 2138.958276][ T21] loop2: rw=2049, want=143, limit=112 [ 2138.964365][ T21] attempt to access beyond end of device [ 2138.965421][ T8167] attempt to access beyond end of device [ 2138.971111][ T21] loop2: rw=2049, want=144, limit=112 [ 2138.982269][ T21] attempt to access beyond end of device [ 2138.984305][ T8167] loop0: rw=1, want=130, limit=112 [ 2138.988489][ T21] loop2: rw=2049, want=145, limit=112 22:54:19 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r1, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x814) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:19 executing program 3: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x9}) semop(0x0, 0x0, 0x6b) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 22:54:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") clone(0x2102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000100), 0x0, 0x0, 0x8) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x4000400000000016, &(0x7f0000000380)) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r2, 0x1000000000016) 22:54:19 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000026000500d25a80648c63940d0f00fc000400024002000000053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0) 22:54:19 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = socket$nl_crypto(0x10, 0x3, 0x15) signalfd4(r0, &(0x7f0000000140)={0x9}, 0x8, 0x80800) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2139.001019][T12913] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 2139.001092][ T8167] attempt to access beyond end of device [ 2139.009667][T12913] FAT-fs (loop2): Filesystem has been set read-only [ 2139.022710][ T8167] loop0: rw=1, want=131, limit=112 [ 2139.051327][ T8167] attempt to access beyond end of device [ 2139.063356][ T8167] loop0: rw=1, want=132, limit=112 [ 2139.075021][T12936] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2139.089337][ T8167] attempt to access beyond end of device 22:54:19 executing program 1: r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f0000e6d000)=""/384, 0x20e6d180) signalfd(r0, &(0x7f0000f2dff8), 0x8) [ 2139.103226][ T8167] loop0: rw=1, want=133, limit=112 [ 2139.119337][ T8167] attempt to access beyond end of device [ 2139.125002][T12942] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2139.143843][ T8167] loop0: rw=1, want=142, limit=112 [ 2139.196455][ T8167] attempt to access beyond end of device [ 2139.237049][ T8167] loop0: rw=1, want=143, limit=112 [ 2139.290224][ T8167] attempt to access beyond end of device [ 2139.296084][ T8167] loop0: rw=1, want=144, limit=112 [ 2139.303669][ T8167] attempt to access beyond end of device [ 2139.313544][ T8167] loop0: rw=1, want=145, limit=112 [ 2139.321103][ T8167] attempt to access beyond end of device [ 2139.364229][ T8167] loop0: rw=1, want=153, limit=112 [ 2139.405628][ T8167] attempt to access beyond end of device [ 2139.445245][ T8167] loop0: rw=1, want=182, limit=112 22:54:20 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000004c0)={0x18, 0x0, {0x2, @link_local, 'ip6gre0\x00'}}, 0x1e) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x4) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2139.496679][ C0] net_ratelimit: 20 callbacks suppressed [ 2139.496689][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2139.508188][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2139.514016][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2139.519834][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2139.525658][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2139.531544][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2139.611653][ T8167] attempt to access beyond end of device 22:54:20 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2139.686310][ T8167] loop0: rw=1, want=183, limit=112 [ 2139.748125][ T8167] attempt to access beyond end of device [ 2139.796361][ T8167] loop0: rw=1, want=184, limit=112 [ 2139.868474][ T8167] attempt to access beyond end of device [ 2139.922190][ T8167] loop0: rw=1, want=185, limit=112 [ 2140.431177][ T8167] attempt to access beyond end of device [ 2140.449493][ T8167] loop0: rw=1, want=206, limit=112 [ 2140.469677][ T8167] attempt to access beyond end of device [ 2140.480401][ T8167] loop0: rw=1, want=207, limit=112 [ 2140.485649][ T8167] attempt to access beyond end of device [ 2140.493332][ T8167] loop0: rw=1, want=208, limit=112 [ 2140.502321][ T8167] buffer_io_error: 20 callbacks suppressed [ 2140.502333][ T8167] Buffer I/O error on dev loop0, logical block 207, lost async page write [ 2140.522511][ T8167] attempt to access beyond end of device [ 2140.528283][ T8167] loop0: rw=1, want=209, limit=112 [ 2140.533499][ T8167] Buffer I/O error on dev loop0, logical block 208, lost async page write [ 2140.616712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2140.622531][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2140.628411][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2140.634184][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:21 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080), 0x0) 22:54:21 executing program 2: mkdir(0x0, 0x1ffffffe) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$KVM_NMI(r0, 0xae9a) recvfrom$rose(r0, &(0x7f0000000140)=""/38, 0x26, 0x2020, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2140.680877][ T8167] attempt to access beyond end of device [ 2140.712799][ T8167] loop0: rw=1, want=258, limit=112 [ 2140.721845][ T8167] Buffer I/O error on dev loop0, logical block 257, lost async page write [ 2140.735319][ T8167] attempt to access beyond end of device [ 2140.737648][ T283] attempt to access beyond end of device [ 2140.741116][ T8167] loop0: rw=1, want=259, limit=112 [ 2140.766677][ T8167] Buffer I/O error on dev loop0, logical block 258, lost async page write [ 2140.776699][ T8167] attempt to access beyond end of device 22:54:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[@ANYPTR64], 0x8) recvmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) [ 2140.782783][ T8167] loop0: rw=1, want=260, limit=112 [ 2140.806677][ T8167] Buffer I/O error on dev loop0, logical block 259, lost async page write [ 2140.815402][ T8167] attempt to access beyond end of device [ 2140.825893][ T283] loop2: rw=1, want=37085, limit=112 [ 2140.845733][ T283] attempt to access beyond end of device 22:54:21 executing program 5: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x9}) semop(0x0, 0x0, 0x6b) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 22:54:21 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000740)='bcsf0\x00') setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000240)=0x3e73, 0x4) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000b00)='bcsf0\x00\x00\x00\x00\x00\x00h\x11\x00') r2 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000100)={0x3, {{0x2, 0x4e24, @empty}}}, 0x88) socket(0x848000000015, 0x805, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000540)={'hwsi\x00\xcc\xac\x92\xe2\"9\xd2Q\xb9\xacF', 0x20}) write$binfmt_script(r0, 0x0, 0x0) [ 2140.876696][ T8167] loop0: rw=1, want=261, limit=112 [ 2140.881853][ T8167] Buffer I/O error on dev loop0, logical block 260, lost async page write [ 2140.902556][ T8167] attempt to access beyond end of device [ 2140.908331][ T8167] loop0: rw=1, want=270, limit=112 [ 2140.913452][ T8167] Buffer I/O error on dev loop0, logical block 269, lost async page write [ 2140.946669][ T283] loop2: rw=1, want=40949, limit=112 [ 2140.955830][ T283] attempt to access beyond end of device 22:54:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, 0x3e, 0x105, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) [ 2140.991371][ T8167] attempt to access beyond end of device [ 2140.995883][ T283] loop2: rw=1, want=42013, limit=112 [ 2141.044011][ T8167] loop0: rw=1, want=271, limit=112 [ 2141.063535][ T8167] Buffer I/O error on dev loop0, logical block 270, lost async page write 22:54:21 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) accept(r0, 0x0, 0x0) [ 2141.099152][ T8167] attempt to access beyond end of device [ 2141.142464][ T8167] loop0: rw=1, want=272, limit=112 [ 2141.165916][ T8167] Buffer I/O error on dev loop0, logical block 271, lost async page write [ 2141.200365][ T8167] attempt to access beyond end of device 22:54:21 executing program 5: socket$packet(0x11, 0x2000000000002, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2000000002}, 0x3d) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000013c0)={{{@in, @in6=@ipv4}}, {{@in=@multicast1}, 0x0, @in6}}, 0xe8) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffff7fffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) [ 2141.229535][ T8167] loop0: rw=1, want=273, limit=112 [ 2141.256502][ T8167] Buffer I/O error on dev loop0, logical block 272, lost async page write [ 2141.328448][ T8167] attempt to access beyond end of device [ 2141.352523][ T8167] loop0: rw=1, want=5729, limit=112 [ 2141.416407][ T8167] attempt to access beyond end of device [ 2141.456205][ T8167] loop0: rw=1, want=9641, limit=112 [ 2141.519622][ T8167] attempt to access beyond end of device [ 2141.631433][ T8167] loop0: rw=1, want=11689, limit=112 [ 2141.724439][ T8167] attempt to access beyond end of device [ 2141.832104][ T8167] loop0: rw=1, want=13737, limit=112 [ 2141.841564][ T8167] attempt to access beyond end of device [ 2141.847379][ T8167] loop0: rw=1, want=15785, limit=112 [ 2141.856686][ T8167] attempt to access beyond end of device [ 2141.862338][ T8167] loop0: rw=1, want=17833, limit=112 [ 2141.871639][ T8167] attempt to access beyond end of device [ 2141.877327][ T8167] loop0: rw=1, want=19881, limit=112 [ 2141.886520][ T8167] attempt to access beyond end of device [ 2141.910450][ T8167] loop0: rw=1, want=21929, limit=112 [ 2142.105670][ T8167] attempt to access beyond end of device [ 2142.135482][ T8167] loop0: rw=1, want=22057, limit=112 [ 2142.252087][ T283] attempt to access beyond end of device [ 2142.279145][ T283] loop2: rw=1, want=130, limit=112 [ 2142.339758][ T283] attempt to access beyond end of device [ 2142.345448][ T283] loop2: rw=1, want=131, limit=112 [ 2142.409439][ T283] attempt to access beyond end of device [ 2142.415144][ T283] loop2: rw=1, want=132, limit=112 [ 2142.462286][ T283] attempt to access beyond end of device [ 2142.475235][ T283] loop2: rw=1, want=133, limit=112 [ 2142.517986][ T283] attempt to access beyond end of device [ 2142.523668][ T283] loop2: rw=1, want=142, limit=112 [ 2142.566799][ T283] attempt to access beyond end of device [ 2142.572472][ T283] loop2: rw=1, want=143, limit=112 [ 2142.616980][ T283] attempt to access beyond end of device [ 2142.622647][ T283] loop2: rw=1, want=144, limit=112 [ 2142.656660][ T283] attempt to access beyond end of device [ 2142.662384][ T283] loop2: rw=1, want=145, limit=112 [ 2142.676686][ T283] attempt to access beyond end of device [ 2142.682333][ T283] loop2: rw=1, want=153, limit=112 [ 2142.723354][ T283] attempt to access beyond end of device [ 2142.752261][ T283] loop2: rw=1, want=182, limit=112 [ 2142.761224][ T283] attempt to access beyond end of device [ 2142.779357][ T283] loop2: rw=1, want=183, limit=112 [ 2142.803392][ T283] attempt to access beyond end of device [ 2142.812607][ T283] loop2: rw=1, want=184, limit=112 [ 2142.824335][ T283] attempt to access beyond end of device [ 2142.837295][ T283] loop2: rw=1, want=185, limit=112 [ 2142.860866][ T283] attempt to access beyond end of device [ 2142.866684][ T283] loop2: rw=1, want=206, limit=112 [ 2142.871898][ T283] attempt to access beyond end of device [ 2142.878375][ T283] loop2: rw=1, want=207, limit=112 [ 2142.883541][ T283] attempt to access beyond end of device [ 2142.889312][ T283] loop2: rw=1, want=208, limit=112 [ 2142.894462][ T283] attempt to access beyond end of device [ 2142.900839][ T283] loop2: rw=1, want=209, limit=112 [ 2142.906025][ T283] attempt to access beyond end of device [ 2142.911805][ T283] loop2: rw=1, want=258, limit=112 [ 2142.917186][ T283] attempt to access beyond end of device [ 2142.922834][ T283] loop2: rw=1, want=259, limit=112 [ 2142.928915][ T283] attempt to access beyond end of device [ 2142.934564][ T283] loop2: rw=1, want=260, limit=112 [ 2142.939876][ T283] attempt to access beyond end of device [ 2142.945518][ T283] loop2: rw=1, want=261, limit=112 [ 2142.960739][ T283] attempt to access beyond end of device [ 2142.967042][ T283] loop2: rw=1, want=270, limit=112 [ 2142.972205][ T283] attempt to access beyond end of device [ 2142.978415][ T283] loop2: rw=1, want=271, limit=112 [ 2142.992728][ T283] attempt to access beyond end of device [ 2142.992750][ T283] loop2: rw=1, want=272, limit=112 [ 2143.003682][ T283] attempt to access beyond end of device [ 2143.009447][ T283] loop2: rw=1, want=273, limit=112 [ 2143.053620][ T283] attempt to access beyond end of device [ 2143.065083][ T283] loop2: rw=1, want=6441, limit=112 [ 2143.122894][ T283] attempt to access beyond end of device [ 2143.131681][ T283] loop2: rw=1, want=9041, limit=112 22:54:24 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, 0x0) 22:54:24 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:24 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x4020000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x2f, &(0x7f0000000200)=""/219, &(0x7f0000000140)=0xdb) 22:54:24 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) read$rfkill(r0, 0x0, 0x0) 22:54:24 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:24 executing program 5: ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x9}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 22:54:24 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000009c0)={0x5, 0x70, 0x0, 0x0, 0x40, 0xfff, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x8000, 0xf5, 0x0, 0x4, 0x4c8, 0xfffffffffffff801, 0x0, 0xc2, 0x5, 0x0, 0x0, 0x3bb, 0x2, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffba2d, 0x4, 0x0, 0x10000, 0x2c, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x200, 0x9, 0x7, 0x0, 0x1, 0x3, 0x5}, 0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x1) pipe2$9p(0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x3, 0x182) r2 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, &(0x7f0000000000), 0x2000005) 22:54:24 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x1}, 0x3c) 22:54:24 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x801}) write$cgroup_type(r0, &(0x7f0000001900)='th\x88daded\x00', 0xfdef) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 22:54:25 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000380)=0x1, 0x4, 0x0, 0x0, &(0x7f0000000400), 0x1) 22:54:25 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x5, &(0x7f0000000780)=[{&(0x7f0000000300)="818aef216b6801ff44c13900a7e03293b152672623809093a94c3847d0418a46b026453ea691930f3af6d966bea7e736e103f74bd2d0b2e05b0f6c5c864176d0733b141cf55f3c0db9e3d7afb54f7d531cc12ecdc05ecb6cee001e08f32566da859de59b4541af2b8f015f5181cef2da9af6e2627b4dbe7d73069c54328485ebed84b31c29fa497ae36cddf389e446a7b67dc4292518f628dc35476554fef018cf86b86f2f22684159e81ca700083f57dfb656b0f5140f05932ba97f593aeee17e45598cc5a2dab060109011e71720e70efd14b4db9dff765d6c4c055824c0d288fafe51158ceb86f2b3b392068d3256e6c10a7b", 0xf4, 0x6}, {&(0x7f0000000500)="9966007553af1c960589dd3b858c6dc0ae984a3d3170f1f9df5b6bfd23424da815ea15c66ff2f054dff9ba47615ad0168ba24ee90df7c19817b22383a871e7009cf50a", 0x43, 0xa03}, {&(0x7f0000000580)="753cac6e473375c126f86b65c4b8de4a15b107a7e7a6abfaf07fa1b1896839b969a5bd0f0006787bd7307a67b42741f4308e7a5d90e5bdc98a0f47c02ae53ce5f5c850d745675241be3d4040e429054e9090556cfd7f73d2f9dc29de57ab40a08aa787208adf1ee4dd65c339cc1f6a12df0319b628b86acbef1baeb3345f999e8f3922ee5fb8f52dca7ba44021a0a05ffc61a6a324fd356f47fc06ab44b617c4e95d1870034a2477adf0f24238ea9a0a430fe04a0fa42e200804b8c663ac6faa0cc9fbe9b2a3f275f45c8ebd7ebadd2cba113d4242c5a7cad27ba34dc9f312a40ca6d665cace26502fd475bd11c40bc2afe03655b6c52abf", 0xf8, 0x2}, {&(0x7f0000000680)="31a0e40bdc29d138f319026fb9c46cd52a42abb3e3e9e728f64b161ad7cdc6b7220c4fb1af871a3a5c4d57a5c4321afbe206a1ec8e508b4d28a21d6f20f948377bea09f53805781c9ecc815b1a91dcc598f56225d718bb37c57cd35a35a02137be3168400bbb", 0x66, 0xfc}, {&(0x7f0000000400)="182fa1a8af7a46f0baa481c300087b7c4bfa143e559b851a9204c1d27d2901f3dc0c", 0x22, 0xffffffffffff75ca}], 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x4, 0x240000) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000200)=0x5, 0x4) r1 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x6f, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f00000002c0)={0x5, 0x57af, 0x85, 0x101}) open_by_handle_at(r3, &(0x7f0000000100)={0x34, 0x4, "c43adff4fa30c26d6ff363f3fe65602265a12cf3f260b7e0524ffc0dd75eb4adda73b103d5b6485524a18470"}, 0x200) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2144.503884][T13113] FAT-fs (loop2): invalid media value (0xa7) [ 2144.510514][T13113] FAT-fs (loop2): Can't find a valid FAT filesystem 22:54:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local, 'bond0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000180)={0x18, 0x0, {0x6, @dev={[], 0x14}, 'dummy0\x00'}}, 0x1e) close(r1) [ 2144.776684][ C0] net_ratelimit: 20 callbacks suppressed [ 2144.776695][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2144.788203][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2144.794026][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2144.799855][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:25 executing program 0: mkdir(0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100088005000500000114000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe) nanosleep(0x0, 0x0) accept$nfc_llcp(r2, 0x0, &(0x7f00000000c0)) fcntl$getown(r0, 0x9) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:25 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000200)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x7567, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000002c0)=r2) r3 = getuid() syz_mount_image$f2fs(&(0x7f0000000300)='f2fs\x00', &(0x7f0000000340)='./file0/file1\x00', 0x6, 0x1, &(0x7f0000000400)=[{&(0x7f0000000380)="b5649cc54e8a2c4da2369f7f7a7b56b31c2d8edd3a9845e93a3421447cf1a862eaa5ea426ac2eb027eaa0c88a2d43bd5a2d16d0b8e7d5ebee8381eee7e6c4c70390f28b16775c20e35da345277dc81d45fb8af81be6c91d4fb2ab530bc707b888e9ce58142e31d130993a80e3ed9d1", 0x6f, 0x4}], 0x2000000, &(0x7f0000000500)={[{@alloc_mode_def='alloc_mode=default'}, {@noacl='noacl'}, {@user_xattr='user_xattr'}], [{@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, '\xc8\'trusted'}}, {@euid_gt={'euid>', r3}}]}) ioctl$TIOCSTI(r1, 0x5412, 0x81) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:25 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:25 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x0, 0x0) 22:54:25 executing program 3: ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000440)={0x0, 0x7ff, 0x0, 0x9}) semop(0x0, 0x0, 0x6b) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ptmx\x00', 0x8000000000006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(r0, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x17}) 22:54:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000340)) 22:54:25 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)=@random={'system.', 'usereth1GPL/-cgroup\x00'}, &(0x7f0000000500)=""/4096, 0x1000) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2145.416676][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2145.422506][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2145.736684][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2145.742527][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2145.748444][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2145.754214][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:27 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000000)='Z', 0x1}], 0x1) 22:54:27 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) fcntl$getown(r0, 0x9) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000200)={0x4}, 0x4) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f00000002c0)={r0, 0x882, 0x0, r0}) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r2, 0x0, 0x28, &(0x7f00000000c0)='wlan0bdev\\bdev/cgroup(}bdev{\\](vboxnet1\x00'}, 0x30) r4 = getpid() tgkill(r3, r4, 0x22) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)) r5 = gettid() ptrace$cont(0x18, r5, 0x17f7, 0x2) sync_file_range(r2, 0x4, 0x4, 0x2) 22:54:27 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0x1) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) 22:54:27 executing program 1: clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="054fcff8fcdf7bcfc33ea0e936f43d09333a8af236a6f1f000116d803200b90b5a205106cc1bee23070002146738dad5700000000008a2a598"], 0x39) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r0, 0x0, 0x0) 22:54:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setrlimit(0x100000000007, &(0x7f0000046ff0)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 22:54:27 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xffffff7f7ffffffe}]}) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000080)="0600d353ff070000a0b4a234709b5a65db") 22:54:27 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) 22:54:27 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:27 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101001, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@initdev}}, &(0x7f0000000a00)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000a40)={@rand_addr, 0x0}, &(0x7f0000000a80)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000bc0)={0x0, @rand_addr, @multicast1}, &(0x7f0000000c00)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000c80)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000cc0)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@dev}}, &(0x7f0000000dc0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000e00)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000f00)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000f40)={{{@in6=@remote, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000001040)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001400)={&(0x7f0000001080)={0x348, r1, 0xf00, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x18fa}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x178, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}]}}]}, 0x348}, 0x1, 0x0, 0x0, 0x10}, 0x4) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r11 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) ioctl$PPPIOCATTACH(r11, 0x4004743d, &(0x7f0000000140)=0x2) r12 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r12, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r13 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r13, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') 22:54:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000340)={0x4}) [ 2147.135290][ T9577] attempt to access beyond end of device [ 2147.144372][ T9577] loop0: rw=1, want=130, limit=112 [ 2147.228457][ T9577] buffer_io_error: 24 callbacks suppressed [ 2147.228469][ T9577] Buffer I/O error on dev loop0, logical block 129, lost async page write 22:54:28 executing program 1: 22:54:28 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2147.382417][ T9577] attempt to access beyond end of device [ 2147.438552][ T9577] loop0: rw=1, want=131, limit=112 [ 2147.485427][ T9577] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2147.590717][ T9577] attempt to access beyond end of device [ 2147.713675][ T9577] loop0: rw=1, want=132, limit=112 [ 2147.719361][ T9577] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2147.728195][ T9577] attempt to access beyond end of device [ 2147.733841][ T9577] loop0: rw=1, want=133, limit=112 [ 2147.739315][ T9577] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2147.748136][ T9577] attempt to access beyond end of device [ 2147.753814][ T9577] loop0: rw=1, want=142, limit=112 22:54:28 executing program 1: 22:54:28 executing program 3: [ 2147.792715][ T9577] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2148.470046][ T9577] attempt to access beyond end of device 22:54:29 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) r1 = getpid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, r1, 0x0, r0, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:29 executing program 1: 22:54:29 executing program 5: 22:54:29 executing program 3: [ 2148.536011][ T8167] attempt to access beyond end of device [ 2148.541919][ T9577] loop0: rw=1, want=143, limit=112 [ 2148.584355][ T8167] loop2: rw=1, want=36121, limit=112 [ 2148.595927][ T9577] Buffer I/O error on dev loop0, logical block 142, lost async page write 22:54:29 executing program 5: 22:54:29 executing program 1: [ 2148.669501][ T9577] attempt to access beyond end of device [ 2148.676065][ T8167] attempt to access beyond end of device [ 2148.708459][ T9577] loop0: rw=1, want=144, limit=112 [ 2148.713599][ T9577] Buffer I/O error on dev loop0, logical block 143, lost async page write [ 2148.722224][ T9577] attempt to access beyond end of device [ 2148.728078][ T8167] loop2: rw=1, want=38169, limit=112 [ 2148.736640][ T9577] loop0: rw=1, want=145, limit=112 [ 2148.741885][ T9577] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 2148.751244][ T8167] attempt to access beyond end of device [ 2148.756956][ T8167] loop2: rw=1, want=40217, limit=112 [ 2148.779671][ T9577] attempt to access beyond end of device [ 2148.785334][ T9577] loop0: rw=1, want=2193, limit=112 [ 2148.792928][ T9577] attempt to access beyond end of device [ 2148.802034][ T8167] attempt to access beyond end of device [ 2148.807008][ T9577] loop0: rw=1, want=2969, limit=112 [ 2148.815641][ T8167] loop2: rw=1, want=43705, limit=112 [ 2148.832194][ T9577] attempt to access beyond end of device [ 2148.835752][ T8167] attempt to access beyond end of device [ 2148.840479][ T9577] loop0: rw=1, want=2998, limit=112 [ 2148.856328][ T8167] loop2: rw=1, want=43977, limit=112 [ 2148.868019][ T9577] Buffer I/O error on dev loop0, logical block 2997, lost async page write [ 2148.912644][ T9577] attempt to access beyond end of device [ 2148.919255][ T9577] loop0: rw=1, want=2999, limit=112 [ 2148.924474][ T9577] Buffer I/O error on dev loop0, logical block 2998, lost async page write [ 2148.939464][ T9577] attempt to access beyond end of device [ 2148.945115][ T9577] loop0: rw=1, want=3000, limit=112 [ 2148.951168][ T9577] attempt to access beyond end of device [ 2148.957936][ T9577] loop0: rw=1, want=3001, limit=112 [ 2148.963180][ T9577] attempt to access beyond end of device [ 2148.970440][ T9577] loop0: rw=1, want=3022, limit=112 [ 2148.975830][ T9577] attempt to access beyond end of device [ 2148.983758][ T9577] loop0: rw=1, want=3023, limit=112 [ 2148.989386][ T9577] attempt to access beyond end of device [ 2148.995033][ T9577] loop0: rw=1, want=3024, limit=112 [ 2149.000668][ T9577] attempt to access beyond end of device [ 2149.006308][ T9577] loop0: rw=1, want=3025, limit=112 [ 2149.016485][ T9577] attempt to access beyond end of device [ 2149.022510][ T9577] loop0: rw=1, want=3074, limit=112 [ 2149.028065][ T9577] attempt to access beyond end of device [ 2149.033712][ T9577] loop0: rw=1, want=3075, limit=112 [ 2149.039477][ T9577] attempt to access beyond end of device [ 2149.045117][ T9577] loop0: rw=1, want=3076, limit=112 [ 2149.050405][ T9577] attempt to access beyond end of device [ 2149.056042][ T9577] loop0: rw=1, want=3077, limit=112 [ 2149.061432][ T9577] attempt to access beyond end of device [ 2149.067150][ T9577] loop0: rw=1, want=3086, limit=112 [ 2149.072538][ T9577] attempt to access beyond end of device [ 2149.078233][ T9577] loop0: rw=1, want=3087, limit=112 [ 2149.091872][ T9577] attempt to access beyond end of device [ 2149.100137][ T9577] loop0: rw=1, want=3088, limit=112 [ 2149.110190][ T9577] attempt to access beyond end of device [ 2149.118318][ T9577] loop0: rw=1, want=3089, limit=112 [ 2149.130880][ T9577] attempt to access beyond end of device [ 2149.136531][ T9577] loop0: rw=1, want=5137, limit=112 [ 2149.175287][ T9577] attempt to access beyond end of device [ 2149.186625][ T9577] loop0: rw=1, want=6833, limit=112 22:54:30 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000030}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x50, r2, 0x314, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x20040011) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:30 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:30 executing program 5: 22:54:30 executing program 1: 22:54:30 executing program 3: 22:54:30 executing program 5: [ 2149.896667][ C0] net_ratelimit: 20 callbacks suppressed [ 2149.896677][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2149.908192][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2149.914079][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2149.919921][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2149.925753][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2149.931578][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:30 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x3, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$rxrpc(r1, &(0x7f0000000200)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @remote, 0x6}}, 0x24) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:30 executing program 3: 22:54:30 executing program 1: 22:54:31 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:31 executing program 5: 22:54:31 executing program 3: [ 2151.016704][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2151.022573][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2151.028457][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2151.034230][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:32 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x100000000008005, 0x200000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0xf, {0x1, 0x1000, 0x81, 0x100000001}}) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:32 executing program 2: mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:32 executing program 1: 22:54:32 executing program 5: 22:54:32 executing program 3: 22:54:32 executing program 3: 22:54:32 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:32 executing program 1: 22:54:32 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0xfffff000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:32 executing program 5: 22:54:32 executing program 3: 22:54:32 executing program 1: 22:54:33 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:33 executing program 5: 22:54:33 executing program 3: 22:54:33 executing program 1: 22:54:33 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xbc, r2, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe5a}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x88}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xb23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffffffffffffff7f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x1a}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xe8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc000000000000000}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:33 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) faccessat(r0, &(0x7f0000000140)='./file0\x00', 0x100, 0xb00) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:33 executing program 1: 22:54:33 executing program 5: 22:54:33 executing program 3: 22:54:33 executing program 1: 22:54:33 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:33 executing program 5: [ 2153.190956][ T8167] attempt to access beyond end of device [ 2153.209377][ T8167] loop4: rw=1, want=130, limit=112 [ 2153.218283][ T8167] buffer_io_error: 14 callbacks suppressed [ 2153.218293][ T8167] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2153.255766][ T8167] attempt to access beyond end of device [ 2153.266488][ T8167] loop4: rw=1, want=131, limit=112 [ 2153.290424][ T8167] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 2153.305186][ T8167] attempt to access beyond end of device [ 2153.327620][ T8167] loop4: rw=1, want=132, limit=112 [ 2153.354482][ T8167] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 2153.421143][ T8167] attempt to access beyond end of device [ 2153.468165][ T8167] loop4: rw=1, want=133, limit=112 [ 2153.499598][ T8167] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 2153.555145][ T8167] attempt to access beyond end of device [ 2153.590381][ T8167] loop4: rw=1, want=142, limit=112 [ 2153.610706][ T8167] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 2153.999356][ T8167] attempt to access beyond end of device [ 2154.005035][ T8167] loop4: rw=1, want=143, limit=112 [ 2154.014620][ T8167] Buffer I/O error on dev loop4, logical block 142, lost async page write 22:54:35 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={r3}, &(0x7f0000000240)=0x8) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:35 executing program 5: 22:54:35 executing program 3: 22:54:35 executing program 4: mkdir(0x0, 0x0) open(&(0x7f0000000380)='./file0/file1\x00', 0x101040, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000002c0)=0xc) mount$9p_virtio(&(0x7f00000000c0)='ppp1selinux\x00', &(0x7f0000000140)='./file0/file2\x00', &(0x7f0000000200)='9p\x00', 0x400, &(0x7f0000000300)={'trans=virtio,', {[{@noextend='noextend'}], [{@appraise_type='appraise_type=imasig'}, {@euid_eq={'euid', 0x3d, r0}}, {@measure='measure'}, {@appraise='appraise'}]}}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigpending(&(0x7f00000003c0), 0x8) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:35 executing program 1: 22:54:35 executing program 2: mkdir(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sched_setscheduler(r0, 0x4002, &(0x7f00000001c0)=0x5) r1 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x8001, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x8000) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2154.435648][ T8167] attempt to access beyond end of device [ 2154.442872][ T8167] loop4: rw=1, want=144, limit=112 [ 2154.448422][ T8167] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 2154.457490][ T8167] attempt to access beyond end of device [ 2154.463228][ T8167] loop4: rw=1, want=145, limit=112 [ 2154.471293][ T8167] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 2154.488643][ T7] attempt to access beyond end of device [ 2154.510695][ T9577] attempt to access beyond end of device [ 2154.516364][ T9577] loop2: rw=1, want=38361, limit=112 [ 2154.526765][ T8167] attempt to access beyond end of device [ 2154.531725][ T7] loop0: rw=1, want=130, limit=112 22:54:35 executing program 5: 22:54:35 executing program 3: 22:54:35 executing program 1: [ 2154.532417][ T8167] loop4: rw=1, want=153, limit=112 [ 2154.532481][ T8167] attempt to access beyond end of device [ 2154.589848][ T9577] attempt to access beyond end of device [ 2154.597156][ T7] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2154.605707][ T7] attempt to access beyond end of device [ 2154.617811][ T8167] loop4: rw=1, want=182, limit=112 22:54:35 executing program 3: 22:54:35 executing program 5: [ 2154.638123][ T9577] loop2: rw=1, want=39729, limit=112 [ 2154.647759][ T7] loop0: rw=1, want=131, limit=112 [ 2154.653090][ T7] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2154.657178][ T8167] attempt to access beyond end of device [ 2154.673675][ T7] attempt to access beyond end of device [ 2154.683523][ T8167] loop4: rw=1, want=183, limit=112 22:54:35 executing program 1: [ 2154.715720][ T8167] attempt to access beyond end of device [ 2154.724111][ T7] loop0: rw=1, want=132, limit=112 [ 2154.730268][ T8167] loop4: rw=1, want=184, limit=112 [ 2154.735431][ T8167] attempt to access beyond end of device [ 2154.761415][ T8167] loop4: rw=1, want=185, limit=112 [ 2154.767386][ T7] attempt to access beyond end of device [ 2154.773044][ T7] loop0: rw=1, want=133, limit=112 [ 2154.792428][ T7] attempt to access beyond end of device [ 2154.796671][ T8167] attempt to access beyond end of device [ 2154.803726][ T8167] loop4: rw=1, want=206, limit=112 [ 2154.805059][ T7] loop0: rw=1, want=142, limit=112 [ 2154.826959][ T7] attempt to access beyond end of device [ 2154.847575][ T8167] attempt to access beyond end of device [ 2154.850549][ T7] loop0: rw=1, want=143, limit=112 [ 2154.855607][ T8167] loop4: rw=1, want=207, limit=112 [ 2154.855655][ T8167] attempt to access beyond end of device [ 2154.863406][ T7] attempt to access beyond end of device [ 2154.895343][ T8167] loop4: rw=1, want=208, limit=112 [ 2154.900936][ T8167] attempt to access beyond end of device [ 2154.909536][ T7] loop0: rw=1, want=144, limit=112 [ 2154.916347][ T8167] loop4: rw=1, want=209, limit=112 [ 2154.921646][ T8167] attempt to access beyond end of device [ 2154.933920][ T7] attempt to access beyond end of device [ 2154.940498][ T8167] loop4: rw=1, want=258, limit=112 [ 2154.948206][ T7] loop0: rw=1, want=145, limit=112 [ 2154.950564][ T8167] attempt to access beyond end of device [ 2154.959456][ T7] attempt to access beyond end of device [ 2154.964235][ T8167] loop4: rw=1, want=259, limit=112 [ 2154.965237][ T7] loop0: rw=1, want=153, limit=112 [ 2154.965281][ T7] attempt to access beyond end of device [ 2154.965287][ T7] loop0: rw=1, want=182, limit=112 [ 2154.965304][ T7] attempt to access beyond end of device [ 2154.965310][ T7] loop0: rw=1, want=183, limit=112 [ 2154.965326][ T7] attempt to access beyond end of device [ 2154.965331][ T7] loop0: rw=1, want=184, limit=112 [ 2154.965347][ T7] attempt to access beyond end of device [ 2154.965352][ T7] loop0: rw=1, want=185, limit=112 [ 2154.965368][ T7] attempt to access beyond end of device [ 2154.965373][ T7] loop0: rw=1, want=206, limit=112 [ 2154.965389][ T7] attempt to access beyond end of device [ 2154.965394][ T7] loop0: rw=1, want=207, limit=112 [ 2154.965410][ T7] attempt to access beyond end of device [ 2154.965415][ T7] loop0: rw=1, want=208, limit=112 [ 2154.965430][ T7] attempt to access beyond end of device [ 2154.965436][ T7] loop0: rw=1, want=209, limit=112 [ 2154.965464][ T7] attempt to access beyond end of device [ 2154.965470][ T7] loop0: rw=1, want=258, limit=112 [ 2154.965486][ T7] attempt to access beyond end of device [ 2154.965492][ T7] loop0: rw=1, want=259, limit=112 [ 2154.965507][ T7] attempt to access beyond end of device [ 2154.965512][ T7] loop0: rw=1, want=260, limit=112 [ 2154.965527][ T7] attempt to access beyond end of device [ 2154.965533][ T7] loop0: rw=1, want=261, limit=112 [ 2154.965548][ T7] attempt to access beyond end of device [ 2154.965553][ T7] loop0: rw=1, want=270, limit=112 [ 2154.965579][ T7] attempt to access beyond end of device [ 2154.965597][ T7] loop0: rw=1, want=271, limit=112 [ 2154.970941][ T8167] attempt to access beyond end of device [ 2154.977561][ T7] attempt to access beyond end of device [ 2154.987704][ T8167] loop4: rw=1, want=260, limit=112 [ 2154.992991][ T7] loop0: rw=1, want=272, limit=112 [ 2155.002816][ T8167] attempt to access beyond end of device [ 2155.019528][ T7] attempt to access beyond end of device [ 2155.030218][ T8167] loop4: rw=1, want=261, limit=112 [ 2155.030270][ T8167] attempt to access beyond end of device [ 2155.037134][ T7] loop0: rw=1, want=273, limit=112 [ 2155.046511][ T8167] loop4: rw=1, want=270, limit=112 [ 2155.061159][ T7] attempt to access beyond end of device [ 2155.068409][ T7] loop0: rw=1, want=4305, limit=112 [ 2155.078732][ T8167] attempt to access beyond end of device [ 2155.088453][ T7] attempt to access beyond end of device [ 2155.101146][ T7] loop0: rw=1, want=8985, limit=112 [ 2155.110733][ T8167] loop4: rw=1, want=271, limit=112 [ 2155.139481][ T7] attempt to access beyond end of device [ 2155.145646][ T8167] attempt to access beyond end of device [ 2155.150344][ T7] loop0: rw=1, want=17937, limit=112 [ 2155.155539][ T8167] loop4: rw=1, want=272, limit=112 [ 2155.172675][ T7] attempt to access beyond end of device [ 2155.177365][ C0] net_ratelimit: 20 callbacks suppressed [ 2155.177373][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2155.177427][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2155.177515][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2155.177557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2155.183926][ T8167] attempt to access beyond end of device [ 2155.188978][ T7] loop0: rw=1, want=22129, limit=112 [ 2155.193684][ T8167] loop4: rw=1, want=273, limit=112 [ 2155.204969][ T7] attempt to access beyond end of device [ 2155.209358][ T8167] attempt to access beyond end of device [ 2155.214245][ T7] loop0: rw=1, want=24177, limit=112 [ 2155.215378][ T8167] loop4: rw=1, want=2321, limit=112 [ 2155.225243][ T7] attempt to access beyond end of device [ 2155.235827][ T8167] attempt to access beyond end of device [ 2155.237730][ T7] loop0: rw=1, want=26225, limit=112 [ 2155.243014][ T8167] loop4: rw=1, want=4369, limit=112 [ 2155.259223][ T7] attempt to access beyond end of device [ 2155.264012][ T8167] attempt to access beyond end of device [ 2155.265863][ T7] loop0: rw=1, want=28273, limit=112 [ 2155.272381][ T8167] loop4: rw=1, want=6417, limit=112 [ 2155.286699][ T7] attempt to access beyond end of device [ 2155.290161][ T8167] attempt to access beyond end of device [ 2155.293320][ T7] loop0: rw=1, want=30321, limit=112 [ 2155.298992][ T8167] loop4: rw=1, want=7321, limit=112 [ 2155.378606][ T7] attempt to access beyond end of device [ 2155.384247][ T7] loop0: rw=1, want=32993, limit=112 [ 2155.816665][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2155.822541][ C1] protocol 88fb is buggy, dev hsr_slave_1 22:54:36 executing program 5: 22:54:36 executing program 3: 22:54:36 executing program 1: 22:54:36 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') lsetxattr$security_selinux(&(0x7f0000000200)='./file0/file1\x00', &(0x7f0000000240)='security.selinux\x00', &(0x7f0000000280)='system_u:object_r:bin_t:s0\x00', 0x1b, 0x2) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000140)='./file0/file1\x00', 0x4, 0x3) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:36 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ea1aa7f8", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:36 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file1\x00', 0xb0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:36 executing program 1: [ 2156.107935][ T7] attempt to access beyond end of device [ 2156.113610][ T7] loop0: rw=1, want=130, limit=112 [ 2156.136674][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2156.142475][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2156.148358][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2156.154130][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2156.192998][ T7] attempt to access beyond end of device [ 2156.277000][ T7] loop0: rw=1, want=131, limit=112 22:54:37 executing program 5: 22:54:37 executing program 3: [ 2156.365722][ T7] attempt to access beyond end of device [ 2156.426403][ T7] loop0: rw=1, want=132, limit=112 22:54:37 executing program 1: [ 2156.479253][ T7] attempt to access beyond end of device [ 2156.545630][ T7] loop0: rw=1, want=133, limit=112 22:54:37 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) 22:54:37 executing program 3: [ 2156.589813][ T7] attempt to access beyond end of device [ 2156.664844][ T7] loop0: rw=1, want=142, limit=112 22:54:37 executing program 1: [ 2156.713070][ T7] attempt to access beyond end of device [ 2156.769898][ T7] loop0: rw=1, want=143, limit=112 [ 2156.816672][ T7] attempt to access beyond end of device [ 2156.822459][ T7] loop0: rw=1, want=144, limit=112 [ 2156.827709][ T7] attempt to access beyond end of device [ 2156.827722][ T7] loop0: rw=1, want=145, limit=112 [ 2156.831662][ T7] attempt to access beyond end of device [ 2156.839502][ T7] loop0: rw=1, want=3169, limit=112 22:54:37 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @empty, 'batadv0\x00'}}, 0x1e) 22:54:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x1}, 0x10) [ 2157.512052][ T7] attempt to access beyond end of device [ 2157.555942][ T7] loop0: rw=1, want=4817, limit=112 22:54:38 executing program 2: mkdir(0x0, 0x191) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x101002, 0x0) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2157.657096][ T9577] attempt to access beyond end of device [ 2157.662768][ T9577] loop2: rw=1, want=130, limit=112 [ 2157.670509][T30485] attempt to access beyond end of device [ 2157.676168][T30485] loop4: rw=1, want=36009, limit=112 [ 2157.680005][ T9577] attempt to access beyond end of device [ 2157.690574][ T9577] loop2: rw=1, want=131, limit=112 [ 2157.696071][ T9577] attempt to access beyond end of device [ 2157.702309][T30485] attempt to access beyond end of device [ 2157.703365][ T9577] loop2: rw=1, want=132, limit=112 [ 2157.713125][T30485] loop4: rw=1, want=38057, limit=112 [ 2157.713656][ T9577] attempt to access beyond end of device [ 2157.722627][T30485] attempt to access beyond end of device [ 2157.724873][ T9577] loop2: rw=1, want=133, limit=112 [ 2157.734961][T30485] loop4: rw=1, want=40105, limit=112 [ 2157.735158][ T9577] attempt to access beyond end of device [ 2157.744200][T30485] attempt to access beyond end of device [ 2157.747225][ T9577] loop2: rw=1, want=142, limit=112 [ 2157.761659][ T9577] attempt to access beyond end of device [ 2157.767263][T30485] loop4: rw=1, want=42153, limit=112 [ 2157.776707][ T9577] loop2: rw=1, want=143, limit=112 [ 2157.781859][ T9577] attempt to access beyond end of device [ 2157.786913][T30485] attempt to access beyond end of device [ 2157.791700][ T9577] loop2: rw=1, want=144, limit=112 [ 2157.793203][T30485] loop4: rw=1, want=44609, limit=112 [ 2157.798737][ T9577] attempt to access beyond end of device [ 2157.814344][ T9577] loop2: rw=1, want=145, limit=112 [ 2157.826714][ T9577] attempt to access beyond end of device [ 2157.832368][ T9577] loop2: rw=1, want=153, limit=112 [ 2157.840562][ T9577] attempt to access beyond end of device [ 2157.846219][ T9577] loop2: rw=1, want=182, limit=112 [ 2157.851816][ T9577] attempt to access beyond end of device [ 2157.857862][ T9577] loop2: rw=1, want=183, limit=112 [ 2157.863011][ T9577] attempt to access beyond end of device [ 2157.869144][ T9577] loop2: rw=1, want=184, limit=112 [ 2157.874293][ T9577] attempt to access beyond end of device [ 2157.880676][ T9577] loop2: rw=1, want=185, limit=112 [ 2157.893205][T30485] attempt to access beyond end of device [ 2157.901330][ T9577] attempt to access beyond end of device [ 2157.911247][T30485] loop4: rw=1, want=45273, limit=112 [ 2157.918958][ T9577] loop2: rw=1, want=206, limit=112 [ 2158.033737][ T9577] attempt to access beyond end of device [ 2158.052431][ T9577] loop2: rw=1, want=207, limit=112 [ 2158.069786][ T9577] attempt to access beyond end of device [ 2158.086035][ T9577] loop2: rw=1, want=208, limit=112 [ 2158.103973][ T9577] attempt to access beyond end of device [ 2158.122341][ T9577] loop2: rw=1, want=209, limit=112 [ 2158.139909][ T9577] attempt to access beyond end of device [ 2158.155931][ T9577] loop2: rw=1, want=258, limit=112 [ 2158.172388][ T9577] attempt to access beyond end of device [ 2158.190636][ T9577] loop2: rw=1, want=259, limit=112 [ 2158.203637][ T9577] attempt to access beyond end of device [ 2158.212629][ T9577] loop2: rw=1, want=260, limit=112 [ 2158.222083][ T9577] attempt to access beyond end of device [ 2158.231046][ T9577] loop2: rw=1, want=261, limit=112 [ 2158.236290][ T9577] buffer_io_error: 65 callbacks suppressed [ 2158.236300][ T9577] Buffer I/O error on dev loop2, logical block 260, lost async page write [ 2158.303249][ T9577] attempt to access beyond end of device [ 2158.315830][ T9577] loop2: rw=1, want=270, limit=112 [ 2158.321460][ T9577] Buffer I/O error on dev loop2, logical block 269, lost async page write [ 2158.336412][ T9577] attempt to access beyond end of device [ 2158.342550][ T9577] loop2: rw=1, want=271, limit=112 [ 2158.353841][ T9577] Buffer I/O error on dev loop2, logical block 270, lost async page write [ 2158.362931][ T9577] attempt to access beyond end of device [ 2158.374628][ T9577] loop2: rw=1, want=272, limit=112 [ 2158.380249][ T9577] Buffer I/O error on dev loop2, logical block 271, lost async page write [ 2158.395518][ T9577] attempt to access beyond end of device [ 2158.401673][ T9577] loop2: rw=1, want=273, limit=112 [ 2158.412875][ T9577] Buffer I/O error on dev loop2, logical block 272, lost async page write [ 2158.425120][ T9577] attempt to access beyond end of device [ 2158.436977][ T9577] loop2: rw=1, want=2321, limit=112 [ 2158.451986][ T9577] attempt to access beyond end of device [ 2158.459084][ T9577] loop2: rw=1, want=4369, limit=112 [ 2158.474270][ T9577] attempt to access beyond end of device [ 2158.481095][ T9577] loop2: rw=1, want=6417, limit=112 [ 2158.496180][ T9577] attempt to access beyond end of device [ 2158.502962][ T9577] loop2: rw=1, want=8465, limit=112 [ 2158.533407][ T9577] attempt to access beyond end of device [ 2158.542790][ T9577] loop2: rw=1, want=10513, limit=112 [ 2158.558357][ T9577] attempt to access beyond end of device [ 2158.564006][ T9577] loop2: rw=1, want=12561, limit=112 [ 2158.579142][ T9577] attempt to access beyond end of device [ 2158.584789][ T9577] loop2: rw=1, want=14609, limit=112 [ 2158.601288][ T9577] attempt to access beyond end of device [ 2158.611548][ T9577] loop2: rw=1, want=16553, limit=112 22:54:39 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xc50) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000400)) sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000680)=""/227) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000580)) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000340)) geteuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) fcntl$notify(r1, 0x402, 0x22) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x206, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) tkill(r4, 0x1000000000016) 22:54:39 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:54:39 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0x7fff}, 0x4) sendmsg(r2, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) tkill(r1, 0x1000000000016) 22:54:39 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="74186114a43b8e134a7f6b25000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000300)={0x7, 0x40, [0x8, 0x3, 0x400, 0x5, 0x8], 0x2}) r3 = semget$private(0x0, 0x7, 0x8) semtimedop(r3, &(0x7f00000000c0)=[{0x1, 0x7, 0x1800}, {0x3, 0x1f, 0x800}, {0x0, 0xfffffffffffff1c9, 0x1800}], 0x3, &(0x7f0000000140)) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001, 0x3], [0xc1]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:39 executing program 4: keyctl$join(0x1, &(0x7f0000000240)={'syz', 0x3}) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x109000) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000140)={0x2, 0x8}) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) connect$x25(r0, &(0x7f0000000200)={0x9, @null=' \x00'}, 0x12) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x22402) name_to_handle_at(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0), 0x1400) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2159.018205][T13484] overlayfs: filesystem on './file0' not supported [ 2159.179158][T13500] kvm [13495]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 22:54:40 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:54:40 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:54:40 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0xd00, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0x5, 0x4}, {0x9, 0xd}, {0x10, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x0, 0x100}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x92a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0, 0xed, 0xfffffffffffffffc) 22:54:40 executing program 4: mkdir(0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x1210e) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') mkdirat(r0, &(0x7f00000000c0)='./file0/file1\x00', 0xf63a0410acf8ed87) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2159.785003][T30485] attempt to access beyond end of device [ 2159.793260][T30485] loop4: rw=1, want=130, limit=112 [ 2159.821520][T30485] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 2159.845081][T30485] attempt to access beyond end of device [ 2159.851031][T30485] loop4: rw=1, want=131, limit=112 [ 2159.856157][T30485] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 2159.907484][T30485] attempt to access beyond end of device [ 2159.913194][T30485] loop4: rw=1, want=132, limit=112 [ 2159.945962][T30485] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 2159.963065][T30485] attempt to access beyond end of device [ 2159.971987][T30485] loop4: rw=1, want=133, limit=112 [ 2159.983146][T30485] Buffer I/O error on dev loop4, logical block 132, lost async page write [ 2159.992731][T30485] attempt to access beyond end of device [ 2160.001541][T30485] loop4: rw=1, want=142, limit=112 [ 2160.007252][T30485] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 2160.015877][T30485] attempt to access beyond end of device [ 2160.021637][T30485] loop4: rw=1, want=143, limit=112 [ 2160.026932][T30485] attempt to access beyond end of device [ 2160.033170][T30485] loop4: rw=1, want=144, limit=112 [ 2160.038423][T30485] attempt to access beyond end of device [ 2160.044251][T30485] loop4: rw=1, want=145, limit=112 [ 2160.296705][ C0] net_ratelimit: 20 callbacks suppressed [ 2160.296716][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.308204][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.314054][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.319879][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.325724][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2160.331524][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2160.412428][T13496] kvm [13495]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 22:54:41 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0xd00, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0x5, 0x4}, {0x9, 0xd}, {0x10, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x0, 0x100}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x92a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0, 0xed, 0xfffffffffffffffc) [ 2160.475155][T30485] attempt to access beyond end of device [ 2160.567042][T30485] loop4: rw=1, want=153, limit=112 [ 2160.572247][T30485] attempt to access beyond end of device 22:54:41 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) link(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000200)='./file0/file0\x00') syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2160.615014][T30485] loop4: rw=1, want=182, limit=112 [ 2160.622863][ T21] attempt to access beyond end of device [ 2160.641903][T30485] attempt to access beyond end of device [ 2160.652768][ T21] loop2: rw=1, want=130, limit=112 [ 2160.666652][T30485] loop4: rw=1, want=183, limit=112 [ 2160.671825][T30485] attempt to access beyond end of device [ 2160.673069][ T21] attempt to access beyond end of device [ 2160.679091][T13530] overlayfs: filesystem on './file0' not supported [ 2160.696658][T30485] loop4: rw=1, want=184, limit=112 [ 2160.701834][T30485] attempt to access beyond end of device [ 2160.703350][ T21] loop2: rw=1, want=131, limit=112 [ 2160.746676][ T21] attempt to access beyond end of device [ 2160.752342][ T21] loop2: rw=1, want=132, limit=112 [ 2160.757382][T30485] loop4: rw=1, want=185, limit=112 [ 2160.767500][ T21] attempt to access beyond end of device [ 2160.773151][ T21] loop2: rw=1, want=133, limit=112 [ 2160.786381][T30485] attempt to access beyond end of device [ 2160.815066][T30485] loop4: rw=1, want=206, limit=112 [ 2160.819390][ T21] attempt to access beyond end of device [ 2160.836083][ T21] loop2: rw=1, want=142, limit=112 [ 2160.848985][T30485] attempt to access beyond end of device 22:54:41 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) [ 2160.866658][ T21] attempt to access beyond end of device [ 2160.872318][ T21] loop2: rw=1, want=143, limit=112 [ 2160.885713][ T21] attempt to access beyond end of device [ 2160.891448][ T21] loop2: rw=1, want=144, limit=112 [ 2160.896485][T30485] loop4: rw=1, want=207, limit=112 [ 2160.896706][ T21] attempt to access beyond end of device [ 2160.896718][ T21] loop2: rw=1, want=145, limit=112 22:54:41 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="000026bd70000000000002000000140001f43437155f2cb3b6d470ea00fe80000000000000000000000200000a080002000000000008007cbaac0600030000000800050000000000080003000100010014800100fe80c68ea71d7817b682"], 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) socket(0x10, 0xa, 0x1) [ 2160.896806][ T21] attempt to access beyond end of device [ 2160.896818][ T21] loop2: rw=1, want=153, limit=112 [ 2160.896870][ T21] attempt to access beyond end of device [ 2160.903396][T30485] attempt to access beyond end of device [ 2160.907656][ T21] loop2: rw=1, want=182, limit=112 [ 2160.907701][ T21] attempt to access beyond end of device [ 2160.929095][T30485] loop4: rw=1, want=208, limit=112 [ 2160.929282][ T21] loop2: rw=1, want=183, limit=112 [ 2160.934923][T30485] attempt to access beyond end of device [ 2160.946835][ T21] attempt to access beyond end of device [ 2160.952108][T30485] loop4: rw=1, want=209, limit=112 [ 2160.975291][ T21] loop2: rw=1, want=184, limit=112 [ 2160.982707][ T21] attempt to access beyond end of device [ 2160.998846][ T21] loop2: rw=1, want=185, limit=112 [ 2161.014346][ T21] attempt to access beyond end of device [ 2161.038660][T30485] attempt to access beyond end of device [ 2161.044459][T30485] loop4: rw=1, want=258, limit=112 [ 2161.050233][T30485] attempt to access beyond end of device [ 2161.056003][T30485] loop4: rw=1, want=259, limit=112 [ 2161.061624][T30485] attempt to access beyond end of device [ 2161.067735][T30485] loop4: rw=1, want=260, limit=112 [ 2161.089095][ T21] loop2: rw=1, want=206, limit=112 [ 2161.091485][T30485] attempt to access beyond end of device [ 2161.103646][ T21] attempt to access beyond end of device [ 2161.148476][ T21] loop2: rw=1, want=207, limit=112 [ 2161.158567][T30485] loop4: rw=1, want=261, limit=112 [ 2161.207516][ T21] attempt to access beyond end of device [ 2161.222338][T30485] attempt to access beyond end of device [ 2161.242279][T13543] overlayfs: filesystem on './file0' not supported [ 2161.278544][ T21] loop2: rw=1, want=208, limit=112 [ 2161.283738][ T21] attempt to access beyond end of device [ 2161.295124][T30485] loop4: rw=1, want=270, limit=112 [ 2161.308434][T30485] attempt to access beyond end of device [ 2161.323203][ T21] loop2: rw=1, want=209, limit=112 22:54:42 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0xd00, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0x5, 0x4}, {0x9, 0xd}, {0x10, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x0, 0x100}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x92a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000480)='./file0/file0\x00', 0x0, 0x0, 0xed, 0xfffffffffffffffc) [ 2161.330767][T30485] loop4: rw=1, want=271, limit=112 [ 2161.344090][ T21] attempt to access beyond end of device [ 2161.366439][T30485] attempt to access beyond end of device [ 2161.386124][ T21] loop2: rw=1, want=258, limit=112 [ 2161.401668][T30485] loop4: rw=1, want=272, limit=112 [ 2161.416669][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2161.422542][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2161.428414][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2161.434180][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2161.508969][ T21] attempt to access beyond end of device [ 2161.514669][ T21] loop2: rw=1, want=259, limit=112 [ 2161.531841][T30485] attempt to access beyond end of device [ 2161.579642][T30485] loop4: rw=1, want=273, limit=112 22:54:42 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2161.696816][ T21] attempt to access beyond end of device [ 2161.707504][T30485] attempt to access beyond end of device [ 2161.756109][ T21] loop2: rw=1, want=260, limit=112 [ 2161.769871][T30485] loop4: rw=1, want=625, limit=112 [ 2161.791190][ T21] attempt to access beyond end of device [ 2161.854986][ T21] loop2: rw=1, want=261, limit=112 [ 2161.888868][ T21] attempt to access beyond end of device [ 2161.917541][ T21] loop2: rw=1, want=270, limit=112 [ 2161.922743][ T21] attempt to access beyond end of device [ 2161.928484][ T21] loop2: rw=1, want=271, limit=112 [ 2161.933633][ T21] attempt to access beyond end of device [ 2161.954789][ T21] loop2: rw=1, want=272, limit=112 [ 2162.015608][ T21] attempt to access beyond end of device [ 2162.020125][T13566] overlayfs: filesystem on './file0' not supported [ 2162.027215][ T21] loop2: rw=1, want=273, limit=112 [ 2162.041139][ T9577] attempt to access beyond end of device [ 2162.054010][ T9577] loop1: rw=1, want=130, limit=112 [ 2162.062707][ T9577] attempt to access beyond end of device [ 2162.094701][ T9577] loop1: rw=1, want=131, limit=112 [ 2162.119161][ T9577] attempt to access beyond end of device [ 2162.134337][ T21] attempt to access beyond end of device [ 2162.155931][ T9577] loop1: rw=1, want=132, limit=112 [ 2162.163876][ T9577] attempt to access beyond end of device [ 2162.169815][ T21] loop2: rw=1, want=11481, limit=112 22:54:42 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0xd00, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0x5, 0x4}, {0x9, 0xd}, {0x10, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x0, 0x100}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x92a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) 22:54:42 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r0, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x200000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) 22:54:42 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) 22:54:42 executing program 0: mkdir(0x0, 0x0) r0 = gettid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0xf, 0x102, 0x4, {0x3ff, 0x10000, 0x1}}) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2162.216548][ T9577] loop1: rw=1, want=133, limit=112 [ 2162.259678][ T9577] attempt to access beyond end of device [ 2162.292713][ T9577] loop1: rw=1, want=142, limit=112 [ 2162.331650][ T9577] attempt to access beyond end of device [ 2162.369530][ T9577] loop1: rw=1, want=143, limit=112 [ 2162.504155][ T9577] attempt to access beyond end of device [ 2162.554666][ T9577] loop1: rw=1, want=144, limit=112 [ 2162.635529][ T9577] attempt to access beyond end of device [ 2162.727349][ T9577] loop1: rw=1, want=145, limit=112 [ 2162.793477][ T9577] attempt to access beyond end of device [ 2162.993318][ T9577] loop1: rw=1, want=2969, limit=112 [ 2163.003199][ T9577] attempt to access beyond end of device [ 2163.459021][ T9577] loop1: rw=1, want=5017, limit=112 22:54:44 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) fsetxattr$security_capability(r0, &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000140)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x3) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x5c) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2163.578263][ T9577] attempt to access beyond end of device [ 2163.583944][ T9577] loop1: rw=1, want=7065, limit=112 [ 2163.595975][ T283] attempt to access beyond end of device [ 2163.631764][ T9577] attempt to access beyond end of device [ 2163.638189][ T9577] loop1: rw=1, want=9113, limit=112 [ 2163.652552][ T9577] attempt to access beyond end of device [ 2163.658830][ T9577] loop1: rw=1, want=11161, limit=112 22:54:44 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0xd00, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0x5, 0x4}, {0x9, 0xd}, {0x10, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x0, 0x100}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x92a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) [ 2163.727139][ T9577] attempt to access beyond end of device [ 2163.743267][ T283] loop4: rw=1, want=39969, limit=112 [ 2163.790790][ T9577] loop1: rw=1, want=13209, limit=112 22:54:44 executing program 0: mkdir(0x0, 0x800092) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xe5, 0x3, 0x6, 0xfffffffffffffff8, 0x0, 0x2d3, 0x8040, 0x1, 0x1, 0x0, 0x6, 0x2, 0x3, 0xadf, 0x401, 0x7f, 0x849b, 0x100000000, 0x2, 0x81, 0x4, 0x4, 0x8, 0x8, 0x101, 0x6, 0x1ff, 0x5, 0x0, 0x7a6, 0x1, 0x2, 0x1, 0x100, 0x1, 0x1000, 0x0, 0x1ff, 0x2, @perf_config_ext={0x95, 0x100000001}, 0x0, 0x3ff, 0x10, 0xd, 0x800, 0x7, 0x2}, r0, 0x4, r1, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a080002000000000008000600030000000800030004000000080005000000000008000014000100fe800000000000000000000000820000aa08000500020000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) write$uinput_user_dev(r1, &(0x7f00000006c0)={'syz0\x00', {0x6, 0x3, 0x7ff, 0x8}, 0x33, [0x0, 0x80000001, 0x6, 0x3, 0x8, 0x650c, 0x5, 0x7, 0x2, 0x4, 0x3, 0x5c, 0xd1, 0x3fff800000, 0x4, 0x2, 0x2f8b, 0x7, 0x7, 0x8b21, 0xf2a4, 0x1, 0x400, 0xfffffffffffffffe, 0x24, 0x9, 0x49f, 0x30, 0x2, 0x7f, 0x100000001, 0x80000000, 0x29, 0xfffffffffffffc8f, 0x7ff, 0x7f, 0x5, 0x9, 0xfff, 0x1ff, 0x8, 0x8, 0x10000, 0xfffffffffffff801, 0x4, 0x9, 0x7, 0x10001, 0x1, 0xffff, 0x140000000000000, 0x0, 0x7ff, 0x3, 0x7f, 0x3, 0x2c, 0x6, 0xffff, 0x0, 0x1, 0x4, 0x1, 0xcecb], [0x7f, 0x855, 0x1, 0x7f, 0x4999a308, 0x0, 0x4, 0x2, 0x23, 0xffffffffffff0001, 0x101, 0x1, 0x1f, 0x5, 0x401, 0x3, 0x2, 0x6, 0xffffffffffffa1f3, 0x401, 0x4, 0x1000, 0x3, 0x5, 0x7, 0x80000001, 0xb05a, 0xff8, 0x5, 0x1, 0xfffffffffffffffc, 0x95c2, 0x0, 0x3f, 0x9, 0x800, 0x4, 0x1, 0x8, 0x6, 0x0, 0x8, 0x7, 0x1f, 0xfe00000000000000, 0xe53c, 0xffffffffffffff35, 0x1, 0xfffffffffffff000, 0x0, 0x6, 0x3b3d, 0x1000, 0x8e47, 0x7f, 0x1, 0x46e, 0xfffffffffffffff8, 0x3, 0x200, 0x80000001, 0x200, 0x3f, 0x3f], [0x2, 0x7, 0x1f, 0x0, 0x7, 0xff0, 0xfffffffffffffff9, 0x0, 0x81, 0x2ae, 0xffffffffffffff80, 0x1, 0x0, 0x4d, 0x9, 0x33, 0x1, 0xef, 0x3, 0x10000, 0xb4f, 0x9, 0x4, 0x400, 0x3f, 0x1, 0x6, 0x1f, 0x8, 0x4, 0x5, 0xf6c, 0x4, 0x0, 0x5, 0x3, 0x9, 0x2, 0xe3, 0x100000001, 0x80, 0x58e, 0xf5, 0xfff, 0x9685, 0x40, 0x6, 0xffff, 0x101, 0x380000000, 0x80000000000, 0x8, 0x10001, 0x0, 0x2, 0x2, 0x9, 0xfffffffffffffeff, 0x200, 0x0, 0x81, 0x0, 0x20, 0x1ff], [0x7fffffff, 0xfffffffffffffffb, 0x9, 0x7f3, 0x0, 0x2, 0x8, 0x7, 0x841, 0x65e, 0x0, 0xffffffff7fffffff, 0x4, 0x8, 0x0, 0x7ff, 0x3ff, 0x2, 0x7fffffff, 0xd, 0x7, 0x5, 0x1, 0x20, 0x7, 0x0, 0x5, 0xd2ae606, 0xe9, 0xe807, 0x0, 0x0, 0x8, 0x29, 0x2, 0x4, 0x0, 0x3a4, 0xb2, 0xcd52, 0x5eb7, 0xf2, 0x4, 0x6, 0x7f, 0x8000, 0x4b, 0x7, 0x808, 0x80, 0x3, 0x1, 0x9, 0x1f, 0x100000001, 0x6, 0x1000, 0x100000000, 0x3ff, 0x5, 0x100, 0x8, 0x7ff, 0xfffffffffffffffb]}, 0x45c) r4 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000180)=ANY=[], 0xfffffd97) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0x1e0000000000}, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2163.889872][ T9577] attempt to access beyond end of device [ 2163.895555][ T9577] loop1: rw=1, want=15257, limit=112 [ 2163.908466][ T9577] attempt to access beyond end of device [ 2163.914286][ T9577] loop1: rw=1, want=15833, limit=112 [ 2163.925571][ T9577] attempt to access beyond end of device [ 2163.931444][ T9577] loop1: rw=1, want=15862, limit=112 [ 2163.937087][ T9577] buffer_io_error: 51 callbacks suppressed [ 2163.937098][ T9577] Buffer I/O error on dev loop1, logical block 15861, lost async page write [ 2163.951836][ T9577] attempt to access beyond end of device [ 2163.957846][ T9577] loop1: rw=1, want=15863, limit=112 [ 2163.963265][ T9577] Buffer I/O error on dev loop1, logical block 15862, lost async page write [ 2163.973453][ T9577] attempt to access beyond end of device [ 2163.979293][ T9577] loop1: rw=1, want=15864, limit=112 [ 2163.984696][ T9577] Buffer I/O error on dev loop1, logical block 15863, lost async page write [ 2163.993563][ T9577] attempt to access beyond end of device [ 2163.999382][ T9577] loop1: rw=1, want=15865, limit=112 [ 2164.004794][ T9577] Buffer I/O error on dev loop1, logical block 15864, lost async page write [ 2164.013683][ T9577] attempt to access beyond end of device [ 2164.019513][ T9577] loop1: rw=1, want=15886, limit=112 [ 2164.024918][ T9577] Buffer I/O error on dev loop1, logical block 15885, lost async page write [ 2164.033713][ T9577] attempt to access beyond end of device [ 2164.039428][ T9577] loop1: rw=1, want=15887, limit=112 [ 2164.044734][ T9577] Buffer I/O error on dev loop1, logical block 15886, lost async page write [ 2164.053531][ T9577] attempt to access beyond end of device [ 2164.085957][ T9577] loop1: rw=1, want=15888, limit=112 [ 2164.109018][ T9577] Buffer I/O error on dev loop1, logical block 15887, lost async page write [ 2164.241493][ T9577] attempt to access beyond end of device [ 2164.260813][ T9577] loop1: rw=1, want=15889, limit=112 [ 2164.280349][ T9577] Buffer I/O error on dev loop1, logical block 15888, lost async page write [ 2164.303001][ T9577] attempt to access beyond end of device [ 2164.312195][ T9577] loop1: rw=1, want=15938, limit=112 [ 2164.321019][ T9577] Buffer I/O error on dev loop1, logical block 15937, lost async page write [ 2164.333186][ T9577] attempt to access beyond end of device [ 2164.372473][ T9577] loop1: rw=1, want=15939, limit=112 [ 2164.405323][ T9577] Buffer I/O error on dev loop1, logical block 15938, lost async page write [ 2164.421356][ T9577] attempt to access beyond end of device [ 2164.464129][ T9577] loop1: rw=1, want=15940, limit=112 [ 2164.474833][ T9577] attempt to access beyond end of device [ 2164.948135][ T9577] loop1: rw=1, want=15941, limit=112 [ 2165.052839][ T7] attempt to access beyond end of device [ 2165.067849][ T9577] attempt to access beyond end of device [ 2165.081135][ T7] loop2: rw=1, want=130, limit=112 [ 2165.095485][ T9577] loop1: rw=1, want=15950, limit=112 22:54:45 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:45 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) 22:54:45 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0xd00, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0x5, 0x4}, {0x9, 0xd}, {0x10, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x0, 0x100}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x92a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) [ 2165.101048][ T7] attempt to access beyond end of device [ 2165.231372][ T9577] attempt to access beyond end of device [ 2165.237158][ T9577] loop1: rw=1, want=15951, limit=112 [ 2165.242492][ T9577] attempt to access beyond end of device [ 2165.253650][ T9577] loop1: rw=1, want=15952, limit=112 [ 2165.274594][ T9577] attempt to access beyond end of device [ 2165.293345][ T7] loop2: rw=1, want=131, limit=112 [ 2165.298969][ T9577] loop1: rw=1, want=15953, limit=112 [ 2165.304507][ T7] attempt to access beyond end of device 22:54:46 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2165.376156][ T9577] attempt to access beyond end of device [ 2165.415836][ T7] loop2: rw=1, want=132, limit=112 [ 2165.440515][ T7] attempt to access beyond end of device [ 2165.464320][ T9577] loop1: rw=1, want=23073, limit=112 [ 2165.479151][ T7] loop2: rw=1, want=133, limit=112 [ 2165.510537][ T7] attempt to access beyond end of device [ 2165.549158][ T7] loop2: rw=1, want=142, limit=112 [ 2165.576662][ C0] net_ratelimit: 20 callbacks suppressed [ 2165.576671][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2165.588187][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2165.593991][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2165.599786][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2165.614833][ T7] attempt to access beyond end of device [ 2165.634056][ T9577] attempt to access beyond end of device [ 2165.646136][ T7] loop2: rw=1, want=143, limit=112 [ 2165.666522][ T9577] loop1: rw=1, want=32993, limit=112 [ 2165.675739][ T7] attempt to access beyond end of device [ 2165.701903][ T7] loop2: rw=1, want=144, limit=112 [ 2165.733865][ T7] attempt to access beyond end of device [ 2165.752307][ T7] loop2: rw=1, want=145, limit=112 [ 2165.773283][ T7] attempt to access beyond end of device [ 2165.782449][ T7] loop2: rw=1, want=2265, limit=112 [ 2165.849525][ T7] attempt to access beyond end of device [ 2165.855190][ T7] loop2: rw=1, want=10881, limit=112 22:54:46 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) 22:54:46 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2166.131140][ T7] attempt to access beyond end of device [ 2166.165596][ T7] loop2: rw=1, want=17897, limit=112 [ 2166.209326][ T7] attempt to access beyond end of device [ 2166.215127][ T7] loop2: rw=1, want=19945, limit=112 [ 2166.226683][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.232485][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.241731][ T7] attempt to access beyond end of device [ 2166.296703][ T7] loop2: rw=1, want=20825, limit=112 [ 2166.323008][ T7] attempt to access beyond end of device [ 2166.365593][T13660] overlayfs: filesystem on './file0' not supported [ 2166.431200][ T7] loop2: rw=1, want=20854, limit=112 [ 2166.447473][ T7] attempt to access beyond end of device [ 2166.461356][ T7] loop2: rw=1, want=20855, limit=112 [ 2166.475690][ T7] attempt to access beyond end of device [ 2166.489177][ T7] loop2: rw=1, want=20856, limit=112 [ 2166.501909][ T7] attempt to access beyond end of device [ 2166.515689][ T7] loop2: rw=1, want=20857, limit=112 [ 2166.526987][ T7] attempt to access beyond end of device [ 2166.536678][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.542521][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.548405][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2166.554169][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2166.564949][ T7] loop2: rw=1, want=20878, limit=112 [ 2166.576165][ T7] attempt to access beyond end of device [ 2166.588964][ T7] loop2: rw=1, want=20879, limit=112 [ 2166.602651][ T7] attempt to access beyond end of device [ 2166.615366][ T7] loop2: rw=1, want=20880, limit=112 [ 2166.627661][ T7] attempt to access beyond end of device [ 2166.639159][ T7] loop2: rw=1, want=20881, limit=112 [ 2166.651224][ T7] attempt to access beyond end of device [ 2166.663985][ T7] loop2: rw=1, want=20930, limit=112 [ 2166.675226][ T7] attempt to access beyond end of device [ 2166.700542][ T7] loop2: rw=1, want=20931, limit=112 [ 2166.705889][ T7] attempt to access beyond end of device [ 2166.721259][ T7] loop2: rw=1, want=20932, limit=112 [ 2166.732460][ T7] attempt to access beyond end of device [ 2166.738585][ T7] loop2: rw=1, want=20933, limit=112 [ 2166.744108][ T7] attempt to access beyond end of device [ 2166.750245][ T7] loop2: rw=1, want=20942, limit=112 [ 2166.755695][ T7] attempt to access beyond end of device [ 2166.766326][ T7] loop2: rw=1, want=20943, limit=112 [ 2166.787669][ T7] attempt to access beyond end of device [ 2166.799908][ T7] loop2: rw=1, want=20944, limit=112 [ 2166.805395][ T7] attempt to access beyond end of device [ 2166.811974][ T7] loop2: rw=1, want=20945, limit=112 [ 2166.830095][ T7] attempt to access beyond end of device [ 2166.865478][ T7] loop2: rw=1, want=21201, limit=112 [ 2167.674865][ T7] attempt to access beyond end of device [ 2167.702893][ T7] loop0: rw=1, want=130, limit=112 [ 2167.709814][ T7] attempt to access beyond end of device [ 2167.715458][ T7] loop0: rw=1, want=131, limit=112 22:54:48 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22:54:48 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40048}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@delqdisc={0x44, 0x25, 0xd00, 0x70bd2b, 0x25dfdbfc, {0x0, r4, {0x5, 0x4}, {0x9, 0xd}, {0x10, 0x2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x10001}, @TCA_INGRESS_BLOCK={0x8}, @TCA_RATE={0x8, 0x5, {0x0, 0x100}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x92a}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000) 22:54:48 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x200) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f00000000c0)={0x3, 0xffffffff, @name="7f75424ea9c7f020fffdd7decbbbec9b50d99f481d8227378a5bee3f5b6b9804"}) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:48 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) stat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) r2 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f00000009c0)=0xe8) syz_mount_image$ntfs(&(0x7f0000000400)='ntfs\x00', &(0x7f0000000480)='./file0\x00', 0x950, 0x2, &(0x7f0000000740)=[{&(0x7f00000006c0)="ce16f1ceda2e706a6a93b7ac1585b3513a790bf94c980d0f56d0c94e804fd697df3777e282154d0905dd5b4c52f872a12210b9bf6d3688db5d6b3956b559", 0x3e, 0x6}, {&(0x7f0000000700)="016c1b6de95140f853d73ef93d9aba65", 0x10, 0xac}], 0x8000, &(0x7f0000000a00)={[{@disable_sparse_yes='disable_sparse=yes'}], [{@uid_lt={'uid<', r0}}, {@euid_lt={'euid<', r1}}, {@seclabel='seclabel'}, {@dont_measure='dont_measure'}, {@fowner_gt={'fowner>', r2}}, {@fowner_gt={'fowner>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'TIPCv2\x00'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}]}) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="770045c7", @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) accept(r4, &(0x7f0000000ac0)=@ipx, &(0x7f0000000b40)=0x80) r6 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r6, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r6, &(0x7f00000002c0)="7626daec88ea3b78a99ee4d130863204b224b6e4f6689713530a6029d20028d7b0e0a0e8fedba988f0b242e3b7d99cb03db96568c3c686d0b54c6bc6885b51e6ead7402d7031e1a8819eb9a30839ed9b7bf2ade6d4a0c9e65338c3d8bd59715c8e364a83204075ccabe6e5ded1bbdd6bbcdc7f16ca6ceeae57d3c30bfc40a555e9516b9a0189dc59e52d5ac86ea8ae670b5c8882863f8e533d7f392f4e45b7264131929c23f0ea28651f25eaa99e9f10a353ca60b9393090a1dbabbf9f67a39bf30349bf2e9d2eedf073745d9f14f804c9459a0244f3154ffece77c171d886ae192b74d4d4477e1c9505bba3d8448075191dfea89d", &(0x7f00000000c0)=""/33}, 0x18) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') getsockopt$inet_mreqn(r6, 0x0, 0x0, &(0x7f0000000200)={@loopback, @loopback, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={@local, 0x57, r7}) 22:54:48 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) [ 2167.731937][ T7] attempt to access beyond end of device [ 2167.766759][ T7] loop0: rw=1, want=132, limit=112 [ 2167.772107][ T7] attempt to access beyond end of device [ 2167.780417][ T7] loop0: rw=1, want=133, limit=112 [ 2167.786217][ T7] attempt to access beyond end of device [ 2167.792104][ T7] loop0: rw=1, want=142, limit=112 [ 2167.797510][ T7] attempt to access beyond end of device [ 2167.803287][ T7] loop0: rw=1, want=143, limit=112 [ 2167.808666][ T7] attempt to access beyond end of device [ 2167.814446][ T7] loop0: rw=1, want=144, limit=112 [ 2167.819892][ T7] attempt to access beyond end of device [ 2167.825665][ T7] loop0: rw=1, want=145, limit=112 [ 2167.836070][T30485] attempt to access beyond end of device [ 2167.848867][T30485] loop1: rw=1, want=130, limit=112 [ 2167.864784][ T7] attempt to access beyond end of device [ 2167.897165][T30485] attempt to access beyond end of device [ 2167.926535][ T7] loop0: rw=1, want=153, limit=112 [ 2167.952231][T30485] loop1: rw=1, want=131, limit=112 [ 2167.966156][ T7] attempt to access beyond end of device [ 2167.978829][T30485] attempt to access beyond end of device [ 2167.982644][T13691] overlayfs: filesystem on './file0' not supported [ 2167.992827][ T7] loop0: rw=1, want=182, limit=112 [ 2168.001797][T30485] loop1: rw=1, want=132, limit=112 [ 2168.012934][ T7] attempt to access beyond end of device [ 2168.020709][T30485] attempt to access beyond end of device [ 2168.035939][ T7] loop0: rw=1, want=183, limit=112 [ 2168.043518][T30485] loop1: rw=1, want=133, limit=112 [ 2168.052330][ T7] attempt to access beyond end of device [ 2168.059279][T30485] attempt to access beyond end of device [ 2168.069847][ T7] loop0: rw=1, want=184, limit=112 [ 2168.079541][T30485] loop1: rw=1, want=142, limit=112 [ 2168.089317][ T7] attempt to access beyond end of device [ 2168.097325][T30485] attempt to access beyond end of device [ 2168.105303][ T7] loop0: rw=1, want=185, limit=112 [ 2168.112809][T30485] loop1: rw=1, want=143, limit=112 [ 2168.119187][ T7] attempt to access beyond end of device [ 2168.126719][T30485] attempt to access beyond end of device [ 2168.133574][ T7] loop0: rw=1, want=206, limit=112 [ 2168.150263][T30485] loop1: rw=1, want=144, limit=112 [ 2168.158957][ T7] attempt to access beyond end of device [ 2168.170312][T30485] attempt to access beyond end of device [ 2168.180500][ T7] loop0: rw=1, want=207, limit=112 [ 2168.192759][T30485] loop1: rw=1, want=145, limit=112 [ 2168.201485][ T7] attempt to access beyond end of device 22:54:48 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) [ 2168.234238][T30485] attempt to access beyond end of device [ 2168.245828][ T7] loop0: rw=1, want=208, limit=112 [ 2168.295571][ T7] attempt to access beyond end of device [ 2168.301929][T30485] loop1: rw=1, want=2193, limit=112 [ 2168.346271][ T7] loop0: rw=1, want=209, limit=112 [ 2168.368869][T30485] attempt to access beyond end of device [ 2168.378338][ T7] attempt to access beyond end of device [ 2168.401391][T30485] loop1: rw=1, want=4241, limit=112 [ 2168.410264][ T7] loop0: rw=1, want=258, limit=112 [ 2168.458530][ T7] attempt to access beyond end of device [ 2168.479627][T30485] attempt to access beyond end of device [ 2168.499990][ T7] loop0: rw=1, want=259, limit=112 [ 2168.520250][T30485] loop1: rw=1, want=6289, limit=112 [ 2168.535003][ T7] attempt to access beyond end of device [ 2168.582283][ T7] loop0: rw=1, want=260, limit=112 [ 2168.596977][T30485] attempt to access beyond end of device [ 2168.642773][ T7] attempt to access beyond end of device [ 2168.658338][T30485] loop1: rw=1, want=8337, limit=112 [ 2168.686739][ T7] loop0: rw=1, want=261, limit=112 [ 2168.829780][ T7] attempt to access beyond end of device [ 2168.836097][ T7] loop0: rw=1, want=270, limit=112 [ 2168.857393][T30485] attempt to access beyond end of device [ 2168.863039][T30485] loop1: rw=1, want=10385, limit=112 [ 2168.885222][ T7] attempt to access beyond end of device [ 2168.894257][T30485] attempt to access beyond end of device [ 2168.905730][ T7] loop0: rw=1, want=271, limit=112 [ 2168.911159][T30485] loop1: rw=1, want=11609, limit=112 [ 2168.922387][ T7] attempt to access beyond end of device [ 2168.936343][T30485] attempt to access beyond end of device [ 2168.959968][ T7] loop0: rw=1, want=272, limit=112 [ 2168.981611][T30485] loop1: rw=1, want=11638, limit=112 22:54:49 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$TCGETX(r0, 0x5432, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:49 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) 22:54:49 executing program 4: sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') set_mempolicy(0x8001, &(0x7f0000000300)=0x5, 0x100) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x40080) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000580)={@ethernet={0x6, @local}, {&(0x7f0000000240)=""/36, 0x24}, &(0x7f00000002c0), 0x42}, 0xffffffffffffff6f) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000780)=""/4096, 0x8000, 0x1000, 0x10001}, 0x18) [ 2168.990472][ T7] buffer_io_error: 60 callbacks suppressed [ 2168.990483][ T7] Buffer I/O error on dev loop0, logical block 271, lost async page write 22:54:49 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) [ 2169.053893][T30485] Buffer I/O error on dev loop1, logical block 11637, lost async page write [ 2169.065305][ T7] attempt to access beyond end of device [ 2169.069829][T30485] attempt to access beyond end of device [ 2169.076696][T30485] loop1: rw=1, want=11639, limit=112 [ 2169.081992][T30485] Buffer I/O error on dev loop1, logical block 11638, lost async page write [ 2169.083379][ T7] loop0: rw=1, want=273, limit=112 [ 2169.091610][T30485] attempt to access beyond end of device [ 2169.101845][T30485] loop1: rw=1, want=11640, limit=112 [ 2169.107180][T30485] Buffer I/O error on dev loop1, logical block 11639, lost async page write [ 2169.107216][T30485] attempt to access beyond end of device [ 2169.107227][T30485] loop1: rw=1, want=11641, limit=112 [ 2169.107240][T30485] Buffer I/O error on dev loop1, logical block 11640, lost async page write [ 2169.107264][T30485] attempt to access beyond end of device [ 2169.130020][ T7] Buffer I/O error on dev loop0, logical block 272, lost async page write [ 2169.136647][T30485] loop1: rw=1, want=11662, limit=112 [ 2169.176390][T30485] Buffer I/O error on dev loop1, logical block 11661, lost async page write [ 2169.206859][ T7] attempt to access beyond end of device [ 2169.224385][T13716] overlayfs: filesystem on './file0' not supported [ 2169.360381][ T7] loop0: rw=1, want=3473, limit=112 [ 2169.392109][ T7] attempt to access beyond end of device [ 2169.400152][ T7] loop0: rw=1, want=7521, limit=112 [ 2169.434087][T30485] attempt to access beyond end of device [ 2169.536755][T30485] loop1: rw=1, want=11663, limit=112 [ 2169.575689][ T7] attempt to access beyond end of device 22:54:50 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20080) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000200)="0506a2d0bdecc9476696b2f35fac113a17e0daca0aa0e92c2ef737e9cd9887524be8de1c31d1b33d8666b93f7f142494a91cfdef53bc5939275a88c38c4c3e94083b2c0666d6952bb33279a9941f7bb481423bf57381f9a60efa7c1f439a18333a61dde688d358e1f8a029b6593fc642564830299883871ad3c499b804c3f4dbf66f34a3d13daba2ec581ce20b4f819d080df924856afd775667b8f40b9371f735f5c0bd0d30d5c8214c747ebd7d8317920dbac0ca2c075d4b00aff5a0fa5d95c9c9d3364d3fb9484a71520d620f", 0xce) 22:54:50 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) [ 2169.622092][T30485] Buffer I/O error on dev loop1, logical block 11662, lost async page write [ 2169.659851][ T7] loop0: rw=1, want=11841, limit=112 [ 2169.712617][T30485] attempt to access beyond end of device [ 2169.742137][T30485] loop1: rw=1, want=11664, limit=112 [ 2169.778986][T30485] Buffer I/O error on dev loop1, logical block 11663, lost async page write [ 2169.844306][ T7] attempt to access beyond end of device [ 2169.878233][T30485] attempt to access beyond end of device [ 2169.945715][ T7] loop0: rw=1, want=21145, limit=112 [ 2169.960861][T30485] loop1: rw=1, want=11665, limit=112 [ 2169.970202][ T7] attempt to access beyond end of device [ 2169.975845][ T7] loop0: rw=1, want=23017, limit=112 [ 2169.981204][T30485] Buffer I/O error on dev loop1, logical block 11664, lost async page write [ 2169.989988][T30485] attempt to access beyond end of device [ 2169.995627][T30485] loop1: rw=1, want=11714, limit=112 [ 2170.002452][T30485] attempt to access beyond end of device [ 2170.008141][T30485] loop1: rw=1, want=11715, limit=112 [ 2170.013454][T30485] attempt to access beyond end of device [ 2170.044916][T30485] loop1: rw=1, want=11716, limit=112 [ 2170.065671][T30485] attempt to access beyond end of device [ 2170.471625][T30485] loop1: rw=1, want=11717, limit=112 [ 2170.544666][T30485] attempt to access beyond end of device [ 2170.586696][T30485] loop1: rw=1, want=11726, limit=112 [ 2170.611424][T30485] attempt to access beyond end of device [ 2170.630817][T30485] loop1: rw=1, want=11727, limit=112 [ 2170.636153][T30485] attempt to access beyond end of device [ 2170.656663][T30485] loop1: rw=1, want=11728, limit=112 [ 2170.662123][T30485] attempt to access beyond end of device [ 2170.683525][T30485] loop1: rw=1, want=11729, limit=112 [ 2170.693267][T30485] attempt to access beyond end of device [ 2170.696653][ C0] net_ratelimit: 20 callbacks suppressed [ 2170.696661][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2170.699043][T30485] loop1: rw=1, want=14817, limit=112 [ 2170.704580][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2170.717284][T30485] attempt to access beyond end of device [ 2170.721377][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2170.726896][T30485] loop1: rw=1, want=18849, limit=112 [ 2170.732627][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2170.743687][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2170.745396][T30485] attempt to access beyond end of device [ 2170.749476][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2170.755836][T30485] loop1: rw=1, want=22881, limit=112 [ 2170.872541][T30485] attempt to access beyond end of device [ 2170.900896][T30485] loop1: rw=1, want=30713, limit=112 [ 2170.954279][T30485] attempt to access beyond end of device [ 2170.972544][T30485] loop1: rw=1, want=32993, limit=112 22:54:52 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) 22:54:52 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r1) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@host}) 22:54:52 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) 22:54:52 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) openat(r3, &(0x7f00000000c0)='./file0\x00', 0x1, 0x5) 22:54:52 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) sendmsg$inet_sctp(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e21, 0xffffffffffff7fff, @remote, 0x8000}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="1f86b606f32909f83d0e426588", 0xd}, {&(0x7f0000000200)="692fe1f4b9078d6419609a4b238492a59fb174e6ee8382e7997d60c35eb4b6445dfe7251d6434ee35ec2e450daf4bfac293a1742493659af4ef2d4b16dbfd583dd45037e5d6816fa5ab68260c879757b002edaeb59b1de715ab51cf6d39380919e3e38392a8246cc461deb2dd893c9f0c208dc0cbf58", 0x76}], 0x2}, 0x800) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xd0}], 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a1dfe76df000000000800060003000000080003000400000008000500000000000800020001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000b2f8bb0799b5483b95e55f2989a1f0550dfc84dbd1018a04e6e85a58b30d9cb81c6a50c5"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0xff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:52 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$inet(0x2, 0xb, 0xffffffff) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) connect$ax25(r0, &(0x7f0000000200)={{0x3, @bcast}, [@bcast, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x2) [ 2171.577416][T13768] overlayfs: filesystem on './file0' not supported [ 2171.816702][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2171.822518][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2171.827342][T13794] overlayfs: filesystem on './file0' not supported [ 2171.828388][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2171.840622][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:52 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 22:54:52 executing program 2: mkdir(0x0, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x611b, 0x202) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0xfff, 0xb, 0x2, "7a36bf45085be61893160a6211022cafd1f4fd72a9bbb7392994b050a2bd30c0"}) r1 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f0000000140)={'vxcan1\x00', @ifru_map={0x1, 0x1, 0xffffffff, 0x8f, 0x8, 0x40}}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r1, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) write$apparmor_current(r1, &(0x7f0000000240)=@hat={'changehat ', 0x3, 0x5e, ['\x00', '\x00', '\x00', 'ppp04(\x00', '${cpuset#\x00']}, 0x31) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2172.093090][ T283] attempt to access beyond end of device [ 2172.106326][ T283] loop2: rw=1, want=130, limit=112 [ 2172.118400][ T283] attempt to access beyond end of device [ 2172.132160][ T283] loop2: rw=1, want=131, limit=112 [ 2172.137438][ T283] attempt to access beyond end of device 22:54:52 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) [ 2172.157985][T13806] overlayfs: filesystem on './file0' not supported [ 2172.184697][ T283] loop2: rw=1, want=132, limit=112 [ 2172.209349][ T283] attempt to access beyond end of device [ 2172.242852][ T283] loop2: rw=1, want=133, limit=112 [ 2172.280365][ T283] attempt to access beyond end of device [ 2172.317743][ T283] loop2: rw=1, want=142, limit=112 22:54:53 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) [ 2172.345969][ T283] attempt to access beyond end of device [ 2172.498691][ T283] loop2: rw=1, want=143, limit=112 [ 2172.605098][ T283] attempt to access beyond end of device [ 2172.610871][ T283] loop2: rw=1, want=144, limit=112 [ 2172.616016][ T283] attempt to access beyond end of device [ 2172.663838][ T283] loop2: rw=1, want=145, limit=112 [ 2172.694988][ T283] attempt to access beyond end of device [ 2172.732078][ T283] loop2: rw=1, want=4113, limit=112 [ 2172.750338][T13835] overlayfs: filesystem on './file0' not supported 22:54:53 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 2172.813656][ T283] attempt to access beyond end of device 22:54:53 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(r2, &(0x7f00000000c0)='{}\x00', 0x1) bind$isdn(r0, &(0x7f0000000200)={0x22, 0x0, 0x1, 0x1, 0x3}, 0x6) ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000140)=0x6) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2172.887118][ T283] loop2: rw=1, want=8153, limit=112 22:54:53 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) 22:54:53 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) [ 2172.950222][ T283] attempt to access beyond end of device 22:54:53 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') write$P9_RFSYNC(r0, &(0x7f00000000c0)={0x7, 0x33, 0x1}, 0x7) [ 2173.042123][ T283] loop2: rw=1, want=8889, limit=112 [ 2173.057379][T13841] attempt to access beyond end of device [ 2173.088701][T13841] loop0: rw=1, want=130, limit=112 [ 2173.094621][T13841] attempt to access beyond end of device [ 2173.165452][T13841] loop0: rw=1, want=131, limit=112 [ 2173.222766][T13845] overlayfs: filesystem on './file0' not supported [ 2173.226706][T13841] attempt to access beyond end of device [ 2173.235026][T13841] loop0: rw=1, want=132, limit=112 22:54:54 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) [ 2173.295292][T13841] attempt to access beyond end of device [ 2173.303214][T13841] loop0: rw=1, want=133, limit=112 [ 2173.315071][T13841] attempt to access beyond end of device [ 2173.321206][T13841] loop0: rw=1, want=142, limit=112 [ 2173.326449][T13841] attempt to access beyond end of device [ 2173.338077][T13841] loop0: rw=1, want=143, limit=112 [ 2173.350064][T13841] attempt to access beyond end of device [ 2173.360306][T13841] loop0: rw=1, want=144, limit=112 [ 2173.365536][T13841] attempt to access beyond end of device [ 2173.371417][T13841] loop0: rw=1, want=145, limit=112 [ 2173.377845][T13841] attempt to access beyond end of device [ 2173.383572][T13841] loop0: rw=1, want=153, limit=112 [ 2173.388989][T13841] attempt to access beyond end of device [ 2173.399216][T13841] loop0: rw=1, want=182, limit=112 [ 2173.419855][T13841] attempt to access beyond end of device [ 2173.445849][T13841] loop0: rw=1, want=183, limit=112 [ 2173.462356][T13841] attempt to access beyond end of device [ 2173.468412][T13841] loop0: rw=1, want=184, limit=112 [ 2173.473688][T13841] attempt to access beyond end of device [ 2173.486063][T13841] loop0: rw=1, want=185, limit=112 [ 2173.500270][T13841] attempt to access beyond end of device [ 2173.506345][T13841] loop0: rw=1, want=206, limit=112 [ 2173.536838][T13841] attempt to access beyond end of device [ 2173.543817][T13841] loop0: rw=1, want=207, limit=112 22:54:54 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r0 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) r1 = semget(0x0, 0x1, 0x80) semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000140)=0x1f) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2173.586749][T13841] attempt to access beyond end of device [ 2173.610113][T13841] loop0: rw=1, want=208, limit=112 22:54:54 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x8fa, 0x1, 0x1, 0x0, 0x3, 0x8}, 0x20) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="63063f00000000000000"], &(0x7f00000003c0)=0xe) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={r1, 0xffffffffffffff81, 0x8000, 0x2}, &(0x7f0000000480)=0x10) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl(r2, 0x53f, &(0x7f0000000780)="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") write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f00000002c0)={'broute\x00', 0x0, 0x4, 0x59, [], 0x4, &(0x7f0000000140)=[{}, {}, {}, {}], &(0x7f0000000200)=""/89}, &(0x7f0000000340)=0x78) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2173.663602][T13841] attempt to access beyond end of device [ 2173.683396][T13841] loop0: rw=1, want=209, limit=112 22:54:54 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 2173.717824][T13841] attempt to access beyond end of device [ 2173.734469][T13873] overlayfs: filesystem on './file0' not supported [ 2173.787306][T13841] loop0: rw=1, want=258, limit=112 [ 2173.820314][T13841] attempt to access beyond end of device [ 2173.836774][T13841] loop0: rw=1, want=259, limit=112 [ 2173.845294][T13841] attempt to access beyond end of device [ 2173.857079][T13841] loop0: rw=1, want=260, limit=112 22:54:54 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0xc4801, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000200)=[0x62, 0x62]) syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2173.889007][T13841] attempt to access beyond end of device [ 2173.900210][T13841] loop0: rw=1, want=261, limit=112 [ 2173.907536][T13841] attempt to access beyond end of device [ 2173.913331][T13841] loop0: rw=1, want=270, limit=112 22:54:54 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r1, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x4, 0x7, 0x7fffffff]}]}, 0xfffffffffffffd38}, 0x1, 0x0, 0x0, 0x4804}, 0x4000000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x2) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2173.952044][T13841] attempt to access beyond end of device 22:54:54 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) [ 2174.002911][T13841] loop0: rw=1, want=271, limit=112 [ 2174.014945][T13841] buffer_io_error: 37 callbacks suppressed [ 2174.014955][T13841] Buffer I/O error on dev loop0, logical block 270, lost async page write 22:54:54 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) [ 2174.050156][T13841] attempt to access beyond end of device [ 2174.055811][T13841] loop0: rw=1, want=272, limit=112 [ 2174.074557][T13841] Buffer I/O error on dev loop0, logical block 271, lost async page write [ 2174.103213][T13841] attempt to access beyond end of device [ 2174.114389][T13841] loop0: rw=1, want=273, limit=112 [ 2174.144955][T13841] Buffer I/O error on dev loop0, logical block 272, lost async page write [ 2174.214504][T13841] attempt to access beyond end of device [ 2174.235902][T13841] loop0: rw=1, want=13113, limit=112 [ 2174.294712][T13841] attempt to access beyond end of device [ 2174.312341][T13841] loop0: rw=1, want=19209, limit=112 22:54:55 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r2 = syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x64, r2, 0x0, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x41) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) 22:54:55 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200040, 0x0) 22:54:55 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') r2 = getpid() write$P9_ROPEN(r1, &(0x7f00000000c0)={0x18, 0x71, 0x2, {{0x43, 0x3, 0x7}, 0x9}}, 0x18) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x7ff, 0x0, 0x100, 0x1, 0x0, 0x7, 0x0, 0x4, 0x7ff, 0x5, 0x7, 0x89, 0x6, 0x5, 0xffff, 0x0, 0x7, 0x6, 0x0, 0x2, 0x3ff, 0xffffffffffffffff, 0xfe, 0x80000001, 0x7fff, 0xfff, 0x3, 0x6, 0x2, 0xfa0000, 0xc3, 0xf0, 0x6, 0xd1e, 0x7, 0x8, 0x0, 0x400, 0x1, @perf_config_ext={0xff, 0x3ff}, 0x20020, 0x4, 0x7, 0x5, 0x0, 0x7, 0x3}, r2, 0x1, 0xffffffffffffffff, 0x3) [ 2174.589854][T13919] overlayfs: filesystem on './file0' not supported [ 2174.788629][T13941] overlayfs: filesystem on './file0' not supported 22:54:56 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="74186114a43b8e134a7f6b25000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fedbdf250200000014000100fe80000000000000000000000000000a08000200000000000800060003000000080003000400000008000500000000000800030001000100080005000500000014000100fe8000000000000000000000000000aa0800050002000000"], 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$TCSETXW(r0, 0x5435, &(0x7f0000000300)={0x7, 0x40, [0x8, 0x3, 0x400, 0x5, 0x8], 0x2}) r3 = semget$private(0x0, 0x7, 0x8) semtimedop(r3, &(0x7f00000000c0)=[{0x1, 0x7, 0x1800}, {0x3, 0x1f, 0x800}, {0x0, 0xfffffffffffff1c9, 0x1800}], 0x3, &(0x7f0000000140)) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r7, 0x4008ae89, &(0x7f0000000280)={0x7a, 0x0, [0x40000000, 0x10000000800002c1, 0x40000001, 0x3], [0xc1]}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:56 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:56 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) getdents(r0, &(0x7f0000000140)=""/51, 0x33) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) 22:54:56 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRES32, @ANYPTR=&(0x7f0000000780)=ANY=[@ANYRES64=r1, @ANYRESOCT=r2, @ANYRESHEX=r1, @ANYBLOB="0871c6844890a3d048a1bd6c862d347957fd603843447f5a122f5e23faaff4080da27677b117d433bbe628ddbfa60b64ec59042559709baa04ec7b503f895f7d0368d01fe559c7c42b5798a346772730ad6c94d699a03b52f644dd16010000000000000014ae90ba3ed2ebb3705f5598c6b774c5167f0cbddc5c013bd769f0778cd2198ec699c3c3a2b64de6d7033b2ccf67b034d086060cd96ee1a646d4822381cbd658f3f6f0a83a0a8164ff88c8603d3f43ef287ffc249c53f463af5f5f789cce17c9a4bde283a8d5d6104045116bde5b", @ANYRESDEC=r1]]], 0x8) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./file0\x00', 0x4000000000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:56 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') syz_genetlink_get_family_id$SEG6(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) 22:54:56 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) [ 2175.977217][ C0] net_ratelimit: 20 callbacks suppressed [ 2175.977263][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2175.988974][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2175.995465][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2176.001915][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2176.093760][T13980] overlayfs: filesystem on './file0' not supported [ 2176.145020][T13977] kvm [13963]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 22:54:56 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x141000, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x5, 0x22e, 0x3}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="00002000d8205a2f93c14fc468de68b0a13723bd56d59ea66f63d42c20ea8f52ebb4b097"], 0x28) r2 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000300)) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f00000000c0)='./file0/file1\x00', 0x1000000000000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:57 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 22:54:57 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) 22:54:57 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0)=0x3, 0x4) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:57 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2176.616665][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2176.622544][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2176.647751][T14006] overlayfs: filesystem on './file0' not supported [ 2176.936680][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2176.942492][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2176.948375][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2176.954142][ C0] protocol 88fb is buggy, dev hsr_slave_1 22:54:57 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 22:54:58 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) 22:54:59 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20000) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') connect$x25(r0, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2178.420498][ T9761] attempt to access beyond end of device [ 2178.426170][ T9761] loop0: rw=1, want=130, limit=112 [ 2178.466672][ T9761] Buffer I/O error on dev loop0, logical block 129, lost async page write [ 2178.475225][ T9761] attempt to access beyond end of device [ 2178.490104][ T9761] loop0: rw=1, want=131, limit=112 [ 2178.495228][ T9761] Buffer I/O error on dev loop0, logical block 130, lost async page write [ 2178.522873][ T9761] attempt to access beyond end of device [ 2178.538746][ T9761] loop0: rw=1, want=132, limit=112 [ 2178.556683][ T9761] Buffer I/O error on dev loop0, logical block 131, lost async page write [ 2178.615940][ T9761] attempt to access beyond end of device 22:54:59 executing program 5: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xffffffffffffff4b}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000780)=""/4096) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000400)={0x3, @null, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 22:54:59 executing program 1: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:59 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xffff, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e66870c6d529d8f78fb24ad9b00f8", 0x16, 0x8}], 0x1010000, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') 22:54:59 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000480)=0xe8) r3 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000900)={0x46, 0x3, 0x5, 0xa, 0x34a5f92, 0x81}) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000200)='./file1\x00', 0x4, 0x4, &(0x7f0000000580)=[{&(0x7f0000000240)="78df7f580bec95f5c5474dfaa95133ae57511292df419cc5adb469338dbb40a68d6c94cacbe5fb2ba7207ebdb1232ad6aa146b006c2286125289ea38e4de26e8fe8fe783eae079c078fe32ed16f0317583ba97845d26a98414a0e4f9487a532414fd113247577ef9b321ffcb1abb6554b604fd5b4891dd437e10b2c9b05eaeffadc7f924e8b4c2d09f9b0bebb47764690e1ad32f2fae73452ee50f4eae2a792063e4dec87e52c9b1ccca63ad30", 0xad, 0x6}, {&(0x7f0000000300)="a372eb5365c294f566de9d3f092b99b84d126624ca868a917ecf6e3e71deb9362c51d2d9fa85d693dca862cb4278a63fb75b18adfc64e4aceb200f17ee0c470dcd3e5548bd094ff9d6970c78b234bb3259366b5e2409d0ba8f288544d02f90da1ab9e5e6118f8fab593b35df3f0c6694514795126155daaa8a2e8837639aa61bfb544a5f72d578bef8af07af8dc309051d809b18500970286c", 0x99, 0x1f}, {&(0x7f00000003c0)="1f6fc38ac967eff2944500aee099a20eaec9442c30b0e631ae8591854133a026c00b6f35a61b8f1bd04e0b84f8764d3b69b3ac74b99b7b176397d73735ba5b0f148dc82bd41594", 0x47, 0x1}, {&(0x7f0000000500)="7f74fcd1d3dffd60084eb75c5ed1927d43b4110fba27b07b414618351582f8f96b976f5dfd2079cd1efb8fede2c65c596f8a4009fabf7a44e8b708c1f15499e9edf4fc", 0x43, 0xc2}], 0x40, &(0x7f0000000800)=ANY=[@ANYBLOB='nonumtail=0,utf8=1,shortname=lower,shortname=winnt,obj_type=,pcr=00000000000000000058,fowner=', @ANYRESDEC=r2, @ANYBLOB=',fowner>', @ANYRESDEC=r3, @ANYBLOB=',euid>', @ANYRESDEC=r4, @ANYBLOB="2c646f6e745f617070727372ff6f743d2c736d61636b66736861743d2c6f626a5f726f6c653d76666174002c000000000000000008000000"]) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2178.673199][ T9761] loop0: rw=1, want=133, limit=112 [ 2178.682490][T13841] attempt to access beyond end of device [ 2178.712190][T13841] loop1: rw=1, want=130, limit=112 [ 2178.721565][T13841] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 2178.726619][ T9761] Buffer I/O error on dev loop0, logical block 132, lost async page write [ 2178.734165][T13841] attempt to access beyond end of device [ 2178.762186][T13841] loop1: rw=1, want=131, limit=112 [ 2178.764095][T14043] overlayfs: failed to resolve './file1': -2 [ 2178.773756][ T9761] attempt to access beyond end of device [ 2178.789343][ T9761] loop0: rw=1, want=142, limit=112 [ 2178.794472][ T9761] Buffer I/O error on dev loop0, logical block 141, lost async page write [ 2178.826782][T13841] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 2178.836217][ T9761] attempt to access beyond end of device [ 2178.846635][ T9761] loop0: rw=1, want=143, limit=112 [ 2178.851783][ T9761] attempt to access beyond end of device [ 2178.862491][ T9761] loop0: rw=1, want=144, limit=112 [ 2178.868537][ T9761] attempt to access beyond end of device [ 2178.885149][ T9761] loop0: rw=1, want=145, limit=112 [ 2178.891281][ T9761] attempt to access beyond end of device [ 2178.924208][ T9761] loop0: rw=1, want=153, limit=112 22:54:59 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) chdir(&(0x7f0000000380)='./file0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 2178.941535][T14052] FAT-fs (loop4): invalid media value (0x9d) [ 2178.947606][T14052] FAT-fs (loop4): Can't find a valid FAT filesystem 22:54:59 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') creat(&(0x7f0000000180)='./file0\x00', 0x30) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[], 0xfffffffffffffeae) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2178.995387][ T9761] attempt to access beyond end of device [ 2179.006860][T13841] attempt to access beyond end of device [ 2179.012506][T13841] loop1: rw=1, want=132, limit=112 [ 2179.031482][ T9761] loop0: rw=1, want=182, limit=112 [ 2179.071285][ T9761] buffer_io_error: 3 callbacks suppressed [ 2179.071296][ T9761] Buffer I/O error on dev loop0, logical block 181, lost async page write [ 2179.101151][T13841] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 2179.110988][T14064] overlayfs: filesystem on './file0' not supported [ 2179.121491][ T9761] attempt to access beyond end of device [ 2179.135536][ T9761] loop0: rw=1, want=183, limit=112 [ 2179.173068][ T9761] Buffer I/O error on dev loop0, logical block 182, lost async page write [ 2179.188040][T13841] attempt to access beyond end of device 22:54:59 executing program 2: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x100000000, 0x407ff) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYBLOB="6c79468920ca794298a4b4f7", @ANYRES32=r0, @ANYRES16=r1, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=0x0], 0x83) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000140)={0x5, 0x7, 0x7, 0x5, 0x8, 0x81, 0x8001}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000005c0)=[{&(0x7f00000002c0)="9207715134b15858eaedf45f3bd798414a6062fbc43ca4aceb0846697f3d6d7da1e633eb9ec5adbf198ee77b3ac28aaa0667ba439317566208dc9a0bccd3d93918b918f23d3da268bf7789e104519ba4a40095cd1dfad7d583e607f5a653328a2b7cf4fc8762274c65418e65d275ea96465522bf230c781a3e865e892a082a08023d94320d0a83c5937623194f395fba167b6641dabec927d037e439cbea565a1c978ddf63b5c6", 0xa7}, {&(0x7f0000000380)="0b5b78e2d9bf88e44c7573050465b2314a599508900b8b9290ce17ce9be8a98fcc1554083f7a4fd4f44f62188dbbe570e573d74fdc1c87da7b2327e44d7f88381c2b36acf530e2216301", 0x4a}, {&(0x7f0000000200)="2789959ccf57d6868ceebabf589621556786096a6dd288a7cc91ff43d96b3b853628923667881ed2a684", 0x2a}, {&(0x7f0000000500)="8e8346177bdca1fbe52ab11d113d2659cf4365deefc32dcd35f37af881e6a49ffba49cc91a2b7d87a2df159815578c7471eb9e60d4e74fc6d42aa1a7bc3f53fcf90bec30143dd882581ed79822fecab0391f0fc4c60742f08b92300a311b25af4c1e25622004518382c97fd5722b36a5a3c5e3c89fefe9f074c03d398fd82a2b7294b1945e77d2b373dfc897e664727b4d149ff0997545491054cd1ecdba3f2d1a79b03321fe5361355a8b59a3ecccbb557c59c353668034e290db06d082f5", 0xbf}, {&(0x7f0000000400)="a67d87ea254dd238ffdd3a0940", 0xd}], 0x5) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0\x00', 0x1, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2179.215667][T13841] loop1: rw=1, want=133, limit=112 [ 2179.226429][ T9761] attempt to access beyond end of device [ 2179.234720][T13841] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 2179.245473][ T9761] loop0: rw=1, want=184, limit=112 [ 2179.252132][T13841] attempt to access beyond end of device 22:54:59 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 2179.258273][ T9761] Buffer I/O error on dev loop0, logical block 183, lost async page write [ 2179.267786][ T9761] attempt to access beyond end of device [ 2179.273445][ T9761] loop0: rw=1, want=185, limit=112 [ 2179.273625][T13841] loop1: rw=1, want=142, limit=112 [ 2179.279003][ T9761] Buffer I/O error on dev loop0, logical block 184, lost async page write [ 2179.292749][ T9761] attempt to access beyond end of device [ 2179.293711][T13841] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 2179.313531][T13841] attempt to access beyond end of device [ 2179.316660][ T9761] loop0: rw=1, want=206, limit=112 [ 2179.319424][T13841] loop1: rw=1, want=143, limit=112 [ 2179.329847][ T9761] Buffer I/O error on dev loop0, logical block 205, lost async page write [ 2179.341896][ T9761] attempt to access beyond end of device [ 2179.346641][T13841] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 2179.347897][ T9761] loop0: rw=1, want=207, limit=112 [ 2179.356096][T13841] attempt to access beyond end of device [ 2179.361529][ T9761] Buffer I/O error on dev loop0, logical block 206, lost async page write [ 2179.375721][ T9761] attempt to access beyond end of device [ 2179.381917][ T9761] loop0: rw=1, want=208, limit=112 [ 2179.406667][ T9761] attempt to access beyond end of device [ 2179.425599][ T9761] loop0: rw=1, want=209, limit=112 [ 2179.430352][T13841] loop1: rw=1, want=144, limit=112 [ 2179.449113][ T9761] attempt to access beyond end of device [ 2179.454853][ T9761] loop0: rw=1, want=258, limit=112 [ 2179.454888][ T9761] attempt to access beyond end of device [ 2179.463872][T13841] attempt to access beyond end of device [ 2179.466439][ T9761] loop0: rw=1, want=259, limit=112 22:55:00 executing program 3: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() fsetxattr$security_evm(r0, &(0x7f0000000100)='security.evm\x00', 0x0, 0x0, 0x0) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000200)=0x36, 0x4) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000006c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r0}}, 0x18) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) getgid() setxattr$system_posix_acl(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c6531007c778e0bfce8be9442e5de490cbb0be96b2c6530f4d45fe9a8759d3253118037b336f1d28bdd28af07a13b9fcd5b1c99fabd5141e162e1"]) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0xfffffd97) [ 2179.521822][T14079] overlayfs: filesystem on './file0' not supported [ 2179.544460][T13841] loop1: rw=1, want=145, limit=112 [ 2179.549120][ T9761] attempt to access beyond end of device [ 2179.565793][T13841] attempt to access beyond end of device [ 2179.568640][ T9761] loop0: rw=1, want=260, limit=112 [ 2179.572177][T13841] loop1: rw=1, want=2201, limit=112 [ 2179.587478][T13841] attempt to access beyond end of device [ 2179.601002][T13841] loop1: rw=1, want=4993, limit=112 [ 2179.606376][ T9761] attempt to access beyond end of device [ 2179.606389][ T9761] loop0: rw=1, want=261, limit=112 22:55:00 executing program 2: mkdir(0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x11e) r0 = gettid() sched_setscheduler(r0, 0x3, &(0x7f00000002c0)=0x3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000080)='bfs\x00', &(0x7f0000000140)='./file0/file1\x00', 0x0, 0x0, &(0x7f0000000500), 0x2010, 0x0) r1 = syz_open_dev$sndpcmc(0x0, 0x6, 0x20000) ioctl$CAPI_INSTALLED(r1, 0x80024322) r2 = inotify_add_watch(r1, &(0x7f0000000400)='./file0/file0\x00', 0xb6000820) inotify_rm_watch(r1, r2) pivot_root(&(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)='./file0/file1\x00') r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0xfffffd97) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) [ 2179.606419][ T9761] attempt to access beyond end of device [ 2179.606430][ T9761] loop0: rw=1, want=270, limit=112 [ 2179.606460][ T9761] attempt to access beyond end of device [ 2179.606470][ T9761] loop0: rw=1, want=271, limit=112 [ 2179.606498][ T9761] attempt to access beyond end of device [ 2179.606509][ T9761] loop0: rw=1, want=272, limit=112 [ 2179.606537][ T9761] attempt to access beyond end of device [ 2179.606604][ T9761] loop0: rw=1, want=273, limit=112 [ 2179.735900][T14052] FAT-fs (loop4): invalid media value (0x9d) [ 2179.741983][T14052] FAT-fs (loop4): Can't find a valid FAT filesystem [ 2179.742235][ T9761] attempt to access beyond end of device [ 2179.755102][T13841] attempt to access beyond end of device [ 2179.760237][ T9761] loop0: rw=1, want=32993, limit=112 [ 2179.828520][T13841] loop1: rw=1, want=9049, limit=112 [ 2179.866517][T14098] overlayfs: filesystem on './file0' not supported [ 2179.893424][T13841] attempt to access beyond end of device [ 2179.905996][T13841] loop1: rw=1, want=13457, limit=112 22:55:00 executing program 4: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x0, 0x20000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000740)='./file0/file1\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2180.008130][T13841] attempt to access beyond end of device [ 2180.013803][T13841] loop1: rw=1, want=21753, limit=112 [ 2180.044215][T13841] attempt to access beyond end of device [ 2180.064256][T13841] loop1: rw=1, want=32889, limit=112 [ 2181.096690][ C0] net_ratelimit: 20 callbacks suppressed [ 2181.096701][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2181.108220][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2181.114062][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2181.119887][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2181.125741][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2181.131548][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2181.636994][T13841] attempt to access beyond end of device [ 2181.642692][T13841] loop1: rw=1, want=130, limit=112 [ 2181.651081][T13841] attempt to access beyond end of device [ 2181.658381][T13841] loop1: rw=1, want=131, limit=112 [ 2181.663557][T13841] attempt to access beyond end of device [ 2181.669802][T13841] loop1: rw=1, want=132, limit=112 [ 2181.674980][T13841] attempt to access beyond end of device [ 2181.683861][T13841] loop1: rw=1, want=133, limit=112 [ 2181.689389][T13841] attempt to access beyond end of device [ 2181.695039][T13841] loop1: rw=1, want=142, limit=112 [ 2181.701028][T13841] attempt to access beyond end of device [ 2181.707116][T13841] loop1: rw=1, want=143, limit=112 [ 2181.712284][T13841] attempt to access beyond end of device [ 2181.718361][T13841] loop1: rw=1, want=144, limit=112 [ 2181.723530][T13841] attempt to access beyond end of device [ 2181.729645][T13841] loop1: rw=1, want=145, limit=112 [ 2181.743466][T13841] attempt to access beyond end of device [ 2181.749260][T13841] loop1: rw=1, want=2225, limit=112 [ 2181.767752][T13841] attempt to access beyond end of device [ 2181.773448][T13841] loop1: rw=1, want=4273, limit=112 22:55:02 executing program 0: mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x6, 0x20001) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200100}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0xa}}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10001}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x41) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0xfffffd97) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(0x0, 0x0) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') [ 2181.789684][T13841] attempt to access beyond end of device [ 2181.795366][T13841] loop1: rw=1, want=6329, limit=112 [ 2181.812956][T13841] attempt to access beyond end of device [ 2181.822510][T13841] loop1: rw=1, want=8377, limit=112 [ 2181.834072][T13841] attempt to access beyond end of device [ 2181.842344][T13841] loop1: rw=1, want=10425, limit=112 [ 2181.851253][T13841] attempt to access beyond end of device [ 2181.856974][T13841] loop1: rw=1, want=12473, limit=112 [ 2181.864660][T13841] attempt to access beyond end of device [ 2181.870378][T13841] loop1: rw=1, want=14985, limit=112 [ 2181.881797][T13841] attempt to access beyond end of device [ 2181.887509][T13841] loop1: rw=1, want=19017, limit=112 [ 2181.897188][T13841] attempt to access beyond end of device [ 2181.902839][T13841] loop1: rw=1, want=23041, limit=112 [ 2181.914047][T13841] attempt to access beyond end of device [ 2181.919737][T13841] loop1: rw=1, want=29297, limit=112 [ 2181.932309][T13841] attempt to access beyond end of device [ 2181.938013][T13841] loop1: rw=1, want=32889, limit=112 [ 2182.376702][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2182.382480][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2182.388331][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2182.394082][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2186.536771][ C0] net_ratelimit: 20 callbacks suppressed [ 2186.542501][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2186.548326][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2186.554235][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2186.560062][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2187.016689][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2187.022509][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2187.336693][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2187.342470][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2187.348382][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2187.354140][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2192.776746][ C0] net_ratelimit: 26 callbacks suppressed [ 2192.782600][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2192.788392][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2192.794328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2192.800398][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2193.256704][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2193.263043][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2193.576744][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2193.582733][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2193.588546][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2193.594353][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2199.016741][ C0] net_ratelimit: 26 callbacks suppressed [ 2199.022435][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2199.028246][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2199.034149][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2199.039935][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2199.496713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2199.503227][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2199.816729][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2199.822704][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2199.828626][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2199.834394][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2205.256750][ C0] net_ratelimit: 26 callbacks suppressed [ 2205.256757][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2205.268414][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2205.274277][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2205.280077][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2205.736697][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2205.742618][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2206.056773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2206.062661][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2206.068554][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2206.074337][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2211.496703][ C0] net_ratelimit: 26 callbacks suppressed [ 2211.496710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2211.508379][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2211.514238][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2211.520037][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2211.976695][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2211.982516][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2212.296703][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2212.302553][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2212.308471][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2212.314266][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2217.736747][ C0] net_ratelimit: 26 callbacks suppressed [ 2217.742442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2217.748201][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2217.753993][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2217.759744][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2218.216707][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2218.222511][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2218.536716][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2218.542557][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2218.548431][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2218.554173][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.976735][ C0] net_ratelimit: 26 callbacks suppressed [ 2223.982436][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.988207][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2223.994025][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2223.999772][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2224.456703][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2224.462658][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2224.776727][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2224.782559][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2224.788472][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2224.794352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2230.216738][ C0] net_ratelimit: 26 callbacks suppressed [ 2230.222459][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2230.228310][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2230.234174][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2230.240061][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2230.696673][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2230.702470][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2231.016711][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2231.022496][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2231.028352][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2231.034096][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2236.456732][ C0] net_ratelimit: 26 callbacks suppressed [ 2236.462494][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2236.468365][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2236.474207][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2236.479953][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2236.936683][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2236.942482][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2237.256710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2237.262506][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2237.268422][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2237.274191][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2242.696755][ C0] net_ratelimit: 26 callbacks suppressed [ 2242.702511][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2242.708477][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2242.714344][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2242.720106][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2243.176730][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2243.182513][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2243.496695][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2243.502494][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2243.508429][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2243.514227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2248.936671][ C0] net_ratelimit: 26 callbacks suppressed [ 2248.936677][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2248.948327][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2248.954120][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2248.959907][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2249.416690][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2249.422629][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2249.736664][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2249.742437][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2249.748291][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2249.754075][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2255.176721][ C0] net_ratelimit: 26 callbacks suppressed [ 2255.182572][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2255.188381][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2255.194194][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2255.199984][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2255.656723][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2255.662680][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2255.976670][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2255.982623][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2255.988495][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2255.994278][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2261.416706][ C0] net_ratelimit: 26 callbacks suppressed [ 2261.422397][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2261.428251][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2261.434162][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2261.440012][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2261.896734][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2261.902586][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2262.216794][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2262.222703][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2262.228631][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2262.234457][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2267.656831][ C0] net_ratelimit: 26 callbacks suppressed [ 2267.662665][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2267.668502][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2267.674447][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2267.680283][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2268.136722][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2268.142560][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2268.456710][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2268.462602][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2268.468843][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2268.474648][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2273.896721][ C0] net_ratelimit: 26 callbacks suppressed [ 2273.902574][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2273.908417][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2273.914398][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2273.920226][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2274.376707][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2274.382642][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2274.696700][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2274.702623][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2274.708588][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2274.714362][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2280.136730][ C0] net_ratelimit: 26 callbacks suppressed [ 2280.142431][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2280.148587][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2280.154544][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2280.160439][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2280.616672][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2280.622445][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2280.936708][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2280.942510][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2280.948411][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2280.954304][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.376738][ C0] net_ratelimit: 26 callbacks suppressed [ 2286.382645][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.388513][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.394392][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.400164][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2286.856658][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2286.862509][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2287.176726][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2287.182617][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2287.188581][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2287.194366][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.616758][ C0] net_ratelimit: 26 callbacks suppressed [ 2292.622516][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.628455][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2292.634319][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2292.640126][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2293.096654][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2293.102474][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2293.416750][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2293.422556][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2293.428479][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2293.434352][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2298.856692][ C0] net_ratelimit: 26 callbacks suppressed [ 2298.862477][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2298.868422][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2298.879381][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2298.885156][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2299.336727][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2299.342511][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2299.656690][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2299.662619][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2299.668464][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2299.674340][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2305.096779][ C0] net_ratelimit: 26 callbacks suppressed [ 2305.103589][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2305.110192][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2305.117247][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2305.124178][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2305.576739][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2305.583851][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2305.896755][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2305.903642][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2305.910969][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2305.917655][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2311.336711][ C0] net_ratelimit: 26 callbacks suppressed [ 2311.342395][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2311.348207][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2311.354080][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2311.359880][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2311.816678][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2311.822619][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2312.136712][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2312.142804][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2312.148847][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2312.154620][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.576754][ C0] net_ratelimit: 26 callbacks suppressed [ 2317.582580][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.588386][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2317.594198][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2317.600168][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2318.056671][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2318.062501][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2318.376695][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2318.382519][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2318.388442][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2318.394206][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.816716][ C0] net_ratelimit: 26 callbacks suppressed [ 2323.822410][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.828212][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2323.834185][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2323.839987][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2324.296699][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2324.302610][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2324.616724][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2324.622537][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2324.628535][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2324.639035][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2330.056795][ C0] net_ratelimit: 26 callbacks suppressed [ 2330.056802][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2330.069664][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2330.076061][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2330.082545][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2330.536710][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2330.542788][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2330.856765][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2330.863587][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2330.870746][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2330.876997][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2332.216997][ T1044] INFO: task syz-executor.5:7856 blocked for more than 143 seconds. [ 2332.225355][ T1044] Not tainted 5.1.0-rc5-next-20190416 #26 [ 2332.233156][ T1044] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2332.242692][ T1044] syz-executor.5 D24176 7856 1 0x00000004 [ 2332.249275][ T1044] Call Trace: [ 2332.252765][ T1044] __schedule+0x813/0x1cc0 [ 2332.257455][ T1044] ? __sched_text_start+0x8/0x8 [ 2332.262496][ T1044] ? mark_held_locks+0xa4/0xf0 [ 2332.267521][ T1044] ? _raw_spin_unlock_irq+0x28/0x90 [ 2332.272836][ T1044] ? wait_on_page_bit_common+0x4cc/0xd00 [ 2332.278590][ T1044] ? _raw_spin_unlock_irq+0x28/0x90 [ 2332.283839][ T1044] schedule+0x92/0x180 [ 2332.288143][ T1044] io_schedule+0x1c/0x70 [ 2332.292451][ T1044] wait_on_page_bit_common+0x518/0xd00 [ 2332.297977][ T1044] ? replace_page_cache_page+0xe30/0xe30 [ 2332.303622][ T1044] ? add_to_page_cache_lru+0x760/0x760 [ 2332.309185][ T1044] ? pagevec_lookup_range_tag+0x40/0x80 [ 2332.314919][ T1044] __filemap_fdatawait_range+0x3ec/0x530 [ 2332.321425][ T1044] ? wait_on_page_bit_common+0xd00/0xd00 [ 2332.327137][ T1044] ? sync_inodes_sb+0x651/0xae0 [ 2332.331992][ T1044] ? sync_inodes_sb+0x687/0xae0 [ 2332.336928][ T1044] ? lock_downgrade+0x880/0x880 [ 2332.341849][ T1044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2332.348165][ T1044] filemap_fdatawait_keep_errors+0x2d/0xd0 [ 2332.353980][ T1044] sync_inodes_sb+0x6b6/0xae0 [ 2332.359146][ T1044] ? try_to_writeback_inodes_sb+0x70/0x70 [ 2332.364857][ T1044] ? filemap_flush+0x24/0x30 [ 2332.369524][ T1044] sync_filesystem+0x16a/0x270 [ 2332.374350][ T1044] generic_shutdown_super+0x75/0x370 [ 2332.379738][ T1044] kill_block_super+0xa0/0x100 [ 2332.384495][ T1044] deactivate_locked_super+0x9a/0x100 [ 2332.389920][ T1044] deactivate_super+0x1b2/0x1d0 [ 2332.394861][ T1044] ? mount_ns+0x1d0/0x1d0 [ 2332.399369][ T1044] ? dput+0x38/0x6a0 [ 2332.403292][ T1044] ? dput+0x1e6/0x6a0 [ 2332.407396][ T1044] cleanup_mnt+0xbf/0x160 [ 2332.411720][ T1044] __cleanup_mnt+0x16/0x20 [ 2332.416176][ T1044] task_work_run+0x14a/0x1c0 [ 2332.420890][ T1044] exit_to_usermode_loop+0x273/0x2c0 [ 2332.426216][ T1044] do_syscall_64+0x52d/0x610 [ 2332.430853][ T1044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2332.436784][ T1044] RIP: 0033:0x45b677 [ 2332.440669][ T1044] Code: d9 ff d0 48 8b 7c 24 30 48 8b 77 08 48 2b 74 24 28 64 48 89 3c 25 f8 ff ff ff 48 89 f4 89 44 24 18 c3 48 83 ec 40 48 83 e4 f0 <48> c7 44 24 30 00 00 00 00 48 89 54 24 28 48 89 df 48 89 d9 ff d0 [ 2332.460398][ T1044] RSP: 002b:00007fffdfa93298 EFLAGS: 00000206 ORIG_RAX: 00000000000000a6 [ 2332.468916][ T1044] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000045b677 [ 2332.476964][ T1044] RDX: 0000000000403270 RSI: 0000000000000002 RDI: 00007fffdfa93340 [ 2332.484934][ T1044] RBP: 0000000000000c3a R08: 0000000000000000 R09: 000000000000000b [ 2332.493375][ T1044] R10: 0000000000000005 R11: 0000000000000206 R12: 00007fffdfa943d0 [ 2332.501392][ T1044] R13: 0000000001151940 R14: 0000000000000000 R15: 00007fffdfa943d0 [ 2332.509562][ T1044] [ 2332.509562][ T1044] Showing all locks held in the system: [ 2332.517366][ T1044] 1 lock held by khungtaskd/1044: [ 2332.522382][ T1044] #0: 000000005d269eb8 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 2332.531780][ T1044] 2 locks held by rsyslogd/7717: [ 2332.536757][ T1044] #0: 00000000cab60e64 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 2332.545343][ T1044] #1: 00000000cae4baed (&rq->lock){-.-.}, at: __schedule+0x1f8/0x1cc0 [ 2332.553662][ T1044] 2 locks held by getty/7807: [ 2332.558357][ T1044] #0: 000000001212587e (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2332.567518][ T1044] #1: 00000000a49b0d57 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2332.577358][ T1044] 2 locks held by getty/7808: [ 2332.582027][ T1044] #0: 000000002d677d23 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2332.591015][ T1044] #1: 00000000c9cf56d8 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2332.600684][ T1044] 2 locks held by getty/7809: [ 2332.605343][ T1044] #0: 00000000587463fc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2332.614353][ T1044] #1: 00000000ed36769f (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2332.624516][ T1044] 2 locks held by getty/7810: [ 2332.629242][ T1044] #0: 0000000006ab5558 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2332.638277][ T1044] #1: 000000003ba1aaf9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2332.647916][ T1044] 2 locks held by getty/7811: [ 2332.652582][ T1044] #0: 00000000415c11a5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2332.661965][ T1044] #1: 00000000ee3b3494 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2332.671577][ T1044] 2 locks held by getty/7812: [ 2332.676231][ T1044] #0: 00000000e372a3ea (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2332.685217][ T1044] #1: 00000000b871a9ed (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2332.694803][ T1044] 2 locks held by getty/7813: [ 2332.699505][ T1044] #0: 000000007bfa9a24 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 2332.708468][ T1044] #1: 00000000b93361b3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 2332.718098][ T1044] 2 locks held by syz-executor.5/7856: [ 2332.723541][ T1044] #0: 0000000001089787 (&type->s_umount_key#68){++++}, at: deactivate_super+0x1aa/0x1d0 [ 2332.733410][ T1044] #1: 00000000939c8c2a (&s->s_sync_lock){+.+.}, at: sync_inodes_sb+0x22d/0xae0 [ 2332.742521][ T1044] [ 2332.744834][ T1044] ============================================= [ 2332.744834][ T1044] [ 2332.753691][ T1044] NMI backtrace for cpu 1 [ 2332.758052][ T1044] CPU: 1 PID: 1044 Comm: khungtaskd Not tainted 5.1.0-rc5-next-20190416 #26 [ 2332.766707][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2332.776807][ T1044] Call Trace: [ 2332.780160][ T1044] dump_stack+0x172/0x1f0 [ 2332.784486][ T1044] nmi_cpu_backtrace.cold+0x63/0xa4 [ 2332.789722][ T1044] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 2332.795339][ T1044] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 2332.801306][ T1044] arch_trigger_cpumask_backtrace+0x14/0x20 [ 2332.807178][ T1044] watchdog+0x9b7/0xec0 [ 2332.811385][ T1044] kthread+0x357/0x430 [ 2332.815539][ T1044] ? reset_hung_task_detector+0x30/0x30 [ 2332.821073][ T1044] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2332.827309][ T1044] ret_from_fork+0x3a/0x50 [ 2332.831906][ T1044] Sending NMI from CPU 1 to CPUs 0: [ 2332.837589][ C0] NMI backtrace for cpu 0 [ 2332.837595][ C0] CPU: 0 PID: 13841 Comm: kworker/u4:8 Not tainted 5.1.0-rc5-next-20190416 #26 [ 2332.837599][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2332.837602][ C0] Workqueue: bat_events batadv_nc_worker [ 2332.837606][ C0] RIP: 0010:__lock_acquire+0x35d/0x3fb0 [ 2332.837614][ C0] Code: 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 bb 10 00 00 41 8b 93 6c 08 00 00 49 8d 7a 24 31 c0 45 89 f9 85 d2 48 89 fa <0f> 95 c0 41 c1 e4 0f 44 01 e8 c1 e1 10 45 0f b7 e4 c1 e0 0d 81 e1 [ 2332.837617][ C0] RSP: 0018:ffff88808c557aa0 EFLAGS: 00000046 [ 2332.837622][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 2332.837625][ C0] RDX: ffff88808dd94ef4 RSI: 000000000000002b RDI: ffff88808dd94ef4 [ 2332.837629][ C0] RBP: ffff88808c557bd8 R08: 000000000000002b R09: 0000000000000000 [ 2332.837632][ C0] R10: ffff88808dd94ed0 R11: ffff88808dd94600 R12: 0000000000000000 [ 2332.837636][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2332.837639][ C0] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 2332.837642][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2332.837646][ C0] CR2: ffffffffff600400 CR3: 0000000094c98000 CR4: 00000000001406f0 [ 2332.837649][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2332.837652][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2332.837654][ C0] Call Trace: [ 2332.837656][ C0] ? mark_held_locks+0xf0/0xf0 [ 2332.837658][ C0] ? find_held_lock+0x35/0x130 [ 2332.837661][ C0] ? batadv_nc_process_nc_paths.part.0+0x24f/0x3c0 [ 2332.837663][ C0] ? __local_bh_enable_ip+0x15a/0x270 [ 2332.837665][ C0] lock_acquire+0x16f/0x3f0 [ 2332.837668][ C0] ? batadv_nc_process_nc_paths.part.0+0xab/0x3c0 [ 2332.837670][ C0] batadv_nc_process_nc_paths.part.0+0xe4/0x3c0 [ 2332.837673][ C0] ? batadv_nc_process_nc_paths.part.0+0xab/0x3c0 [ 2332.837676][ C0] ? batadv_nc_sniffed_purge+0x360/0x360 [ 2332.837678][ C0] batadv_nc_worker+0x550/0x760 [ 2332.837680][ C0] process_one_work+0x98e/0x1790 [ 2332.837682][ C0] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2332.837684][ C0] ? lock_acquire+0x16f/0x3f0 [ 2332.837686][ C0] worker_thread+0x98/0xe40 [ 2332.837688][ C0] ? trace_hardirqs_on+0x67/0x230 [ 2332.837690][ C0] kthread+0x357/0x430 [ 2332.837693][ C0] ? process_one_work+0x1790/0x1790 [ 2332.837695][ C0] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2332.837697][ C0] ret_from_fork+0x3a/0x50 [ 2332.838190][ T1044] Kernel panic - not syncing: hung_task: blocked tasks [ 2333.086791][ T1044] CPU: 1 PID: 1044 Comm: khungtaskd Not tainted 5.1.0-rc5-next-20190416 #26 [ 2333.095443][ T1044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2333.105482][ T1044] Call Trace: [ 2333.108765][ T1044] dump_stack+0x172/0x1f0 [ 2333.113136][ T1044] panic+0x2cb/0x72b [ 2333.117137][ T1044] ? __warn_printk+0xf3/0xf3 [ 2333.121711][ T1044] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2333.127501][ T1044] ? printk_safe_flush+0xf2/0x140 [ 2333.132517][ T1044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2333.138744][ T1044] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 2333.144365][ T1044] ? nmi_trigger_cpumask_backtrace+0x1a7/0x236 [ 2333.150645][ T1044] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 2333.156917][ T1044] watchdog+0x9c8/0xec0 [ 2333.161071][ T1044] kthread+0x357/0x430 [ 2333.165189][ T1044] ? reset_hung_task_detector+0x30/0x30 [ 2333.170780][ T1044] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2333.177146][ T1044] ret_from_fork+0x3a/0x50 [ 2333.182791][ T1044] Kernel Offset: disabled [ 2333.187229][ T1044] Rebooting in 86400 seconds..