sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffefff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:42 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 329.641867][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:42 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 329.668138][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:42 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000200)={0x3, @null, r3}) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') preadv(r4, &(0x7f00000017c0), 0x1ab, 0x500) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x400, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x1) sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r5, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x6b21}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x841) r6 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UI_SET_FFBIT(r6, 0x4004556b, 0x1c) r7 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000000100), 0x1) 18:29:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 329.708477][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 18:29:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) [ 329.842639][T25511] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 329.855777][T25511] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 329.878588][T25511] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:43 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 18:29:43 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) accept4$x25(r3, 0x0, &(0x7f0000000000), 0x100800) 18:29:43 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000040)={0x2, 0x56595559, 0x2, 0x3f, 0x3, @discrete={0x9, 0x80000000}}) r3 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) 18:29:43 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 330.203301][T25511] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 330.217644][T25511] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 330.237402][T25511] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffff7f, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:43 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 18:29:43 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 18:29:43 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:43 executing program 5: unshare(0x5e050000) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, r4, 0x1000, 0x9, 0xa4d2, 0xd567}) r5 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7f, 0x420000) write$binfmt_elf32(r5, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x9, 0x9, 0xa9, 0x80000000, 0x3, 0x3e, 0x3, 0x1fd, 0x38, 0x1d5, 0x0, 0x7, 0x20, 0x2, 0x100, 0x20a5, 0x9}, [{0x4, 0x0, 0x679, 0x100, 0x5, 0x9, 0xfd, 0x7fffffff}, {0x1, 0x10001, 0x100, 0x80000000, 0x20, 0x1, 0x9, 0x6}], "95078247bd5823e52f02d4f4135d53dddd5c16d7b4174ebaaeb63dfcc71e01fb48baca409fedc5e1958dcd02cbb214d26656145e35a3419ae4aae035d82761dd87c214bd2cd5a71d6c597c32afbed549ec4509307793549b878da074fa6935a44ba3b17813a785", [[], [], [], [], [], [], [], [], []]}, 0x9df) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:29:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:29:43 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 330.493289][T25640] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 330.500748][T25640] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 330.514979][T25640] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:43 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x800000}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "527d692cd8"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "3e992781a5"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8040) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:43 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) [ 330.694288][T25640] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 330.708695][T25640] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 330.735549][T25640] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:43 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:43 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r4, 0x0, r6) r7 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r7, 0x0, r9) r10 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r11 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r10, 0x0, r12) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000140)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}], {0x4, 0x1}, [{0x8, 0x5, r6}, {0x8, 0x6, r9}, {0x8, 0x5, r12}], {0x10, 0x7}}, 0x44, 0x2) 18:29:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffff80, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) 18:29:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 18:29:43 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents64(r1, &(0x7f0000000340)=""/243, 0xf3) unshare(0x40400) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x40008000000) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0, 0x17a]}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000100)={[0x7ff, 0x5, 0x8, 0x1, 0x7fff, 0xfffffffffffffffe, 0x6, 0x100000000, 0x9, 0x6, 0x4, 0xc23f, 0x9, 0x8000, 0x3a, 0x10000], 0x104001, 0x1000}) [ 330.966590][T25719] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) [ 330.995946][T25719] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:44 executing program 5: unshare(0x10000800) r0 = socket$inet(0x2b, 0x6, 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r1 = io_uring_setup(0x877, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x2, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='selinux#vmnet1vboxnet1em1-\x00', &(0x7f00000001c0)='trusted\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r5, 0x1) 18:29:44 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:44 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) 18:29:44 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 331.147546][T25719] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:44 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 331.466348][T25719] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 331.475637][T25719] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 331.496715][T25719] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffff97, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) 18:29:44 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r4, 0x3ff, 0x1, 0x10000}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000180)={r6}, &(0x7f00000001c0)=0x8) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SG_GET_RESERVED_SIZE(r7, 0x2272, &(0x7f0000000200)) 18:29:44 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:44 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0xffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r4], 0x3) r6 = gettid() ptrace$pokeuser(0x6, r6, 0x8ce, 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl(r7, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r7, &(0x7f0000000240)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0x48080}, 0x14) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r5, 0x111, 0x3, 0x0, 0x4) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x3) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r8 = dup2(r2, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r8, 0x1) 18:29:44 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) 18:29:44 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:44 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 331.794332][T25828] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:44 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) preadv(r3, &(0x7f00000017c0), 0x1ab, 0x500) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r4, 0x400, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x1) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8}, 0x4000000) socket$inet_icmp(0x2, 0x2, 0x1) [ 331.818390][T25828] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 18:29:44 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0xa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r4, 0x1) [ 331.911325][T25828] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 332.170946][T25828] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 332.178028][T25828] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 332.194693][T25828] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffffc9, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) 18:29:45 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:45 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:45 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:29:45 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) mlockall(0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:29:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) 18:29:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) [ 332.443301][T25928] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 332.452866][T25928] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:45 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000280)=[r8, 0xffffffffffffffff, r7], 0x3) getsockname$packet(r8, &(0x7f0000000180), &(0x7f00000001c0)=0x14) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r4], 0x3) getsockname$unix(r5, &(0x7f0000000000), &(0x7f0000000140)=0x6e) 18:29:45 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:45 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 332.492982][T25928] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) [ 332.823040][T25928] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 332.830002][T25928] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 332.847972][T25928] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfffffffd, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:46 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:29:46 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:29:46 executing program 0: unshare(0x70010d80) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:46 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0xc0000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) 18:29:46 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:29:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x1000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 18:29:46 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 333.233753][T26039] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 333.241689][T26039] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 333.264613][T26039] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:46 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[r1, r1, r0]}, 0xfffffffffffffefa) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:46 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:29:46 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:46 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIBMAP(r0, 0x1, &(0x7f00000015c0)=0xfffffffa) unshare(0x2000400) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x1, &(0x7f0000000040)={0x335d, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_tcp_int(r1, 0x6, 0x33, &(0x7f0000000000)=0x7, 0x4) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl(r3, 0x11f85623, &(0x7f00000005c0)="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") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000580)={0x0, 0x4, 0xb, 0x2, 0xa0, &(0x7f0000000180)="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"}) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100)=r4, 0x1) 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 333.442850][T26039] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 333.452558][T26039] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 333.488113][T26039] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 18:29:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 18:29:46 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:29:46 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, 0x0, r3) setfsgid(r3) 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 333.777034][T26125] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 18:29:46 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timerslack_ns\x00') r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) sendto$phonet(r3, &(0x7f0000000140)="931760c772265f4d7c1c747ec5957dcb2bb2b1c6d50d532704bb0b0a9f7b9569689dbcc191d529844aba98d47c8a75997e6356b0ef596c1b4805fc11da9455145280222da4ff11b665d4dbba", 0x4c, 0x8010, &(0x7f00000001c0)={0x23, 0x20, 0x3, 0x2}, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x5, 0x4) unshare(0x2000400) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, &(0x7f0000000100)=r6, 0x1) [ 333.803948][T26125] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 333.887131][T26125] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:46 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 18:29:47 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_setup(0x4, &(0x7f0000000000)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000100)={0x77359400}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) 18:29:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) [ 334.129457][T26125] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 334.153938][T26125] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 334.200711][T26125] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) 18:29:47 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:29:47 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/sockstat\x00') ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x24008806, &(0x7f0000000280)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) r7 = dup2(r6, r6) connect$unix(r7, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) r8 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r8, 0x1) 18:29:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) 18:29:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 18:29:47 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:47 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = accept(r2, &(0x7f0000000000)=@in={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x80) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000180)={r5, 0x3}, 0x8) r7 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r7, 0x1) 18:29:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) [ 334.499110][T26248] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 334.508215][T26248] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 334.544724][T26248] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 334.783923][T26248] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 334.803076][T26248] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 334.839934][T26248] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:48 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x200000, 0x1f, {0x77359400}, {0x2, 0x8, 0x2f, 0x81, 0x1f, 0x59, "29e2254c"}, 0x0, 0x3, @offset=0x9, 0x7, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0x1, 0x4fd, 0x1bb3, 0x1b4}}) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r1], 0x3) connect$caif(r3, &(0x7f0000000000)=@dgm={0x25, 0x401, 0x1}, 0x18) unshare(0x2000400) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 18:29:48 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:29:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x90000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:48 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 18:29:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) [ 335.197522][T26337] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 335.206038][T26337] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) [ 335.259715][T26337] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) 18:29:48 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:29:48 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = semget$private(0x0, 0x7, 0x0) semtimedop(r1, &(0x7f0000000640)=[{}, {}], 0x1a5, &(0x7f0000efe000)={0x2000}) semctl$IPC_INFO(r1, 0x0, 0x3, &(0x7f0000000100)=""/222) 18:29:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) [ 335.623039][T26337] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 335.644623][T26337] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:48 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) [ 335.745415][T26337] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:48 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:29:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x100000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:48 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x1a4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x200}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 18:29:49 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:29:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 18:29:49 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 336.101773][T26446] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 336.116598][T26446] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 336.128286][T26446] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 18:29:49 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:49 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x8}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x3}, @sack_perm, @window={0x3, 0x7, 0xfff9}], 0x3) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:49 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 18:29:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x200000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:49 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) exit_group(0x7) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:49 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 18:29:49 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:49 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x2c, 0x4, 0x100) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) fcntl$setown(r2, 0x8, r3) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) 18:29:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 336.582455][T26506] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 336.597898][T26506] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 336.684362][T26506] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:49 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 18:29:49 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:49 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) [ 336.987894][T26506] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 337.027178][T26506] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 337.094116][T26506] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x204000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:50 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) [ 337.376306][T26587] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 337.382940][T26587] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 337.393547][T26587] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) 18:29:50 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:50 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) [ 337.572950][T26587] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 337.581167][T26587] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:50 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 337.633584][T26587] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) 18:29:50 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x300000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 18:29:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) [ 338.027788][T26648] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 338.035759][T26648] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 338.046191][T26648] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:51 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:51 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) [ 338.252749][T26648] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 338.260924][T26648] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 338.272821][T26648] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) 18:29:51 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) 18:29:51 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 338.556450][T26707] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 338.591794][T26707] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:51 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:51 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 338.681412][T26707] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 18:29:51 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:51 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x20}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, r2, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x16}}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000080}, 0x80) socket$inet_icmp(0x2, 0x2, 0x1) [ 338.924350][T26707] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 338.934174][T26707] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 338.957766][T26707] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 18:29:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x402000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:52 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 18:29:52 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 339.205639][T26784] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:52 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 339.228324][T26784] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) [ 339.313323][T26784] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:52 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:52 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d6"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) [ 339.598371][T26784] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) [ 339.620265][T26784] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:52 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:52 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d6"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 339.677662][T26784] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x500000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:52 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) 18:29:52 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d6"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) 18:29:53 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 339.997552][T26886] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:53 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000140)) 18:29:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) [ 340.037346][T26886] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:53 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 340.113532][T26886] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) 18:29:53 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:53 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 340.445071][T26886] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 340.457772][T26886] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 340.501313][T26886] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x600000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:53 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket(0x8, 0x6, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={r4, 0xa, 0x0, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3}, 0x20) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000000)=""/22, 0x16}, &(0x7f0000000040), 0x11}, 0x20) 18:29:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 18:29:53 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d26547"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:53 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d26547"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) 18:29:53 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:53 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d26547"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) 18:29:53 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 340.908811][T26985] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 340.918555][T26985] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:54 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x34, 0x3, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x2400c804) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$DRM_IOCTL_AGP_RELEASE(r5, 0x6431) 18:29:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) [ 341.011011][T26985] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 341.283137][T26985] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 341.303622][T26985] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 341.338243][T26985] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:54 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x604000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 18:29:54 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:54 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:54 executing program 0: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x40010, 0xffffffffffffffff, 0x100000000) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x1328, 0x14, 0x300, 0x70bd27, 0x25dfdbfd, {0x21, 0x9}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "e46d201e069f126c40b0679c505f980a7c76c5e726fcdea933e3b929ea66af4302122808e61d579d5bbee310a2f9181aec40d1157945b83dd9a3dd0ab2378ac262b000bb811dc32a131e3fe9f3b1371ba9119f177d91a2dabb695c519e946b77b7d36e1937387851a361d9d8fe80f16d11b3721730c9560df070e7548d025ef689336bd523ce00ab42afe581147069cdc28cf39fe2a22e35436530d865641f66e2faab9fca941faec7bc0f50172f355b42feec8a8cb0e059806e0e531937f4eab16cc0f08065b3738939da96557acfc948c96a7cf85bb1a020dfc2db22b0644a9113084ee2717f06ec562ac47ec236ae87944f058b8f43d20b7892e341ad5f3494edfbabd8eeeea1525052e45198529e7a71ed0736ad646ecc2222aa051da95aad1e5098726facd034733f9197b794e05d3a23fd5e452248a902a14281d503d326af6fb8b71cb306895e27fc98f37ed18ae28dd2b14c1cd504c8aae059e3c0d92b060457a3fed325adf2c69a0686f490fac573f9936daf27ded7e6957770ae83a73c2d8fcf5ce425e620104c26ab4de5a2cfd7622f62dc074588abfe5538cd96978242d18091ce0f35ac7fdc4a4645a02555bcd2cdc877e1b9fd8d5621b6736d0eb23fbbc5f4d407941a079f5522f77959f97556d4dfcd694dd14d6c9579b9249b080f7def3f3102922f657f400e5e4df272b0320928e54ab783d3366eb904a80ea14f947caa450ff13a3f7c1bd6cd02e41e09d572b6fb73e9e0867a9116ffefc0333784f28659c4439ac6ff651280e78680fc01e5e83196cbdbf9a5110c7c72b0f837e5e4f327630133ed0d99e4892c5f1db5b89d4c6f4e4ecdde0390ed78623eab009472c3b85d866b65fb3ff1ed3d50f0ed2a5481a80609661bb100b6c9f7a322cd5916ea0b0ae5c1e8898e8f8b9bc47852a6d58799bec9c42ac383b16db095a38a587ff38cf02585729fb08c5477a83699bf62236b8a7991fe1d71b6befd73936ef30b45191b4393d68cd61324842080c970841b01c5777c6e94a1b31980acc5cf9825d48a0f18325262dcff467bb08fa8f2201d757567c307cae4607541489e117bc629d7ad06c6d3eb66a41547a7fa2bdc455d04c57dff8e59b30fc07f6ea50e893a262985acc377dbf460e047b92baf2fdfa32779a30675e9afc95c12fa8fcfde7264ef1decf5a0776847bb0306fffec27427c632dc93172fbaf9191d1a5ac98da68cedc29ea1b12f9ce28bf2d42bb23742d632847fa8156a19e84c9b5ba089609a0052dc7948f7b36895962632c61f2c9f3933b40d8704695e9263b14a343109c2888e221cf0c0c3b70282f89223763ba49bc891b9d065cb837066807dac8e3cbe3549187c3f2b05a46646b8c2e78c0161ba6df7f32a284efd8597cbc14d0f99cc6941e8e588c8953fef99bc508427fefa02dbd098c331a89aaa96defef3602983ef2daa21e7a051102a019a960571de433e0b90ab941df5a1d91123f9e6b5f1d01a6499e0849ee37cab891a78e3fbe268078f7656fa300c55ad857b50c9a89f6f11a6baa90886b6f80e174f84abc1d80758aea6a0c02c0f316df0c9a556947b6dba37b76d1b0f320587fcfd3b232f3b44a2ffd7a3251b43469bd24c250bafa5bd9b9b761f45a87b7c99cfd21b57a16e48cb961db872ed08c0e407471f69ac0320c69c34e8fb949e4ee7bfc2cf00ecce5632d6ddf0fbf450b02f65c0a393b8e8ff5cf84efc1ecba4bd71adb7706bd7e2bd663b527f97f02cbb6e5de9da9041a3ec6cc552b9dbb3b7de88205b4413f3e42165270bad0f4c4c46ac9f2e60dadca7f187f201550a63e135ef213e1597b2c24cef79a63c20051107ce27752e04f97c245d594e248220f308c55e32a3c3563a0dd2dfdc154f194097962c36df477c20b7f317a7a9a95c0c0b9c29360af9bbc9bce4860e7db0d26b176d4f5fee96278802de05b46d74ab92b346b498c4d132dad8727fb4b7fb75c342c5076ba349ad6a616d28ab9b1a0010a426e38b77d53b8f48e4153e7d952f5744d9acca61ea3614d238e8831258ea56507be80d461d2b212be6f979c8002a4f976705d91d988e935a44f5757fa22a90333b2139eb56cafabf32e178f71289e48d090c0857f9cb71e30f43b59a774b59c152958fb0fabce0dc1f21d3d9bd45114a413a6b90751cb66daf8844fb6ed2034ec8a53252d6168043ba19abd1bad6e6529c6f9eeba3d370f89608f5e56825a9774e86ea5cbb055a3791554c794cd01d799f91207fb35d23a34fbbc565dee4582f30527cba0746772293c3af6bdb52f7b7a17a27296b223fb8ea8fa8f51d02e3951808e5655f756ac60d6fb0488a694c6cc569ae7e7ac302f43d0b603955dff16ecbdf7f4f9e2c1671f1e47ea6cc2656be29a233542074aaa0ef9ebe47044b27665b29317623c33d6d81de89443f671bc341458e64db9899db629d6695d8332fd6946540fd4dd3d2365a1c989a9be5712c058747459bfb88965aa900be9f8d067e5cdc2860f968143c7a2cfb2888800b3ec999b4f85dfedca679540ace6e5c94f90904096c7d4473e8448d783ff0be8332b48949c50abf15dd3b0915ca9c5e93570053e009c28691d734e8878dd694e117d538617a9d5ef1c6fde40e282c04aea69afbd53373987e88cb5a68d5b22a2a05cf5fb35696ae37ff159418bacebd87e6d8e08fbfdc2e6f2e3290ccc8fa2e0ab1bc8d36ea5edc9ac81f5c9332697e7111caf70c72d5b4d0d5d41921af529676879a01bfc7cbbfe30989998d2802d832f2e860ad2d10e9318f26fe1b6f1a6f6295b6bb17c79dabc51c72354bfdefd11b6178d9095f96b5710b5b1754620a9c75f5ddff088aaab735405e06b7b29bab89970f91ff1d802a446cab992696edf7d2df2a273d13960e3a4c25fe3f5412dfd08726d6e0d2247e29c39ff21d0af9bdf4fbfee221a1fb119fb7deba0c1a6a81f2bf54ed759f90047f47bfb300275381eb9c6309aadad53469a11aea83fed9305633ad64e95b367d3a11e8d0becc6d3e4ef0e0068c4b5029062d100f56d7a8b579f3aa02b1896c17f1f218c065d390b40f245677cb33934d260537287634eda4a65938a6e9f1efb8132c1d6cd5e00387f711a2ea77c0cff8581f90997fff93abc6a6da17bcc60d43e277cc3804697af98fd36c108a184f4fa21b1fcef43972fd047b9d9c21763d0872d38b237ed5673b3de1ca2658832299a9ae16bb51aa41fc0a41d45d4ea7b6c1282624ddac83d8f16ab33a43e61f922aca340b69e12be1145e2e085b9e61d7d37bbb2baf427ebc2ea212ccb43abb6abd5a8c610687f53d289488603fe06e74cd47f9d37655a8ffdbadf8479c32109b199adaf0c072a0b559ff48788c69a442ea70e4ce15120b7ee46e1fcd615d465a1324b466f29f2d28023857f4e972098fc3124abb894e46952be82d7cf3c7bb4982f52dfb2e8a0231230c107737818eba25245aeebeb54dc9cebc7b929921874fe17f11102c9401e4b12d910d781eea584d81237af96e312abeb096068d6d53744542f70be5f3d22602e068b4fccf6647bf7ed4aceb96ef677dafc108d4867f52d7d0912f1f56e853d84d08d8d7982e38f36e7ec8376ba441b884a54393241a679acab2bfb205ae5c0ae45213e870f608c3b9f13227d9fb9a44aa14e91f233c0c9df0eef176ac3150d78f1aebd514d170dcc9b6a4b5699291b31d728769c98b26aa0da5ff8b28f1548973bc8a46bab23bdf85457317565f9787392a70b69f00b27c3696e20d6a25ea4f6b94f6ad3482c584d6c3a684fd98ea1dfd363a168a6d1b2f7bf005c8a3b8c788ea3d1bf19358bfc8cab5e1fc56de841dc07019221156c223c63e4571bc8e7d1f0269df7bf557048af367e1cff9024033a10d9899c36f145e7b9232d0d016e7a3b15b98b717da6b66375bb871b88387362637df7f2f63b36dc5b5fc222084930dd6e768f2c676386603eefe04ff5a6f4beaf0f3509868279012ff174737fe4f075f5ebcff5a325d491197eac41b80a8ecde51629d00c046abdfd8c026604bf99fbf47b10b9660447e707b11704c136d8eb85a414359366a1a8adf71f560ab8e9cf5f2d0d610804c4fd13283ac0f01e3be3cadff70654cdd051491af55423874f5b541860e1777d42d386145248c26538d61384931699e401f1037ca2e793bc07fa55e761a84ff3b62294e675a70a394748031da4e022e715aa2bb75539c0b37836639fc83c6534033079454577c3a73eb3ed0cb3dc24f6b283e5a5a80fc2204788a96f70ba3533226a9361b81176641d0d12e4e6072615d609333894374eaa793469e6e600ee988d8c8b374b26fe9535088698189791658b777141b9206e40b9dddf768123af0b5a8b38df9867961bdff9d65ec2a52ce77a0411d7cde9742838954924d32044780c57f8bc45715c8c8a861c81c388ae83815109f9b68589fecbb979132da71912ad8995317dd99a16312423886f4f0771b160191e4895b6b0cc7104f9570676e0f97f746b98850dd7c1e0a9f61a94a2414c41b2ad8f155ddfee3a84c0d5d02da7b09d5b5ed34c00beedef12dc73fa6abaa490829da904bc42c07310a7794013d0ef7a016d2cbb2339371aed6ef9c8478d077c9eaa1bf7d6789de80347dffbf87d341ece5de5718e73f01aec5ac8279be82ae17afffbf3adfef2c0eec20e2b832292716752fdf21f808670360c07fb7d10d4e160d243041ec0956ba68e477e17ea04b1f58e414944618adab75912c814e4f313be65ec99d61056e5a361c0405bd35affbfa8e35621e78aac034127d95b7b5457b7caee4dba9d69f8fc9bbe2aec24f3b040ea49ac2c8ead7ab8ae1ca4299223cd7b09a4edbe9a9c271ff37e0264dc12daeec5500090358eb1873ed9630ad19ef70b76d19d4497d3c66bcaaf80a8fa384402d9a2405c36bb63eea9067946cf405e847aa4edf4ea8e3d0c103d8c0f2fa7b7b8bd5e9912e8269b5317bdce0de432289506c1504272948b234e5071358a609d90e0e2ee5d1f5eb16c965e79effa7e479b7135892d967e56024e03182b421acfc7e096f63ce53705de83b22102a8dcce28bc8cbeb597c6ea000e486d3f80415e26b65a16bb4d7482685a5a7c74ca7dfa579d9e03799bea243a2803480b475f96756677530de31d69da9968f65621ec8e2853d032009b2bf482f9521671d8f7ef8ef2e1dce2ff95f08115335f8077ac6501fa1aa7fce66c7ce149c1cbbf841d5cad13714af98e947275d298aaf9eed024a2bcaec428d8dad7e66a5f1deb073997a340f83e29df2de0582f435e042a5b424db95f3c4f27e024870c402f9be458d59002444f04261ea1b57b6f44fdc09fb0c601430559ef693b84ba1e24bf0753a6942d9bcf3804533e714de302c271dc133b100640ce3b49d37242768c119097c9967ebd46380b75912276486dc2cfe29d5d70e55348fd6857bd47c3c5f1f212de3b5577bfe7eca2a44909c68ffa470ceff842ae309f593577da485652e9b8e93c584d0f2c8769a6d68f025f9f303628da86716a154200a3fc3bd8b4ec18f89343d11655efb2871b61f09af4df2746ba68b1d20700ad885b3c7ed8834b498529a1f343435f0977c113d5f401d6b0b297cbc289ad475b407437d44622f47e44de9fcd9602c0bba374ee291e33aa894f6ee162819eb2cb83d82a8c064a3f8307ea9c2c87658bcafc9298d2a3b079b1bfb1d3ef44e002d9905d2e95337dd421109b7e762601e34ad8a0e06a5e2d29065dfe6f2d65cad0670bdabf0920ce8bfd0ac5defcdd60627779af287c88cbcd4"}, @INET_DIAG_REQ_BYTECODE={0xb9, 0x1, "ca220b64881a16002578d6a87ab5aac0a084b7f98cb6f6b15d1aa241aa7e4fca5ba228c77d5f2a98b0c1a5ad49dc0eb310b4fee0aa21e28b2365d57f084bd8dc63cb2f5bfb914821a7ae14af5f0bb2d67970a8906828fedf9c784f5b6cc006dc50b7779711b604908345f78a4e12f1be8c24e220ac396d9450815b78f814f9156bceae3ac0b4bd94c1d1e00591d3239dcbb3a78ba5ed13d3c79166ad2f6e3adc8136be7a807d77b24a583812efde4546e71a261746"}, @INET_DIAG_REQ_BYTECODE={0x76, 0x1, "f7cec86373f5262277983e2946f600ddf1c6ee7608fe9916e12c3013dde67b301454e2b24fa3acc25b0875ac96c18303fe5a1a02593e4af94ec22de4c7ed2b6584d13885c19af8a67ae3634cca857b194378f2e989a50d83f580dfd10a500182d2b5dacadb153f7a4bb1d757d9fc4d90ddab"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "5cae913d5ac5d8df67e0fbdc72bff3699c18cf494a4c3d6e52196f36ac3fe483886e23f6cffed4ac3e84361a070b09462d0b3ca53a3fbb9a7d3f211881dbcf82a2dca2536d8f27b5c58ad23dd4c781b83a9d50bed3c3eb10ef3d7de4ebdde2691ba3b0dab687c4346dadf8eac5f2ebbee74e62796195571b9beb40d398d7aaa7749a892dc4a5bfc4df9e0cfeb551bfa0dadf331c2faaf5fd0d1702fd99638da234b4f77e47b2022959adee884a7eb2a05a5e70924225cac819112e43df5a5ee4103d9958e73f5679f1148333ed86f7877bf7839288bf1ea90e479aafdd7e4ac1d0070d9e5466a1"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "b73f1256dfd317ae4d610b39ba173be810c3c9895157ba2a69622d76d0814905132d99934c419e251a95843c56aed2e29a368e5c24e05b051f025d60165e2401cf4b480ca384231c47d57d26f32ff6bb8cc302d2e302ee0255e1fd44fb8eeb74230396ff01063a042f35d4ffa298854d89c662625c80dce238986b183a165948b60d3e65adebd281659c73937960cf63359a7b260f4d4215dae4b3875bf11d24504f41b92b9e1ab00a9c4912f28fcb8ad933df4d144cc86cb1066ef6211017686812c862e9718c3f199207bb2dd18b54fe253e464871445ad38c77f7884b0ac41518d8648eb54ba23f"}]}, 0x1328}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 341.604737][T27055] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:54 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 341.626662][T27055] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) [ 341.733434][T27055] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:54 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:54 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000100)={0xa00000, 0x5, 0x3, r0, 0x0, &(0x7f0000000040)={0x400da, 0x2cf, [], @p_u8=&(0x7f0000000000)=0x20}}) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000380)={0x3, 0x0, [{}, {}, {}]}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x6, {{0xa, 0x65b2, 0x9, @remote, 0xffffffff}}}, 0x88) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000340)=0x14) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 18:29:55 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 342.092932][T27055] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 342.100884][T27055] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 342.125728][T27055] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x700000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:55 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 18:29:55 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 18:29:55 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 342.382766][T27136] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 342.393864][T27136] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:55 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) [ 342.468780][T27136] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:55 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) [ 342.802471][T27136] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:55 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 342.825224][T27136] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:55 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 342.879897][T27136] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) 18:29:56 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 343.196278][T27214] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 343.207921][T27214] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:56 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) [ 343.241607][T27214] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:56 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) 18:29:56 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 343.426993][T27214] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 343.439868][T27214] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 343.459541][T27214] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) 18:29:56 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x900000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) 18:29:56 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:56 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020114000100", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) [ 343.704956][T27274] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 343.713005][T27274] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 343.756311][T27274] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:56 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020114000100", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 18:29:56 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:57 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020114000100", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) [ 344.034134][T27274] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:57 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000201140001000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) [ 344.083518][T27274] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 344.120390][T27274] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xa00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) 18:29:57 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000201140001000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 344.311624][T27334] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 344.324012][T27334] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 344.398633][T27334] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 18:29:57 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:57 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000201140001000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:29:57 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020114000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:57 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) getsockopt$packet_int(r3, 0x107, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = fsopen(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB="c294e48026a65f79f29bf62ceb"]) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r5) r6 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x289840, &(0x7f0000001680)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="e6afeed71f859e3baaa26534ddee08d3c3695d11b714e11ce5c8341bcf6d94940000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRESDEC=r6, @ANYRES64, @ANYRES32=r2, @ANYRESDEC], @ANYRESDEC, @ANYBLOB="1193dd03fedd820bfa583f3c900cd39e8637b2c8308fd9683e4c932c8e4efbf69cc9ee5a9bce673ca18f10bd0cbc17730435446ef9c486c70c5042e69197442d3908e9865bd6113b27351965212ee60b700de2541b96d450afcc66c902b7e31ed4774ffe41d9a65c7ef76170b6abfb1809e70f6ecec267d91b401e2a24905fc2253faeff545aa5e3fcd13e21e43db80610f84deb0082758b95688d40c3eebbd1b71e1b0afa1a4440ba0842bb0f8c1003", @ANYRESOCT=r5, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYRES32=r3, @ANYRES16]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000140)}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 344.682161][T27334] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 344.705978][T27334] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 344.780808][T27334] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:57 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020114000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 18:29:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xb00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 18:29:58 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020114000100000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:58 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x1}) socket$inet_icmp(0x2, 0x2, 0x1) [ 345.058134][T27420] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:58 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 345.093864][T27420] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:58 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 345.165927][T27420] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 18:29:58 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 345.413457][T27420] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:58 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x9, @mcast1, 0x1}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x140b, 0x200, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/ipv6host\x00', 0x2, 0x0) [ 345.436277][T27420] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 345.511621][T27420] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:58 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 18:29:58 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = accept(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000001780)=0x80) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001800)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_LIST(r4, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xff9f, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4048000) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xbb4289e2ace48c41}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x24, r5, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000050) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r5, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r6, 0x1) 18:29:58 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 18:29:58 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:58 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) fcntl$setlease(r1, 0x400, 0x3) 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) [ 345.841316][T27537] loop4: p1 < > p2 p3 < p5 p6 > p4 18:29:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) [ 345.877479][T27537] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 345.949472][T27537] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:59 executing program 0: unshare(0x2000400) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2003, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000040)={0x1f, 0x4, 0xffffffe0, 0x9}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) [ 346.190376][T27537] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 346.200728][T27537] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 346.267627][T27537] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xd00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:29:59 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:29:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 18:29:59 executing program 3: unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:29:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) 18:29:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) [ 346.522498][T27627] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 346.532549][T27627] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 346.555345][T27627] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:59 executing program 3: unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:29:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 18:29:59 executing program 3: unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) [ 346.752229][T27627] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 346.763236][T27627] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 346.808371][T27627] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:29:59 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCSTI(r3, 0x5412, 0xbc4) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r5, @ANYBLOB="08000200ffffe5bf"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4108}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0xfffffffc, &(0x7f0000000140)=[0xffffffffffffffff, r1]}, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) 18:29:59 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) 18:30:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xe00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) 18:30:00 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 18:30:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) [ 347.238182][T27704] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 347.253776][T27704] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:00 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 347.353049][T27704] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:30:00 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 18:30:00 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 18:30:00 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 347.622183][T27704] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 347.641016][T27704] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:00 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:30:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 347.694537][T27704] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xf03000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:00 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 18:30:00 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:30:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 18:30:01 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x4}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:01 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[r0]}, 0x1) r1 = socket$inet6(0xa, 0xa, 0xfffffffe) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={[], [], @remote}}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ENABLE(r5, 0x40086432, &(0x7f0000000100)=0x3) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @ipv4={[], [], @rand_addr=0xffffffa4}, 0x8}, 0x1c) bind$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x302, 0x5, 0xfe, 0xf7, 0xae, @dev={[], 0x10}}, 0x10) dup(r1) socket$inet_icmp(0x2, 0x2, 0x1) [ 347.993292][T27792] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 348.031768][T27792] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:01 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:30:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 348.137834][T27792] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:01 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 18:30:01 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 348.433520][T27792] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 348.441737][T27792] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 348.519835][T27792] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x1000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:01 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:01 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 18:30:01 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:30:01 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 18:30:01 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="bfb4243e49668a08250fa9df8567f880d28853486443dc0a94616f3b26cdd38169897bc768fda399f6fa12232af418da42e7f1a4318d07e5a87b95f7b13b48b4d5c58089ac791297cc6771efcc36fd00c7a69868434f680f79fb57be6cc83b275f2ce1f1eabde5a2e60d66d4a93d805bb3fe670584c4", 0x76) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000100)=""/219) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0, 0x17a]}) ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 348.825855][T27884] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 348.842219][T27884] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:01 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 348.892908][T27884] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:02 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 18:30:02 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) [ 349.186224][T27884] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 349.200448][T27884] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 349.257604][T27884] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x1100000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:02 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 18:30:02 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:30:02 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x37, 0x22000) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x90) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r2, 0xffffffffffffffff, r1], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x418280, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r3, 0x8004500f, &(0x7f0000000200)) 18:30:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) 18:30:02 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:30:02 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 349.551706][T27973] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 349.564250][T27973] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) [ 349.629140][T27973] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:02 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000580)=0x6, 0x4) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r1, 0x0, r3) r4 = syz_open_dev$vcsu(&(0x7f0000000500)='/dev/vcsu#\x00', 0x3, 0xa000) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000540)=[r0, r2, r2], 0x3) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r5, 0x0, r7) r8 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)="a97c854637b357343e7151a9eeffa713d5b4fcfc776094f0a7edf9504f2b69254b1e69049b6344dc1bfe3fda3a11f22279b64dd6755cc7eb917c82b1909eb72dada361c8b3a53f682ba856193999282659593f6fdb4b6e57789ed1e1da6502c635d3b1597429b3e0fa36611aa7466d883499041083b7e70052aae80f2b1ae8c3ac47e979c3f6d9a34ae2170732bd609c404a9f0d69c982ffa1b0c1e30dd572ac39cd", 0xa2, r5) r9 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000340)="a2a90d45c3c6c850d21eef5226c1d805270b32be48536b85e517f16128235cccc2189af8432abe7d9fa6d7a2e030e00582a8e3fcb97a0f6a4594f390409325edd366e846664a222edc093e80cf85fd2de889b8d167a525c210cb5fb6ef0d578527e2965456248f8e65aa8ba49e8b611c7521a04e6a26cc1a3669ec5c4bcf5fa600602633daf5fe813780d75a6569652b9faea3a38bf81e59d193134058adf32ef5c412c2d1136d057a6542c1848c8991b83e0b8b0c76c7097f05e3395c43a944cc484a58e837a6338e3af54af4571667a63bb5df", 0xd4, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000240)={r1, r8, r9}, &(0x7f0000000440)=""/135, 0x87, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:02 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:30:02 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 349.879681][T27973] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 349.899010][T27973] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 349.937331][T27973] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x1200000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) 18:30:03 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:03 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:30:03 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x10000) rmdir(&(0x7f0000000100)='./file0\x00') ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) 18:30:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) 18:30:03 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 350.242621][T28051] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 350.259828][T28051] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 350.308252][T28051] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:03 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000140)) 18:30:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 18:30:03 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:03 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SCSI_IOCTL_TEST_UNIT_READY(0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x7af, 0x8, 0x4, 0x100, 0x3, {0x77359400}, {0x3, 0x2, 0x7f, 0xf7, 0x2, 0x9, "2cde2894"}, 0x6, 0x3, @offset, 0x6, 0x0, r1}) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000100)={0x1f, 0x5}) 18:30:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) [ 350.624791][T28051] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 350.652101][T28051] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 350.700704][T28051] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x1f00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:03 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000140)) 18:30:03 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) 18:30:03 executing program 0: unshare(0x2000400) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0xd1, 0x2, 0x8, 0x4, 0x0, 0x4, 0x84300, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd4, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x402, 0x8, 0x10001, 0x3, 0x7d, 0x6, 0x1}, r1, 0xe, 0xffffffffffffffff, 0xa) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000001c0)={r4, 0x8a, "57849a2a0ec280fd244b31ea865cf26361bfdf0bb91c69e26125a607c3654332ff3d3318826b0cbbfb94f088db103461d09fab0f11b2be540c988775857ba65351ebf8d60c1bd5586cfe5e5f03d4b6610ea30ede262fd8268330f87e532e2e96b5b1215ce527db1a4892c070b942355ba8e90514f068eac9768cd0f1fded2b26414b1ea4087815ed896c"}, &(0x7f0000000340)=0x92) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r6, &(0x7f00000003c0)=0x4) 18:30:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) 18:30:04 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/18, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:04 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETISPACE(r7, 0x8010500d, &(0x7f0000000140)) [ 351.062299][T28149] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 351.097727][T28149] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:04 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xa0400, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000100)={[{0x80000000, 0x2, 0x1, 0x20, 0x35, 0x4, 0x3, 0x3, 0x0, 0xff, 0x1, 0x3, 0x3}, {0x40000003, 0x1, 0x0, 0x6, 0x9, 0x8, 0x0, 0x9, 0x20, 0x8, 0x1, 0x3, 0x1}, {0x2, 0x401, 0x81, 0x3f, 0xd, 0x89, 0x34, 0x40, 0x5, 0x1, 0x5, 0xf8, 0x7fff}], 0x44}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 351.196986][T28149] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:04 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) 18:30:04 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) [ 351.412035][T28149] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 351.419533][T28149] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 351.475193][T28149] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 18:30:04 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r6, r6) 18:30:04 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:04 executing program 0: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x100) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000100)=0xc) unshare(0x2000400) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2, 0x40}, &(0x7f0000000400)=0x8) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x800) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5], 0x5) openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x8001) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 351.728368][T28224] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) [ 351.755071][T28224] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 351.819149][T28224] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:04 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:04 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 18:30:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 18:30:05 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) [ 352.071878][T28224] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 352.080134][T28224] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:05 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x62c, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0xffffffff}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000400)={'geneve0\x00', 0x8, 0x20}) accept4(r1, 0x0, &(0x7f0000000140), 0x800) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=0x0) r4 = gettid() close(0xffffffffffffffff) ptrace$setopts(0x4206, 0x0, 0x6, 0x0) listen(r1, 0x5) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r3, &(0x7f0000000100), 0x2, &(0x7f0000000340)) 18:30:05 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 352.123108][T28224] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2500000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 18:30:05 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0xae) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) [ 352.472093][T28313] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 352.480371][T28313] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 352.506458][T28313] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 18:30:05 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:05 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_submit(0x0, 0x8, &(0x7f0000002900)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x7f, r0, &(0x7f0000000100)="3f75da6cded53eef6bfe4e35322caa90ebb008612ce7a82b0255720cb57948a6f697f12df8c3a6a7b75c701c951d4d06e9aa9d02d31fe2a390c3b4d7881c10da3cd18f33b2595d752ed2408d894bf6659ad806ce5d2b2f355937e14abf06d56ef182793ad361663288416c481775423b1f2ef8c94f61c13b029436237c32cf996139d6c96db1a8d9fe45310c648769b6ecdaa5f1a55c143d086aa432794a9a006160613ffe23f7d4b014b0f275102b2c8b0070ccd9cf2cea1f0b89158ca562befa39bac9a3021c6908454c644bc46daa76f1ddc9b96c46781dbb3b7588a1", 0xde, 0xc3ec}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x7, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x2b, 0xffffffffffffffff, &(0x7f0000000400)="6a75658eec1a9c61cb98f44b793007d9d912f25bb97299c0a79dd514fe83766223e815f50534f121be5baf3bdcbc88d57baf6ef9fcba27fc8bed1d395a89fff4aa892fac1da00506182d4fb476b3ea01fb28380664d2c98c994b6d58cb6491814b61460cdd7b2ac619702e99fab78dbd6c4222f1feb9e88848781ed86492fe8a14604213a47c52851f1113d2446847024f0f3d3d62cdf7ff4ac4c5a68e45a8bb6e7fd2cd5c69b0a7e56e69cf5cd5bdda46b08e577594a7f5e9e79d321e347cf1c440849f17b9ab6d0fbb5bbe1b85c13ca1062b607b26cbe58c388a7e05efc6ffe0e41c2c6146c2dba6b80244f9a983a5f1b458", 0xf3, 0xbaf}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000540)="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", 0x1000, 0x8, 0x0, 0x3}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0xadf, 0xffffffffffffffff, &(0x7f0000001640)="6ce6912f33e639f396de06b1f0343cee3d671906741086979b4134deec9a918e3d9aa0d19664ce3ff937af32fcebcbd31c6d981ce69c646c126fc46fcec2f6d433ddf084940fb92910352f670e1aa5f2dc3645ced9e93c5acb945dbea43932d29bc1ff04", 0x64, 0x9, 0x0, 0x1, r1}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x5, 0x3f, r2, &(0x7f0000001700)="dccb02a863c21039e90b991bb856afc4acf56bbe09fc7243ee74d6a55e4f9a1145e9fdc5beed96e01e0ba4c7ecb908bfe5dc980cffde81f9c10060e9edfdba89d5b16d4861f5d534092933b5c81db65d58e56cbfa271f7f6c6439e0e69c1c55b5ada5efa197d774655a8ac911ee084a9c0272bf9a47d43609ea46b0d4e71eabbe88469f924712dc2cd2d08d6dfe8a483bbf9cfec87be047f856bfd4eb04eb25a053d19ddcc9b40b6b63423c8c379b8c55893510bab9f8b315abe719b9f9d88", 0xbf, 0x86a, 0x0, 0x1, r4}, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x1, 0xff, r0, &(0x7f0000001800)="53f8e32ef16c36ea19dd5b229c334cca5218aad88cf0df29df47b7fcd31707866a45f332169410ec4f83be34d6d5ddafcbe1e34957ce96a29a5a3aa83c440afd126724ac7940ecd5a5cd2f7ed84b1a31234e4da080", 0x55, 0x5, 0x0, 0x1, r6}, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x101, r7, &(0x7f00000018c0)="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", 0x1000, 0xfffffffffffffffb, 0x0, 0x1}]) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) [ 352.684374][T28313] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:05 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) [ 352.709901][T28313] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:05 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 352.787194][T28313] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2600000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) 18:30:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) 18:30:06 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe5, 0xe5, 0x7, [@var={0xd, 0x0, 0x0, 0xe, 0x1}, @datasec={0x3, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x5, 0x9}], "e6e1"}, @union={0x8, 0x4, 0x0, 0x5, 0x1, 0x9, [{0xa, 0x4, 0x47a1}, {0xe, 0x3, 0x5}, {0x7, 0x2, 0x8}, {0xd, 0x3, 0xfffffff7}]}, @fwd={0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x1, 0x1}, @datasec={0x6, 0x7, 0x0, 0xf, 0x3, [{0x2, 0x8, 0x14ac}, {0x3, 0x20}, {0x4, 0x0, 0x5}, {0x3, 0x7, 0x6}, {0x4, 0xb2d, 0x7fff}, {0x4, 0x4, 0xfffffffa}, {0x1, 0x0, 0x400}], "75afaf"}]}, {0x0, [0x0, 0x30, 0x0, 0x30, 0x30]}}, &(0x7f0000000000)=""/118, 0x107, 0x76}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x44c800, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:06 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 353.059870][T28394] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 353.070465][T28394] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) [ 353.132851][T28394] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:06 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:30:06 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 18:30:06 executing program 0: unshare(0x2000400) r0 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) r1 = socket$inet(0x2b, 0x1, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000004c0)={0x9, @remote}, &(0x7f0000000500)=0x12, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000540)={0x3, 'bridge0\x00', {0x1}, 0x7ff}) setsockopt$inet_group_source_req(r1, 0x0, 0x1, &(0x7f0000000580)={0x1000, {{0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x43}}}, {{0x2, 0xfffe, @remote}}}, 0x108) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x81, 0x1ff, 0x0, 0x361, 0x5}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000440)={r3, 0x4c25}, &(0x7f0000000480)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000001c0)={r5, 0xb2, "9d2fd0ef72aa1a9b68ab80189963abadfc64377c430362124d412f9abd964a9b9c642bb2a805a89d4c30eab210e896b39539e74d3b6b2077c844473f0c69ddae8d06a4d8196de57903c4858d3769c1f7585fe8e8d6f8fb35787d4410b9bc5fc1e1ff9106e6d7c60cc2af8ccb62afa75400faa162b1531f17133871fd77225bf91494752ed78df615e5de7b5658656d66714dab40dfb1fe61362b1340627f016e59c8abfa40c6333aed6651961911d9996afa"}, &(0x7f0000000340)=0xba) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x72, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="06004400bc286f0e32cab02843963ef7b1b666559e68963714bd7e8cb9fa469448c5d964ae2c22d834459f062fa841f3a3c1f17caa9fcc1ca83bc841a7b7a7d7302845c214d3e1d0fd35484ea84455fdf250c08bddbc5e8781907791e73767cc"], 0x4c) r8 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0xa, 0x2, 0x10000000}) io_uring_register$IORING_REGISTER_FILES(r8, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 353.392737][T28394] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 353.407533][T28394] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:06 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 353.497657][T28394] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:06 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x990000, 0xc0000000, 0xe1c8, r0, 0x0, &(0x7f0000000040)={0x9909de, 0x8001, [], @p_u8=&(0x7f0000000000)=0x3}}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2a02000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:06 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/168, 0xa8}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f0000000040)=""/47, 0x2f}], 0x3) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000200)={'raw\x00'}, &(0x7f0000000340)=0x54) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000003c0)={0xffffffff, 0xa, 0x4, 0x2000000, 0x7, {r4, r5/1000+10000}, {0x4, 0xc, 0x3, 0x81, 0x1, 0x20, "31c0a08f"}, 0x5, 0x2, @fd=r7, 0x3, 0x0, r1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r8, 0xc0a85320, &(0x7f0000000440)={{0x1b, 0x1}, 'port0\x00', 0x20, 0xc0444, 0x2, 0xffffff2b, 0x5, 0x4, 0x0, 0x0, 0x7, 0x3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) [ 353.772543][T28482] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 353.784387][T28482] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 353.797268][T28482] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:06 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) socket$inet_mptcp(0x2, 0x1, 0x106) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) [ 353.963489][T28482] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 353.983823][T28482] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 353.999678][T28482] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:07 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:07 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x74, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "c373146898"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "519ef7"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x1f5806}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) 18:30:07 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x2aaad48500000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 18:30:07 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x20, 0x0, 0x2468825185d9173d, 0x0, 0x0, {0x5}, [@NL80211_ATTR_WDEV={0xc, 0x116}]}, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:07 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x0, &(0x7f0000000000)={@broadcast, @empty}, 0x8) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000180)=[r4, 0xffffffffffffffff, r2], 0x3) ioctl$SIOCX25SENDCALLACCPT(r3, 0x89e9) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x6}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$l2tp6(0xa, 0x2, 0x73) socket$inet_icmp(0x2, 0x2, 0x1) [ 354.324107][T28564] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 354.339793][T28564] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 354.402333][T28564] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 18:30:07 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) [ 354.625296][T28564] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 354.636457][T28564] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 354.658462][T28564] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:07 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:07 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x3f00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 18:30:07 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:07 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr="0000000400"}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r4, 0xffffffffffffffff, r3], 0x3) accept4$x25(r4, &(0x7f0000000140)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr="d2b04e58f69a7067b831429442a28d65", 0xffffffff}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x50, &(0x7f0000000240)=0x80000001, 0x4) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 354.906309][T28649] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 354.938907][T28649] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 355.008938][T28649] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 18:30:08 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:08 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:30:08 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 355.410951][T28649] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 355.419057][T28649] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:08 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:08 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 355.513740][T28649] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 18:30:08 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) 18:30:08 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0xa, 0x0, 0x3}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockname(r3, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000180)=0x80) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r2], 0x3) getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) socket$inet_icmp(0x2, 0x2, 0x1) [ 355.776209][T28762] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 355.796070][T28762] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 355.835286][T28762] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:09 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 18:30:09 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x41a9e50b00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) 18:30:09 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 356.191917][T28817] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) [ 356.215704][T28817] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 356.275635][T28817] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) 18:30:09 executing program 0: unshare(0x2000400) r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000001000/0x1000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmdt(r1) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r4], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x9, &(0x7f00000002c0)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) 18:30:09 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:09 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) [ 356.571721][T28817] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:09 executing program 3: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 356.592265][T28817] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) [ 356.644346][T28817] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:09 executing program 3: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4403000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:09 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) 18:30:09 executing program 3: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:09 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000000)='cgroup\x00', 0x7) [ 356.932162][T28910] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:10 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 356.973395][T28910] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) [ 357.038682][T28910] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) 18:30:10 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 18:30:10 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:10 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 357.317765][T28910] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 357.354680][T28910] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 357.390494][T28910] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:10 executing program 3: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:10 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x3f9, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x34e}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:30:10 executing program 3: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:30:10 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f0000000000)={0xc4c0, 0xe, [{0x9, 0x1}, {0x5}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xf}, {0x3, 0x1}, {0xb}, {}, {0x4}, {0xd, 0x1}, {}]}) socket$inet_icmp(0x2, 0x2, 0x1) [ 357.721908][T29024] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 357.735153][T29024] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 357.779956][T29024] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 18:30:10 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:10 executing program 3: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 18:30:11 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 358.116893][T29024] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 358.139444][T29024] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 358.208324][T29024] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x4c00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 18:30:11 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000040), 0x0, &(0x7f0000000100)=[@ip_retopts={{0x88, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x2c, 0xfe, 0x3, 0x7, [{@loopback, 0x7}, {@remote}, {@empty, 0x8}, {@multicast2, 0x51}, {@multicast1, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0x95, 0x3, 0x3, [{@broadcast, 0xa32}, {@multicast1, 0x5c8}, {@loopback, 0x5}, {@remote, 0x80000000}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}]}, @rr={0x7, 0xf, 0x6a, [@rand_addr=0x8, @local, @broadcast]}, @ssrr={0x89, 0x7, 0x2c, [@rand_addr=0x8]}, @noop]}}}], 0x88}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000280)=[r6, 0xffffffffffffffff, r5], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:11 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 18:30:11 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:11 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 358.542101][T29113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 358.553628][T29113] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 18:30:11 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 358.605567][T29113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 18:30:11 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:12 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 358.944215][T29113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 358.963321][T29113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 359.023308][T29113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5902000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 18:30:12 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_enter(0xffffffffffffffff, 0x674b, 0x401, 0x3, &(0x7f0000000000)={[0x7f]}, 0x8) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x10600, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000340)="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", 0x1000) 18:30:12 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:12 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 18:30:12 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 359.321772][T29208] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 359.335532][T29208] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) 18:30:12 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40840, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 359.417536][T29208] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 18:30:12 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) [ 359.747269][T29208] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 359.791449][T29208] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 359.858319][T29208] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:12 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) 18:30:12 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:12 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:12 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000440), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000004c0)={0xa10000, 0x6, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x990a68, 0x0, [], @value=0x3}}) sendto$l2tp(r6, &(0x7f0000000500)="483c3ce46eaae5c279e3edd0779e5b15b3161dfc59f88e2f8a8231bc0e7b2f56785596607d1a2c0f6dd573e90a9b01be2e32d6ac5ae00ef80cc50e6ae6232d0609b7b54c0b964b4a9d5aff406f0246c14c69d77adb3502608569f0dd23bba06d6318813da99e4a6bcedeb262c83d1c1edf5558ebb444b91895780b77b096f7adc69a73085ea920fd53059de4936186f31699b4d28c353277f4ca99fa602f6e3ce1a5e265cce4cf2cae1931a43a02095241e929aa5a8b40e7dbba0f964e4f491a3c43b0dfc13c869ed75af7b731eb8ed64e7c7650c86831a2692581c9fcb1", 0xde, 0x4004, &(0x7f0000000600)={0x2, 0x0, @empty, 0x4}, 0x10) 18:30:13 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 18:30:13 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 360.087847][T29297] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 360.102221][T29297] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 360.175028][T29297] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:13 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) 18:30:13 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:13 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 18:30:13 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:13 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 360.441580][T29297] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 360.448541][T29297] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 360.493636][T29297] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x6000000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:13 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 18:30:13 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:13 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:13 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000180)={0x3, 0x9}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') preadv(r4, &(0x7f00000017c0), 0x1ab, 0x500) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x400, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x1) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xe02b3e4e7aecdc35}, 0x20000810) 18:30:13 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) 18:30:13 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 360.788724][T29395] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 360.813795][T29395] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 360.897586][T29395] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:14 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) 18:30:14 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:14 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)={0x400, 0x5, 0x4, 0x100, 0x2, {}, {0x1, 0x1, 0x7f, 0xf8, 0x40, 0x1, "0715d196"}, 0x8, 0x1, @fd, 0xffff8000, 0x0, r3}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r4], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) [ 361.259723][T29395] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 361.286000][T29395] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 361.308360][T29395] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:14 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x6800000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:14 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x14900, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f0000000000)={0x2, 0x0, [0x0, 0x0, 0x17a]}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000340)) r5 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) write$binfmt_script(r6, &(0x7f0000001500)=ANY=[@ANYBLOB="2321202e2f66696c6530205c3a7365637572b74279656d31766d6e6574310acde33d9de3bb784a3217a254559697ddd09ade456f5808fb37a4a1d87bd1c43022c8b4e4d95ad01f819c24e6686a9ade9295cc65e339f9dcaee50a920664fdda73749a7783fe34d4775d9de1bdfda4bf989736bf4e5791be7efe95f819a44cee31d2a9ced96d1e42b5c638dadd067cccce67622ed5c0b454cf8396f36cb3020d1926999d121212d22541f26f07981cd398829af4211f3b9a4503832612279f8c67af0b7f7009b396226ccf55a5f9a647fce8fad21cdb18f3afbe953ef0ce28d3f397aa88fefbd583239e10c8364bced1d0c85adc7ad3311be9639610d91a962864ba34c6382a1811ad2cb2d4ddfe1e79c835bbb4332f741289bd25a5097006010e2b5ddcdd0aab418bfa73b7caebd949c54f41ca25e50b8ebeb985fd746b451cbb57b159457eadad2bd871549a0b9da6be73855fb29833ee230532d4ec8264505cb7b5aba967bf79c6d38cf6ff48090ae8076f78085404129bc5e09a7f92aeffacd2f3e4"], 0x30) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000)=r5, 0x4) 18:30:14 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:30:14 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 18:30:14 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 361.637660][T29501] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 361.660293][T29501] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 361.748258][T29501] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:14 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 18:30:14 executing program 3: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:14 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:14 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000100)={0x80, &(0x7f0000000100)}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 361.986858][T29501] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 361.997560][T29501] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 362.020306][T29501] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:15 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x6c00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:15 executing program 3: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 18:30:15 executing program 0: unshare(0x2000400) munlockall() r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000000)={0x6}) 18:30:15 executing program 3: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) [ 362.295975][T29583] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 362.311840][T29583] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:15 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 362.412419][T29583] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:15 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:30:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 18:30:15 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x642802, 0xa0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @multicast1}, {0x2, 0x4e23, @rand_addr=0x1000}, {0x2, 0x4e24, @remote}, 0xa1, 0x0, 0x0, 0x0, 0x7f8b, &(0x7f0000000040)='wg0\x00', 0x1000, 0xffffffffffffff41, 0x3}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) [ 362.671772][T29583] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 362.690871][T29583] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:15 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) [ 362.749411][T29583] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x7400000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:16 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffff"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:16 executing program 3: unshare(0x2000400) r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000001000/0x1000)=nil, 0x4000) r1 = shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x5000) shmdt(r1) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r4], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x9, &(0x7f00000002c0)}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000000)) 18:30:16 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 18:30:16 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 18:30:16 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x2f) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2000, 0x0) ioctl$TUNSETCARRIER(r3, 0x400454e2, &(0x7f0000000040)=0x1) unshare(0x2000400) r4 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:16 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) [ 363.240967][T29702] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 363.262513][T29702] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:16 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) 18:30:16 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x100) getsockname$netlink(r0, &(0x7f0000000040), &(0x7f0000000100)=0xc) unshare(0x2000400) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000003c0)={r2, 0x40}, &(0x7f0000000400)=0x8) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x15, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x800) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000440)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r4, r5], 0x5) openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x8001) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 363.325584][T29702] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:16 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, r1], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:16 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) 18:30:16 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffff"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 363.647211][T29702] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 363.661946][T29702] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 363.715832][T29702] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:16 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x7a00000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:16 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:16 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) 18:30:16 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x60, 0x800) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f0000000140)=""/125, 0x7d) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f00000001c0)=""/31) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) 18:30:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 18:30:17 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffff"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:17 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 364.081493][T29802] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 364.090229][T29802] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 364.111801][T29802] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:17 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x6, 0x7ff, 0x1, 'syz1\x00', 0x6413}, 0x0, [0x0, 0x5, 0x3, 0x2, 0x3, 0x1000, 0x5, 0x8000, 0x9000000000000, 0x7, 0x5, 0x7411, 0x4, 0x8, 0x9, 0x8001, 0x100, 0x1c5, 0x7, 0xfffffffffffffffe, 0x0, 0x2c47, 0xffff, 0x81, 0xffffffffffff1769, 0x3, 0xad, 0x3800000, 0x4f0, 0x0, 0x80, 0x100000001, 0x9, 0x1, 0x400, 0x8001, 0x400, 0x3ff, 0x670e, 0x7f, 0x200, 0xfff, 0x7fffffff, 0x6, 0xe51d, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x1f, 0xaa9, 0x1, 0x0, 0x5, 0x2, 0x40, 0x7, 0xd31, 0xffffffff, 0x9, 0x2, 0x5, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7, 0x401, 0x10000, 0x7fffffff, 0x6, 0x20, 0x3, 0x8, 0x340, 0xffffffffffff7c31, 0x8, 0x289c8036, 0xfffffffffffffffd, 0x7, 0x8, 0x79, 0x9, 0x400, 0x6, 0x9, 0x4, 0xe56, 0x937, 0x6, 0x1f, 0xd7ee, 0x8000, 0x4, 0xfffffffffffff907, 0xffffffff, 0x5, 0x3, 0x6, 0x5, 0x400, 0x5, 0x8, 0x401, 0x84b, 0x6, 0x7fffffff, 0xa10, 0x2, 0x4, 0xffffffff, 0xe1c, 0x3, 0xf0, 0x24f, 0x9, 0x5, 0x6b4, 0x100000000, 0x21, 0x10001, 0x9a, 0xe8, 0xffffffffffffff01]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000041) 18:30:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 18:30:17 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) [ 364.430822][T29802] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 364.472691][T29802] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:17 executing program 0: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='md5sum%wlan1\x00', &(0x7f0000000040)='%\x00', 0x0) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 364.542750][T29802] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:17 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x80ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:17 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) 18:30:17 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) 18:30:18 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x501240) listen(r2, 0xfffffffe) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x6, &(0x7f00000002c0)=[r1]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 364.951146][T29900] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 364.987746][T29900] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) [ 365.052202][T29900] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:18 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 18:30:18 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:18 executing program 0: unshare(0x22001c00) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) socket$vsock_stream(0x28, 0x1, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) [ 365.302558][T29900] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 365.339163][T29900] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 365.421309][T29900] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:18 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x8603000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:18 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 18:30:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) 18:30:18 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) [ 365.709824][T29998] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 365.716582][T29998] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:18 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 365.750840][T29998] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:18 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:18 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 18:30:19 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) [ 366.101330][T29998] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 366.108696][T29998] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) 18:30:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) [ 366.225212][T29998] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:19 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x8a03000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:19 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:19 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) 18:30:19 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="08000200ffffe5bf"], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 18:30:19 executing program 0: unshare(0x2000400) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') preadv(r1, &(0x7f00000017c0), 0x1ab, 0x500) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r2, 0x400, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x80) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) 18:30:19 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 366.627101][T30101] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 366.645567][T30101] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 366.699116][T30101] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) 18:30:19 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:19 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) 18:30:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x97ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:20 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x3}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/kcm\x00') preadv(r2, &(0x7f00000017c0), 0x1ab, 0x500) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x400, 0x70bd27, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}}, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000180)) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x18, 0x70bd26, 0x2ddb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x60) exit(0x2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:20 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="08000200ffffe5bf"], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:20 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 367.113436][T30159] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 367.125687][T30159] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 367.138025][T30159] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 18:30:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 18:30:20 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 367.348912][T30159] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 367.355706][T30159] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 367.413084][T30159] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:20 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYBLOB="08000200ffffe5bf"], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 18:30:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xc9ffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:20 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr="32bfde98ec9f784301dbd1057009ba1c"}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r3}, 0x8) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:20 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xd601000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:20 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:20 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:30:20 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) [ 368.034511][T30253] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 368.046423][T30253] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) [ 368.139093][T30253] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:21 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:21 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 18:30:21 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:21 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 368.531216][T30253] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 368.550368][T30253] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) 18:30:21 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xfdffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 368.584049][T30253] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:21 executing program 0: r0 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r0, 0x0) unshare(0x2000400) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, r2], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r4], 0x3) setsockopt$RDS_RECVERR(r5, 0x114, 0x5, &(0x7f0000000100), 0x4) 18:30:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) 18:30:21 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:21 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) [ 368.890251][T30363] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 368.914388][T30363] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 368.966371][T30363] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:22 executing program 3: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) 18:30:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r5}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000040)={r6, 0x1e2290b785df2cc9, r8}) unshare(0x2000400) r9 = io_uring_setup(0xa4, &(0x7f0000000080)) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) io_uring_register$IORING_REGISTER_EVENTFD(r9, 0x4, &(0x7f0000000100)=r11, 0x1) 18:30:22 executing program 3: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:22 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 18:30:22 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_ACTIVATE(r2, 0x5606, 0x5) [ 369.209758][T30363] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 369.226396][T30363] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 369.331438][T30363] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:22 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xff0f000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:22 executing program 3: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) 18:30:22 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa7, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x3, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:22 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:22 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) [ 369.652217][T30453] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 369.703917][T30453] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:22 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000000)={0x0, 0x0, 0xa, 0x0, 0x67}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) pipe2(&(0x7f0000000080), 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) [ 369.786999][T30453] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:22 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:22 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:23 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) [ 370.119144][T30453] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 370.177395][T30453] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 370.212335][T30453] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:23 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffefffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:23 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:23 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 18:30:23 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000140)=0x1c, 0x80000) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r1, 0xffffffffffffffff, r0], 0x3) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) migrate_pages(r2, 0x9, &(0x7f0000000000)=0xb0b, &(0x7f0000000040)=0x100000000) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:23 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100), 0x1) 18:30:23 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x621, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x10}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:23 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:30:23 executing program 3: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 370.552782][T30572] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:23 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) [ 370.584447][T30572] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:23 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 370.665002][T30572] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:23 executing program 3: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:23 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r3, 0x1) [ 371.035255][T30572] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 371.056942][T30572] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 371.121966][T30572] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:24 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffff0f0000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:24 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 18:30:24 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x2}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:24 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:24 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = fcntl$dupfd(r2, 0x406, r2) getsockname$netrom(r3, &(0x7f0000000000)={{0x3, @rose}, [@default, @remote, @bcast, @bcast, @null, @rose, @bcast, @bcast]}, &(0x7f0000000140)=0x48) 18:30:24 executing program 3: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:24 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 371.447592][T30660] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:24 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 371.478709][T30660] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:24 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0xfffffc01, 0xc, 0x4, 0x4000, 0x0, {}, {0x6, 0x2, 0x9c, 0x3, 0x8, 0x3, "0961a023"}, 0x109, 0x2, @fd=r2, 0x7ffffffb, 0x0, 0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f5, 0x20, 0x70bd2b, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0xc4) 18:30:24 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$vsock_stream(0x28, 0x1, 0x0) write$binfmt_script(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x45) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:24 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 18:30:24 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 371.670753][T30660] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffff7f00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 18:30:25 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:25 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:25 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0x980000, 0x5, 0x20, r3, 0x0, &(0x7f0000000040)={0x9a090b, 0x1000, [], @p_u16=&(0x7f0000000000)=0x8}}) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000140)={0x8000, 0x9, 0x5, 0x1}) 18:30:25 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x72, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0xffffffff, {0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={[], [], @multicast2}, 0x800000}}, 0x0, 0x0, 0x0, 0x0, 0x3f}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e22, 0x509aaa29, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}}}, 0x84) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r7, 0x1) 18:30:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 18:30:25 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 372.148285][T30753] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 372.184784][T30753] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:25 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:25 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:25 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0x10000553, &(0x7f0000000080)={0x0, 0x0, 0xc, 0x0, 0xa4}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x82301, 0x0) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0xd, 0x1a, 0xb4, &(0x7f0000000140)="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"}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="93152659", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0x72, &(0x7f00000000c0)={r5, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00f6ff00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0x72, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000540)={r5, 0x81, 0x40, 0xff, 0xfff, 0x9, 0x101, 0x2, {r8, @in6={{0xa, 0x4e21, 0x200, @dev={0xfe, 0x80, [], 0x22}, 0x81}}, 0x20, 0x4f8c, 0x7, 0xfa, 0x6e}}, &(0x7f0000000600)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000640)={0x1, 0xa4a, 0x8400, 0x7fffffff, 0x7fffffff, 0xfffff001, 0x9, 0x6, r10}, 0x20) [ 372.293565][T30753] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 372.611070][T30753] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 372.618591][T30753] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 372.639836][T30753] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:25 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffffff00000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:25 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 18:30:25 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmmsg$sock(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @empty}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000100)="a21ab4c9c8fc6d03634c63606fa51e4ab2aa5d9ef565", 0x16}, {&(0x7f0000000140)="5f01beb63e0f09101207cee40b7c0e07f67982233662221f0a01e32f80f72489e9c0d47bb6284688b497429609951fa945c7ae4867a38762738c49f32fd5adc3ef8719260fa7e6a73c4ac4e44ae096f52bb88dba2af95529b4490f76ba2b180ed0de32b55fd2a3ba3f0908796a5394ee29a1a490d23df2b292e6f6653c19691f98bc8d69abb564827003f3f75d4799131669d3940f62d6766f6a2a41daa4457b1d73680bb8b0cec8ff936a52c23de5fdd4219f78c56b94cb9640d0626bc15aee9ac0d616c682e1e596d05e39e5516fe16aa7be52f11591d36179f6e32935f39af0dc97292d443d9c9377a703f443e1", 0xef}, {&(0x7f0000000240)="55b106399ee4a11f221c66e2f699dd954b4c91ddbed88978837938e3d84566bb093088f7201aaef546e9ac", 0x2b}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="7338e22a2b5e79c47452b5eaf0f434a8638bca3cc5f23b072e058ac238734a05afba13070ebb0091f78ba8aa5dc28e96c9e258ea1707030c4b86dd056ac031da91834a2b05751d8f749bef886ae503925f53edc534dcd398304e884c89114400c5c26b132b11dd7fa1a157cd124c68ac00da21a76dea3d350f3a7791366c94a26437ba5445cfd8e3871cce3f48e298f6f7ccac6823ec25b3299e63bb0b516c", 0x9f}], 0x5}}], 0x1, 0x20040080) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001440)={&(0x7f0000001400)='./file0\x00', 0x0, 0x8}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:25 executing program 5: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0xe) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r1, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000140)={0x5, 0x40, 0x9, 0x3, 0x1a6f}) prctl$PR_GET_SECCOMP(0x15) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v2={0x2000000, [{0x5, 0x5}, {0xfe3d, 0x5}]}, 0x14, 0x1) 18:30:25 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:25 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) [ 372.932285][T30846] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) 18:30:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) [ 372.959233][T30846] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:26 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/ip_tables_matches\x00') 18:30:26 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 373.017255][T30846] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 373.326747][T30846] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 373.378461][T30846] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 373.416945][T30846] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0xffffffffffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) 18:30:26 executing program 5: r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000001000/0x1000)=nil, 0x4000) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000140)=""/4096) unshare(0x2000400) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @dev={0xfe, 0x80, [], 0x15}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r7 = pidfd_getfd(r5, r6, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000002", @ANYRES16=r9, @ANYBLOB="0103001900002000000005000000"], 0x14}, 0x1, 0xffffff7f00000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000004cc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000004dc0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020700bd0200000000001008000008000300", @ANYRES32=r10, @ANYBLOB="0a000900aaaaaaaaaabb000006002800040000000a0009000180c2000001000008002b003f000000"], 0x44}, 0x1, 0x0, 0x0, 0x40000b4}, 0xc000) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:26 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:26 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = epoll_create(0x7) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180)=[r1, r1, r2, r4, 0xffffffffffffffff], 0xe) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfff, 0x1, 0x1, 0x0, 0xc330, 0x9}, &(0x7f0000000040)=0x20) 18:30:26 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:30:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) [ 373.601574][T30955] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 373.612539][T30955] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:26 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) sched_getparam(r3, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) [ 373.644217][T30955] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:26 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:26 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 18:30:26 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x4, &(0x7f0000000000)=[r0, 0xffffffffffffffff, r0]}, 0x3) io_setup(0x3, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x4, r0, &(0x7f0000000100)="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", 0xfb, 0x7, 0x0, 0x1}, &(0x7f0000000240)) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:26 executing program 5: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x8200, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000140)={'lo\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ptrace$pokeuser(0x6, r4, 0x9, 0x821) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000100)=r1, 0x1) [ 373.875624][T30955] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 373.917159][T30955] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 373.947182][T30955] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) 18:30:27 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:27 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:30:27 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r5 = socket$kcm(0x10, 0x2, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x5}}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r6, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fffffff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x2004c050) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) [ 374.082242][T31033] IPVS: Error connecting to the multicast addr 18:30:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 18:30:27 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa7, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:27 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 374.198674][T31058] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 374.205212][T31058] loop4: partition table partially beyond EOD, truncated [ 374.233179][T31058] loop4: p1 start 50944 is beyond EOD, truncated 18:30:27 executing program 5: write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0x4, 0x0, {0x2, 0x100000000, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) unshare(0x28020380) io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000001c0)={0x6, 0x2, 0xffffff71}) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000200)) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x7, 0x614a41) r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x7, 0x4) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000003c0)={0x1, 0x0, 0x4, 0x20, 0x6e, {}, {0x5, 0x0, 0x2, 0x81, 0x0, 0x3, "bcd2a515"}, 0xfffff736, 0x3, @userptr=0x1, 0x5, 0x0, 0xffffffffffffffff}) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f0000000440)=0x7, 0x4) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="08000200ffffe5bf"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="0100af0e00000000"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@bridge_getlink={0x220, 0x12, 0x20, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x20, 0x20000}, [@IFLA_VFINFO_LIST={0x1ac, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x5, 0x5ac, 0x6}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x899}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7, 0x1}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xfffffff7, 0x5, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x2, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x101, 0x3}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3, 0x9}}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x9, @remote}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x9}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x3, 0x9f, 0x3e}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0x57f, 0x4}}, @IFLA_VF_RATE={0x10, 0x6, {0x8, 0x53f72717, 0x725}}, @IFLA_VF_VLAN={0x10, 0x2, {0x7, 0x93, 0x411}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x1, 0x5d, 0xfff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x9, 0x5}}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x7, 0x1, 0x9}}, @IFLA_VF_MAC={0x28, 0x1, {0x4, @random="dd2cde6c101f"}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xfffffc00, 0x7ff}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0x8, 0x7}}]}]}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_NET_NS_PID={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_WEIGHT={0x8, 0xf, 0x9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x400}]}, 0x220}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001680)={'team0\x00', r4}) bind$xdp(0xffffffffffffffff, &(0x7f00000016c0)={0x2c, 0x8, r5, 0x40}, 0x10) 18:30:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) [ 374.258011][T31058] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 374.276838][T31058] loop4: p3 size 2 extends beyond EOD, truncated [ 374.295822][T31058] loop4: p4 size 32768 extends beyond EOD, truncated 18:30:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) [ 374.323010][T31058] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) [ 374.389206][T31058] loop4: p6 size 32768 extends beyond EOD, truncated [ 374.560619][T31058] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 374.565875][T31058] loop4: partition table partially beyond EOD, truncated [ 374.590643][T31058] loop4: p1 start 50944 is beyond EOD, truncated [ 374.600909][T31058] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 374.609307][T31058] loop4: p3 size 2 extends beyond EOD, truncated [ 374.623683][T31058] loop4: p4 size 32768 extends beyond EOD, truncated [ 374.635771][T31058] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 374.648132][T31058] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:27 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:27 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0xff, &(0x7f0000000040)}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x25) 18:30:27 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:27 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:30:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) 18:30:27 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000140)={0x74, 0x0, [0x0, 0x1, 0x5b94c00b, 0x1]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200040, 0x0) r4 = dup2(r3, r3) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/ipv6host\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r4, 0x1) 18:30:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:30:27 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) 18:30:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 18:30:27 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:28 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) [ 374.890138][T31168] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 374.895748][T31168] loop4: partition table partially beyond EOD, truncated [ 374.925642][T31168] loop4: p1 start 50944 is beyond EOD, truncated 18:30:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) [ 374.984983][T31168] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 375.032146][T31168] loop4: p3 size 2 extends beyond EOD, truncated [ 375.063885][T31168] loop4: p4 size 32768 extends beyond EOD, truncated [ 375.098481][T31168] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 375.125965][T31168] loop4: p6 size 32768 extends beyond EOD, truncated [ 375.270669][T31168] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 375.276550][T31168] loop4: partition table partially beyond EOD, truncated [ 375.291435][T31168] loop4: p1 start 50944 is beyond EOD, truncated [ 375.297815][T31168] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 375.313341][T31168] loop4: p3 size 2 extends beyond EOD, truncated [ 375.326384][T31168] loop4: p4 size 32768 extends beyond EOD, truncated [ 375.338745][T31168] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 375.355179][T31168] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:28 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:28 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x1ff, 0x1, 0x4, 0x70000, 0x5, {r1, r2/1000+10000}, {0x5, 0x1, 0x7f, 0x1, 0xad, 0x39, "73a03906"}, 0x101, 0x2, @userptr=0x6, 0x67, 0x0, r3}) socket$netlink(0x10, 0x3, 0xa) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}, 0x20}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x5, @remote}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, r6, 0xffffffffffffffff, r4, r0, r3, r4], 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCCONS(r8, 0x541d) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0xfffffffe, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:28 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 18:30:28 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:28 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001340)=ANY=[@ANYBLOB="00000000fc72b959e6d9fc027a7116084ac517863bd7e23f52e55b15c7aa36f57a1f894510cb2b68ff05c5150fe201794da71a0eee1c14dfab7b9b3a6115dea9c2b4c2c8168b39c33702a1ee693fd660893a136eaae9bfbb0201f94ac73d209a39cd940ca5f3e89d4483cbf7bcd9ef6ad44289f77bf4d70253e034c092a00b9a9efa3979caafe0b731dfd6f195e5831ba4553d828ef103bee71c70d3a39f3347da7becfa1a5e5446014fc80be3acf9ea8883cb337f6780b6db5c2fb50e1c91e3bee443076af0803037e4d5d2d05a778d82325dee8a7fd542a4f001d5ef553903275ab8e8de388e33cc1ea67f167d", @ANYRES32=0x0], &(0x7f0000001440)=0x2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=r4, 0x4) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r8 = dup2(r6, r7) recvmmsg(r7, &(0x7f0000001180)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/145, 0x91}], 0x2, &(0x7f0000000300)=""/228, 0xe4}, 0x7f}, {{&(0x7f0000000400)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000480)=""/20, 0x14}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000580)=""/64, 0x40}, {&(0x7f00000005c0)=""/158, 0x9e}], 0x4, &(0x7f0000000680)=""/3, 0x3}, 0x1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/64, 0x40}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000000800)=""/229, 0xe5}, {&(0x7f0000000900)=""/193, 0xc1}], 0x4, &(0x7f0000000a40)=""/171, 0xab}, 0x4}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/30, 0x1e}], 0x1, &(0x7f0000000c00)=""/52, 0x34}, 0x8}, {{&(0x7f0000000c40)=@rc={0x1f, @none}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f0000000d00)=""/180, 0xb4}], 0x2, &(0x7f0000000e00)=""/32, 0x20}, 0xffff}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/223, 0xdf}, {&(0x7f0000000f80)=""/189, 0xbd}, {&(0x7f0000001040)=""/191, 0xbf}], 0x4, &(0x7f0000001140)=""/30, 0x1e}, 0x4}], 0x6, 0x40, &(0x7f0000001300)={0x77359400}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r8, 0x1) 18:30:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 18:30:28 executing program 5: unshare(0x2000400) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [{0x20, 'cpusetposix_acl_accesscpuset'}, {0x20, '@.mime_typebdev'}, {0x20, '#M#}bdevwlan0'}, {0x20, 'proc\xdceth1.-'}, {0x20, '$em1GPL-#eth1mime_typecpuset'}, {}, {0x20, '@em0!posix_acl_access@securityppp1'}], 0xa, "21ecd74425b4fb82f8e404dee344355ba18f53dc417cf3d650ba853abb176fadf271961eed591c0fcc4c66097cfbc0302980b704e74a33dd305fea189eb46c435e00a6bf6eef71a26a9bc1baf60d1fab3d3794978461f49d434122af88977dcad25a2e20c268959bcfe40e58150a7992ad652f28ddc642ae9bc348d6f139706a3ce5d67f01ee6b3f0f94014a00732e49ba8fa46ce609d2d2b7ee56eff14bb672b81b27931f9f57babd4d1a73abcfc11ed7a338be7e22648192711a631275088d4c9e0bcb451c6f803239e5f826ff0683d4357e28388a3a"}, 0x16a) r1 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 18:30:28 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 375.681535][T31279] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 375.697589][T31279] loop4: partition table partially beyond EOD, truncated [ 375.706553][T31279] loop4: p1 start 50944 is beyond EOD, truncated [ 375.714479][T31279] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 375.724824][T31279] loop4: p3 size 2 extends beyond EOD, truncated 18:30:28 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) exit_group(0xffffffff80000001) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={r3, 0x8, "1173052151da1d8f"}, &(0x7f0000000040)=0x10) [ 375.735518][T31279] loop4: p4 size 32768 extends beyond EOD, truncated [ 375.745899][T31279] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 375.759406][T31279] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:28 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) [ 375.947395][T31279] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 375.966324][T31279] loop4: partition table partially beyond EOD, truncated [ 375.974789][T31279] loop4: p1 start 50944 is beyond EOD, truncated [ 375.989114][T31279] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 375.998277][T31279] loop4: p3 size 2 extends beyond EOD, truncated [ 376.006699][T31279] loop4: p4 size 32768 extends beyond EOD, truncated [ 376.015801][T31279] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 376.035023][T31279] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x5, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:29 executing program 5: unshare(0x2000600) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 18:30:29 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:29 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:29 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0xa}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/change-rule\x00', 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, r0, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0xa) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000500)="5181b67468e2b218d2c8ac9a19de4dfa996e3934b88f31270d80950ad8d35831dbc87be9b589f8c0e9fcc33a0c96219f7c163819eb6f993d2352b155cde879d28c1747f20e043f56be13bb26cac474eb2b645dca48b160c685480a9901888f11709215bce7eaa8b56ec0a88fca608c0b149e738b24c17158403ed4b8e0f16494995c4994e854104dc5f91fd709227b293ca0451de916fc0fa277a2068aa9eb3b9a5591902f1c1d9fac62b1ac7a18d77e8488bb49170841bb491f1c37a0a8004f6b8a01cde340d37fe748d9a11a77f4b4dbf013be7479bb9d27b29b4fd751bffa71aa7ec14d8508f4244dfef7f2d2e44ca529880ffe44845bc1e79143a11d90ac716e194e", &(0x7f0000000340)=""/144, &(0x7f0000000400)="8774e6c62589268f5b4cd75bf605acb9740fea9008b36db139464b313840f395e0008e7658276d1836aa3b73bd680693c0396fec7baac3362377880f74940ae4a52274ed3a4d674e0d849374c336ec8d8455b8220a21c28f5aaa88461ba11cc47d6f1a905687668699d035e9ebbf21bf8429b3dc100d6a32caee2c757abae24acedffd91c08078003a5ff2b3f51b3182ae4bc8439d1786572044bd725058aaa7aa6afaa98fd151be05be9f4f2d33ed490559e8b2567abf4471133fcc918f801af47355e5f224c6c30f04c2e579bf598bed", &(0x7f0000000000)="38454027caa4e04296", 0x8, r5, 0x4}, 0xffffffe2) rename(&(0x7f0000000100)='.\x00', &(0x7f0000000140)='./file0\x00') io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 18:30:29 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) prctl$PR_GET_SECCOMP(0x15) [ 376.211731][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 376.217082][ T4113] loop4: partition table partially beyond EOD, truncated [ 376.230894][ T4113] loop4: p1 start 50944 is beyond EOD, truncated [ 376.237671][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 376.247957][ T4113] loop4: p3 size 2 extends beyond EOD, truncated 18:30:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 18:30:29 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 376.282319][ T4113] loop4: p4 size 32768 extends beyond EOD, truncated [ 376.295158][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:29 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000000)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x98, 0x5, 0x2a, "3eb7637b046cc03cad52129e15d605e6", "5167da2d89911527652f7730a6ef0048a553dec8c8d0cac7d06c81a53fa85e7ac245d72810618fea1ab75bd58b8149700ac2f47ae0bee1a425eac52cce114838ff09a042e04d230579b3bf9077a2376f7999213c596e053b9db1eee4cdf9f0fc29a4022b72901d9bafc1307f898beec35412de4d4b7d5b74a77aa56f6d5f239f95bd30"}, 0x98, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'veth1_virt_wifi\x00', {0x2, 0x4e24, @broadcast}}) [ 376.327493][ T4113] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) [ 376.388840][T31351] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 376.418059][T31351] loop4: partition table partially beyond EOD, truncated [ 376.434027][T31351] loop4: p1 start 50944 is beyond EOD, truncated [ 376.442614][T31351] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 376.454582][T31351] loop4: p3 size 2 extends beyond EOD, truncated [ 376.468058][T31351] loop4: p4 size 32768 extends beyond EOD, truncated [ 376.478266][T31351] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 376.488961][T31351] loop4: p6 size 32768 extends beyond EOD, truncated [ 376.675016][T31351] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 376.681624][T31351] loop4: partition table partially beyond EOD, truncated [ 376.689353][T31351] loop4: p1 start 50944 is beyond EOD, truncated [ 376.698369][T31351] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 376.708823][T31351] loop4: p3 size 2 extends beyond EOD, truncated [ 376.717314][T31351] loop4: p4 size 32768 extends beyond EOD, truncated [ 376.726212][T31351] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 376.737586][T31351] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:29 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x6, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) 18:30:29 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:29 executing program 5: unshare(0x2000400) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x41) r0 = io_uring_setup(0x494, &(0x7f0000000080)={0x0, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:29 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000001340)=ANY=[@ANYBLOB="00000000fc72b959e6d9fc027a7116084ac517863bd7e23f52e55b15c7aa36f57a1f894510cb2b68ff05c5150fe201794da71a0eee1c14dfab7b9b3a6115dea9c2b4c2c8168b39c33702a1ee693fd660893a136eaae9bfbb0201f94ac73d209a39cd940ca5f3e89d4483cbf7bcd9ef6ad44289f77bf4d70253e034c092a00b9a9efa3979caafe0b731dfd6f195e5831ba4553d828ef103bee71c70d3a39f3347da7becfa1a5e5446014fc80be3acf9ea8883cb337f6780b6db5c2fb50e1c91e3bee443076af0803037e4d5d2d05a778d82325dee8a7fd542a4f001d5ef553903275ab8e8de388e33cc1ea67f167d", @ANYRES32=0x0], &(0x7f0000001440)=0x2) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=r4, 0x4) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r8 = dup2(r6, r7) recvmmsg(r7, &(0x7f0000001180)=[{{&(0x7f0000000140)=@can, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/7, 0x7}, {&(0x7f0000000200)=""/145, 0x91}], 0x2, &(0x7f0000000300)=""/228, 0xe4}, 0x7f}, {{&(0x7f0000000400)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000480)=""/20, 0x14}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000580)=""/64, 0x40}, {&(0x7f00000005c0)=""/158, 0x9e}], 0x4, &(0x7f0000000680)=""/3, 0x3}, 0x1}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000700)=""/64, 0x40}, {&(0x7f0000000740)=""/167, 0xa7}, {&(0x7f0000000800)=""/229, 0xe5}, {&(0x7f0000000900)=""/193, 0xc1}], 0x4, &(0x7f0000000a40)=""/171, 0xab}, 0x4}, {{&(0x7f0000000b00)=@can, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/30, 0x1e}], 0x1, &(0x7f0000000c00)=""/52, 0x34}, 0x8}, {{&(0x7f0000000c40)=@rc={0x1f, @none}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f0000000d00)=""/180, 0xb4}], 0x2, &(0x7f0000000e00)=""/32, 0x20}, 0xffff}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/223, 0xdf}, {&(0x7f0000000f80)=""/189, 0xbd}, {&(0x7f0000001040)=""/191, 0xbf}], 0x4, &(0x7f0000001140)=""/30, 0x1e}, 0x4}], 0x6, 0x40, &(0x7f0000001300)={0x77359400}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r8, 0x1) 18:30:29 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 376.801924][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 376.807168][ T4113] loop4: partition table partially beyond EOD, truncated [ 376.833256][ T4113] loop4: p1 start 50944 is beyond EOD, truncated [ 376.839630][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:29 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) [ 376.883407][ T4113] loop4: p3 size 2 extends beyond EOD, truncated [ 376.906499][ T4113] loop4: p4 size 32768 extends beyond EOD, truncated [ 376.917688][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:29 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) [ 376.933614][ T4113] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:30 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) 18:30:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) 18:30:30 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 377.059047][T31485] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 377.069245][T31485] loop4: partition table partially beyond EOD, truncated [ 377.106440][T31485] loop4: p1 start 50944 is beyond EOD, truncated [ 377.134640][T31485] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 377.156741][T31485] loop4: p3 size 2 extends beyond EOD, truncated [ 377.165075][T31485] loop4: p4 size 32768 extends beyond EOD, truncated [ 377.173566][T31485] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 377.186750][T31485] loop4: p6 size 32768 extends beyond EOD, truncated [ 377.203529][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 377.208753][ T4113] loop4: partition table partially beyond EOD, truncated [ 377.218449][ T4113] loop4: p1 start 50944 is beyond EOD, truncated [ 377.224911][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 377.234801][ T4113] loop4: p3 size 2 extends beyond EOD, truncated [ 377.242772][ T4113] loop4: p4 size 32768 extends beyond EOD, truncated [ 377.251774][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 377.261009][ T4113] loop4: p6 size 32768 extends beyond EOD, truncated [ 377.340846][T31485] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 377.347778][T31485] loop4: partition table partially beyond EOD, truncated [ 377.362023][T31485] loop4: p1 start 50944 is beyond EOD, truncated [ 377.368398][T31485] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 377.377604][T31485] loop4: p3 size 2 extends beyond EOD, truncated [ 377.386552][T31485] loop4: p4 size 32768 extends beyond EOD, truncated [ 377.394942][T31485] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 377.404944][T31485] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:30 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x7, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:30 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0x85c, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x2, 0x36d}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 18:30:30 executing program 0: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:30 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:30 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 18:30:30 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) 18:30:30 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x6024, 0x4) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x801, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x200000, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000180)=r4) r5 = semget$private(0x0, 0x3, 0x510) semctl$SEM_STAT(r5, 0x3, 0x12, &(0x7f00000001c0)=""/69) [ 377.699863][T31582] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 377.705212][T31582] loop4: partition table partially beyond EOD, truncated 18:30:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) [ 377.758619][T31582] loop4: p1 start 50944 is beyond EOD, truncated [ 377.787033][T31582] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 377.797583][T31582] loop4: p3 size 2 extends beyond EOD, truncated [ 377.805830][T31582] loop4: p4 size 32768 extends beyond EOD, truncated [ 377.814731][T31582] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 377.824978][T31582] loop4: p6 size 32768 extends beyond EOD, truncated [ 377.843429][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:30 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) [ 377.856067][ T4113] loop4: partition table partially beyond EOD, truncated [ 377.864138][ T4113] loop4: p1 start 50944 is beyond EOD, truncated [ 377.872980][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 377.887870][ T4113] loop4: p3 size 2 extends beyond EOD, truncated [ 377.912512][ T4113] loop4: p4 size 32768 extends beyond EOD, truncated [ 377.922175][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 377.935501][ T4113] loop4: p6 size 32768 extends beyond EOD, truncated [ 378.020717][T31582] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 378.026463][T31582] loop4: partition table partially beyond EOD, truncated [ 378.041408][T31582] loop4: p1 start 50944 is beyond EOD, truncated [ 378.047945][T31582] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 378.057845][T31582] loop4: p3 size 2 extends beyond EOD, truncated [ 378.066183][T31582] loop4: p4 size 32768 extends beyond EOD, truncated [ 378.075028][T31582] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 378.083528][T31582] loop4: p6 size 32768 extends beyond EOD, truncated [ 378.097696][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 378.104134][ T4113] loop4: partition table partially beyond EOD, truncated [ 378.114412][ T4113] loop4: p1 start 50944 is beyond EOD, truncated [ 378.122915][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 378.132605][ T4113] loop4: p3 size 2 extends beyond EOD, truncated [ 378.140761][ T4113] loop4: p4 size 32768 extends beyond EOD, truncated [ 378.148278][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 378.157024][ T4113] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:31 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x8, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:31 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 18:30:31 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:31 executing program 5: unshare(0x3fcaec87e02bd981) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x6}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:31 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x6, 0x7ff, 0x1, 'syz1\x00', 0x6413}, 0x0, [0x0, 0x5, 0x3, 0x2, 0x3, 0x1000, 0x5, 0x8000, 0x9000000000000, 0x7, 0x5, 0x7411, 0x4, 0x8, 0x9, 0x8001, 0x100, 0x1c5, 0x7, 0xfffffffffffffffe, 0x0, 0x2c47, 0xffff, 0x81, 0xffffffffffff1769, 0x3, 0xad, 0x3800000, 0x4f0, 0x0, 0x80, 0x100000001, 0x9, 0x1, 0x400, 0x8001, 0x400, 0x3ff, 0x670e, 0x7f, 0x200, 0xfff, 0x7fffffff, 0x6, 0xe51d, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x1f, 0xaa9, 0x1, 0x0, 0x5, 0x2, 0x40, 0x7, 0xd31, 0xffffffff, 0x9, 0x2, 0x5, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7, 0x401, 0x10000, 0x7fffffff, 0x6, 0x20, 0x3, 0x8, 0x340, 0xffffffffffff7c31, 0x8, 0x289c8036, 0xfffffffffffffffd, 0x7, 0x8, 0x79, 0x9, 0x400, 0x6, 0x9, 0x4, 0xe56, 0x937, 0x6, 0x1f, 0xd7ee, 0x8000, 0x4, 0xfffffffffffff907, 0xffffffff, 0x5, 0x3, 0x6, 0x5, 0x400, 0x5, 0x8, 0x401, 0x84b, 0x6, 0x7fffffff, 0xa10, 0x2, 0x4, 0xffffffff, 0xe1c, 0x3, 0xf0, 0x24f, 0x9, 0x5, 0x6b4, 0x100000000, 0x21, 0x10001, 0x9a, 0xe8, 0xffffffffffffff01]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000041) 18:30:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 18:30:31 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:31 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) [ 378.410012][T31686] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 378.420097][T31686] loop4: partition table partially beyond EOD, truncated 18:30:31 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 378.450938][T31686] loop4: p1 start 50944 is beyond EOD, truncated [ 378.468709][T31686] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 378.490187][T31686] loop4: p3 size 2 extends beyond EOD, truncated 18:30:31 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x6, 0x7ff, 0x1, 'syz1\x00', 0x6413}, 0x0, [0x0, 0x5, 0x3, 0x2, 0x3, 0x1000, 0x5, 0x8000, 0x9000000000000, 0x7, 0x5, 0x7411, 0x4, 0x8, 0x9, 0x8001, 0x100, 0x1c5, 0x7, 0xfffffffffffffffe, 0x0, 0x2c47, 0xffff, 0x81, 0xffffffffffff1769, 0x3, 0xad, 0x3800000, 0x4f0, 0x0, 0x80, 0x100000001, 0x9, 0x1, 0x400, 0x8001, 0x400, 0x3ff, 0x670e, 0x7f, 0x200, 0xfff, 0x7fffffff, 0x6, 0xe51d, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x1f, 0xaa9, 0x1, 0x0, 0x5, 0x2, 0x40, 0x7, 0xd31, 0xffffffff, 0x9, 0x2, 0x5, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7, 0x401, 0x10000, 0x7fffffff, 0x6, 0x20, 0x3, 0x8, 0x340, 0xffffffffffff7c31, 0x8, 0x289c8036, 0xfffffffffffffffd, 0x7, 0x8, 0x79, 0x9, 0x400, 0x6, 0x9, 0x4, 0xe56, 0x937, 0x6, 0x1f, 0xd7ee, 0x8000, 0x4, 0xfffffffffffff907, 0xffffffff, 0x5, 0x3, 0x6, 0x5, 0x400, 0x5, 0x8, 0x401, 0x84b, 0x6, 0x7fffffff, 0xa10, 0x2, 0x4, 0xffffffff, 0xe1c, 0x3, 0xf0, 0x24f, 0x9, 0x5, 0x6b4, 0x100000000, 0x21, 0x10001, 0x9a, 0xe8, 0xffffffffffffff01]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000041) 18:30:31 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unlink(&(0x7f0000000000)='.\x00') r2 = dup2(r1, r1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDCTL_DSP_STEREO(r5, 0xc0045003, &(0x7f0000000140)) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) [ 378.517555][T31686] loop4: p4 size 32768 extends beyond EOD, truncated [ 378.537311][T31686] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 378.549372][T31686] loop4: p6 size 32768 extends beyond EOD, truncated [ 378.791209][T31686] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 378.797082][T31686] loop4: partition table partially beyond EOD, truncated [ 378.805750][T31686] loop4: p1 start 50944 is beyond EOD, truncated [ 378.813791][T31686] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 378.823686][T31686] loop4: p3 size 2 extends beyond EOD, truncated [ 378.832051][T31686] loop4: p4 size 32768 extends beyond EOD, truncated [ 378.841974][T31686] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 378.853905][T31686] loop4: p6 size 32768 extends beyond EOD, truncated [ 378.867825][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 378.876185][ T4113] loop4: partition table partially beyond EOD, truncated [ 378.886917][ T4113] loop4: p1 start 50944 is beyond EOD, truncated [ 378.896444][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 378.907415][ T4113] loop4: p3 size 2 extends beyond EOD, truncated [ 378.917198][ T4113] loop4: p4 size 32768 extends beyond EOD, truncated [ 378.927798][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xa, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 18:30:32 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:32 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x6, 0x7ff, 0x1, 'syz1\x00', 0x6413}, 0x0, [0x0, 0x5, 0x3, 0x2, 0x3, 0x1000, 0x5, 0x8000, 0x9000000000000, 0x7, 0x5, 0x7411, 0x4, 0x8, 0x9, 0x8001, 0x100, 0x1c5, 0x7, 0xfffffffffffffffe, 0x0, 0x2c47, 0xffff, 0x81, 0xffffffffffff1769, 0x3, 0xad, 0x3800000, 0x4f0, 0x0, 0x80, 0x100000001, 0x9, 0x1, 0x400, 0x8001, 0x400, 0x3ff, 0x670e, 0x7f, 0x200, 0xfff, 0x7fffffff, 0x6, 0xe51d, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x1f, 0xaa9, 0x1, 0x0, 0x5, 0x2, 0x40, 0x7, 0xd31, 0xffffffff, 0x9, 0x2, 0x5, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7, 0x401, 0x10000, 0x7fffffff, 0x6, 0x20, 0x3, 0x8, 0x340, 0xffffffffffff7c31, 0x8, 0x289c8036, 0xfffffffffffffffd, 0x7, 0x8, 0x79, 0x9, 0x400, 0x6, 0x9, 0x4, 0xe56, 0x937, 0x6, 0x1f, 0xd7ee, 0x8000, 0x4, 0xfffffffffffff907, 0xffffffff, 0x5, 0x3, 0x6, 0x5, 0x400, 0x5, 0x8, 0x401, 0x84b, 0x6, 0x7fffffff, 0xa10, 0x2, 0x4, 0xffffffff, 0xe1c, 0x3, 0xf0, 0x24f, 0x9, 0x5, 0x6b4, 0x100000000, 0x21, 0x10001, 0x9a, 0xe8, 0xffffffffffffff01]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x8, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000041) 18:30:32 executing program 5: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x18, 0x0, 0xfffffffe) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = io_uring_setup(0xa4, &(0x7f0000000000)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000200)=[r8, r2, r7, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r5, 0x1) 18:30:32 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 378.936174][ T4113] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) [ 379.104831][T31811] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 379.122401][T31811] loop4: partition table partially beyond EOD, truncated [ 379.141102][T31811] loop4: p1 start 50944 is beyond EOD, truncated [ 379.148558][T31811] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 379.166586][T31811] loop4: p3 size 2 extends beyond EOD, truncated [ 379.178483][T31811] loop4: p4 size 32768 extends beyond EOD, truncated [ 379.190226][T31811] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) 18:30:32 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x6, 0x7ff, 0x1, 'syz1\x00', 0x6413}, 0x0, [0x0, 0x5, 0x3, 0x2, 0x3, 0x1000, 0x5, 0x8000, 0x9000000000000, 0x7, 0x5, 0x7411, 0x4, 0x8, 0x9, 0x8001, 0x100, 0x1c5, 0x7, 0xfffffffffffffffe, 0x0, 0x2c47, 0xffff, 0x81, 0xffffffffffff1769, 0x3, 0xad, 0x3800000, 0x4f0, 0x0, 0x80, 0x100000001, 0x9, 0x1, 0x400, 0x8001, 0x400, 0x3ff, 0x670e, 0x7f, 0x200, 0xfff, 0x7fffffff, 0x6, 0xe51d, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x1f, 0xaa9, 0x1, 0x0, 0x5, 0x2, 0x40, 0x7, 0xd31, 0xffffffff, 0x9, 0x2, 0x5, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7, 0x401, 0x10000, 0x7fffffff, 0x6, 0x20, 0x3, 0x8, 0x340, 0xffffffffffff7c31, 0x8, 0x289c8036, 0xfffffffffffffffd, 0x7, 0x8, 0x79, 0x9, 0x400, 0x6, 0x9, 0x4, 0xe56, 0x937, 0x6, 0x1f, 0xd7ee, 0x8000, 0x4, 0xfffffffffffff907, 0xffffffff, 0x5, 0x3, 0x6, 0x5, 0x400, 0x5, 0x8, 0x401, 0x84b, 0x6, 0x7fffffff, 0xa10, 0x2, 0x4, 0xffffffff, 0xe1c, 0x3, 0xf0, 0x24f, 0x9, 0x5, 0x6b4, 0x100000000, 0x21, 0x10001, 0x9a, 0xe8, 0xffffffffffffff01]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") 18:30:32 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 379.198852][T31811] loop4: p6 size 32768 extends beyond EOD, truncated [ 379.238221][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 379.248226][ T4113] loop4: partition table partially beyond EOD, truncated [ 379.260553][ T4113] loop4: p1 start 50944 is beyond EOD, truncated [ 379.267971][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) [ 379.283330][ T4113] loop4: p3 size 2 extends beyond EOD, truncated [ 379.298121][ T4113] loop4: p4 size 32768 extends beyond EOD, truncated [ 379.310961][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 379.321160][ T4113] loop4: p6 size 32768 extends beyond EOD, truncated [ 379.426055][T31811] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 379.433431][T31811] loop4: partition table partially beyond EOD, truncated [ 379.444561][T31811] loop4: p1 start 50944 is beyond EOD, truncated [ 379.453179][T31811] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 379.473034][T31811] loop4: p3 size 2 extends beyond EOD, truncated [ 379.504916][T31811] loop4: p4 size 32768 extends beyond EOD, truncated [ 379.514385][T31811] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 379.529106][T31811] loop4: p6 size 32768 extends beyond EOD, truncated 18:30:32 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xf, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) 18:30:32 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:32 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x6, 0x7ff, 0x1, 'syz1\x00', 0x6413}, 0x0, [0x0, 0x5, 0x3, 0x2, 0x3, 0x1000, 0x5, 0x8000, 0x9000000000000, 0x7, 0x5, 0x7411, 0x4, 0x8, 0x9, 0x8001, 0x100, 0x1c5, 0x7, 0xfffffffffffffffe, 0x0, 0x2c47, 0xffff, 0x81, 0xffffffffffff1769, 0x3, 0xad, 0x3800000, 0x4f0, 0x0, 0x80, 0x100000001, 0x9, 0x1, 0x400, 0x8001, 0x400, 0x3ff, 0x670e, 0x7f, 0x200, 0xfff, 0x7fffffff, 0x6, 0xe51d, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x1f, 0xaa9, 0x1, 0x0, 0x5, 0x2, 0x40, 0x7, 0xd31, 0xffffffff, 0x9, 0x2, 0x5, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7, 0x401, 0x10000, 0x7fffffff, 0x6, 0x20, 0x3, 0x8, 0x340, 0xffffffffffff7c31, 0x8, 0x289c8036, 0xfffffffffffffffd, 0x7, 0x8, 0x79, 0x9, 0x400, 0x6, 0x9, 0x4, 0xe56, 0x937, 0x6, 0x1f, 0xd7ee, 0x8000, 0x4, 0xfffffffffffff907, 0xffffffff, 0x5, 0x3, 0x6, 0x5, 0x400, 0x5, 0x8, 0x401, 0x84b, 0x6, 0x7fffffff, 0xa10, 0x2, 0x4, 0xffffffff, 0xe1c, 0x3, 0xf0, 0x24f, 0x9, 0x5, 0x6b4, 0x100000000, 0x21, 0x10001, 0x9a, 0xe8, 0xffffffffffffff01]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) 18:30:32 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:32 executing program 5: unshare(0x400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 18:30:32 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000000)={0x0, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000000c0)={'veth0_to_bond\x00', {0x2, 0x4e23, @multicast2}}) r3 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:32 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 379.790351][T31923] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 379.810572][T31923] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:32 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) 18:30:32 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x6, 0x7ff, 0x1, 'syz1\x00', 0x6413}, 0x0, [0x0, 0x5, 0x3, 0x2, 0x3, 0x1000, 0x5, 0x8000, 0x9000000000000, 0x7, 0x5, 0x7411, 0x4, 0x8, 0x9, 0x8001, 0x100, 0x1c5, 0x7, 0xfffffffffffffffe, 0x0, 0x2c47, 0xffff, 0x81, 0xffffffffffff1769, 0x3, 0xad, 0x3800000, 0x4f0, 0x0, 0x80, 0x100000001, 0x9, 0x1, 0x400, 0x8001, 0x400, 0x3ff, 0x670e, 0x7f, 0x200, 0xfff, 0x7fffffff, 0x6, 0xe51d, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x1f, 0xaa9, 0x1, 0x0, 0x5, 0x2, 0x40, 0x7, 0xd31, 0xffffffff, 0x9, 0x2, 0x5, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7, 0x401, 0x10000, 0x7fffffff, 0x6, 0x20, 0x3, 0x8, 0x340, 0xffffffffffff7c31, 0x8, 0x289c8036, 0xfffffffffffffffd, 0x7, 0x8, 0x79, 0x9, 0x400, 0x6, 0x9, 0x4, 0xe56, 0x937, 0x6, 0x1f, 0xd7ee, 0x8000, 0x4, 0xfffffffffffff907, 0xffffffff, 0x5, 0x3, 0x6, 0x5, 0x400, 0x5, 0x8, 0x401, 0x84b, 0x6, 0x7fffffff, 0xa10, 0x2, 0x4, 0xffffffff, 0xe1c, 0x3, 0xf0, 0x24f, 0x9, 0x5, 0x6b4, 0x100000000, 0x21, 0x10001, 0x9a, 0xe8, 0xffffffffffffff01]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) [ 379.854245][T31923] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 379.941498][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 379.947967][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 379.959390][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 380.040992][T31923] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 380.052578][T31923] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 380.120369][T31923] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) 18:30:33 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280), 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:33 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000002c0)={{0x9, 0x6, 0x7ff, 0x1, 'syz1\x00', 0x6413}, 0x0, [0x0, 0x5, 0x3, 0x2, 0x3, 0x1000, 0x5, 0x8000, 0x9000000000000, 0x7, 0x5, 0x7411, 0x4, 0x8, 0x9, 0x8001, 0x100, 0x1c5, 0x7, 0xfffffffffffffffe, 0x0, 0x2c47, 0xffff, 0x81, 0xffffffffffff1769, 0x3, 0xad, 0x3800000, 0x4f0, 0x0, 0x80, 0x100000001, 0x9, 0x1, 0x400, 0x8001, 0x400, 0x3ff, 0x670e, 0x7f, 0x200, 0xfff, 0x7fffffff, 0x6, 0xe51d, 0x7, 0x0, 0x0, 0x1, 0x7fffffff, 0x0, 0x2, 0x1f, 0xaa9, 0x1, 0x0, 0x5, 0x2, 0x40, 0x7, 0xd31, 0xffffffff, 0x9, 0x2, 0x5, 0x8, 0x5, 0x7, 0x9, 0x9, 0x7, 0x401, 0x10000, 0x7fffffff, 0x6, 0x20, 0x3, 0x8, 0x340, 0xffffffffffff7c31, 0x8, 0x289c8036, 0xfffffffffffffffd, 0x7, 0x8, 0x79, 0x9, 0x400, 0x6, 0x9, 0x4, 0xe56, 0x937, 0x6, 0x1f, 0xd7ee, 0x8000, 0x4, 0xfffffffffffff907, 0xffffffff, 0x5, 0x3, 0x6, 0x5, 0x400, 0x5, 0x8, 0x401, 0x84b, 0x6, 0x7fffffff, 0xa10, 0x2, 0x4, 0xffffffff, 0xe1c, 0x3, 0xf0, 0x24f, 0x9, 0x5, 0x6b4, 0x100000000, 0x21, 0x10001, 0x9a, 0xe8, 0xffffffffffffff01]}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) 18:30:33 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 380.195200][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:33 executing program 5: unshare(0x2000400) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents(r0, &(0x7f00000004c0)=""/59, 0x3b) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket(0x400000000010, 0x3, 0x0) write(r4, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000280)="2400000020002551075c0165ff0ffc020a00000000100f0007e1000c080017001600f000", 0x24) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)={0x4c, r2, 0x8, 0x7, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4489c) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3bc}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x81}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xffffffffffff7fff}]}, 0x48}, 0x1, 0x0, 0x0, 0x44841}, 0x40) socket$l2tp(0x2, 0x2, 0x73) getdents64(r0, 0x0, 0x42) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000100)=r8, 0x1) [ 380.219097][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 380.233203][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) 18:30:33 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VT_OPENQRY(r3, 0x5600, &(0x7f0000000140)) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9a9d, 0x100) write$FUSE_IOCTL(r4, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x9, 0x4, 0x81, 0x40000}}, 0x20) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) r5 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r5, 0x1) [ 380.344693][T32036] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 380.360568][T32036] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:33 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 18:30:33 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) [ 380.415746][T32036] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 380.477856][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 380.510080][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 380.551940][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 380.697087][T32036] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 380.706002][T32036] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 380.726070][T32036] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:33 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x12, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:33 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:33 executing program 5: unshare(0x4000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 18:30:33 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:33 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) [ 380.826378][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:33 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 380.847784][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 380.873475][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:34 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) 18:30:34 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:30:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 18:30:34 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000000)={0x2, 0x400, 0x3c, 0x2, 0x8, 0xcc}) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r5 = dup2(r3, r3) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100)=r5, 0x1) 18:30:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) [ 381.117640][T32167] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 381.144034][T32167] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 381.186120][T32167] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 381.238504][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 381.248557][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 381.264541][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 381.427610][T32167] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 381.433801][T32167] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 381.445889][T32167] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 381.464259][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 381.470902][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 381.483878][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:34 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:30:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:34 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) 18:30:34 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:30:34 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000000)={{0x3, @name="145084ec186b0a68d8fc6db9bd9bc5150e3b17a123ebdee19e14aca96c1befc2"}, 0x8, 0x401}) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100)=r4, 0x1) 18:30:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 18:30:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) [ 381.701078][T32271] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 381.710447][T32271] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:34 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:30:34 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) [ 381.752621][T32271] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 381.781830][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:34 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 18:30:34 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000000)={0x0, 0x0, 0x1a}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = io_uring_setup(0xa4, &(0x7f0000000080)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000280)=[r7, 0xffffffffffffffff, r6], 0x3) getsockname$unix(r7, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f0000000240)={0x2a9, 0x1, 0x30b, 0x8, &(0x7f0000000200)=[{0x0, 0x0, 0x40}, {0x7fff, 0x0, 0x8c0, 0x101}, {0x1, 0xafd2, 0x80, 0x3}, {0x1ff, 0x81, 0x800, 0xaff}, {0x800, 0x401, 0x5}, {0x1, 0x1, 0x8000, 0x7}, {0x58, 0x21, 0x40, 0x837}, {0xa08, 0x2, 0x3, 0x400}]}) r8 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r8, 0xffffffffffffffff, r4], 0x3) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 381.813005][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 381.868359][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:35 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) [ 381.992516][T32271] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 382.004890][T32271] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 382.016625][T32271] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x25, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:35 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:30:35 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) [ 382.101401][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 382.134656][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) [ 382.153703][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:35 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x6001c0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82) ioctl$LOOP_CTL_ADD(r5, 0x4c80, r8) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000e14010025bd7000fcdbdf21080003000000000008003c00040000001b48564caf93d63f0558101f5fc16698c1b5277e3415e9d524afff424da3f394df3221285c2750d632be"], 0x20}}, 0x20000810) 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) 18:30:35 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 18:30:35 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) [ 382.307186][T32408] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 382.314593][T32408] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 382.330767][T32408] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:35 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:35 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) [ 382.509267][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 382.555731][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 382.581382][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 382.599297][T32408] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:35 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x26, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) 18:30:35 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) 18:30:35 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) r4 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000196e1ab0f1c4923e6bceb00c59dae6876c23cc942ac3329303888682a5dcdc429c267c282305c485d594965064ac6b37e2eae3e4f56181926db07e6ca0b57796bee0655ae69d0a6e7c0ee4d5c90f1b8dd655249532912110325a413dc57e5213d01b1edbcec99fc4d8a3f4376cab8225a7f1b80f6b2bdb504da4757b3e6204a00889b3f2d1bc5c94f95f4910d0e3e58a5b95c4147c1bb54ac69e705a8c7f3904e571d2e7db9ba4f5e39f9173d4929c7e6d75e76626d10e47b712f52f2e489dba7b27ecc7951abc597cf471dc9d26af6f3600000006f4146287d546b74cd50546e97d0924b15576755d46abfdb014aaa8f1f4c2e00109375fb86e02a9a4a006c0b1d9650f3ca3", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={r6, 0x7c, &(0x7f0000000000)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @rand_addr=0x3}, @in6={0xa, 0x4e23, 0x9, @loopback, 0x200}, @in={0x2, 0x81, @local}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000001c0)={r8, 0xa1, "ed7bcda99f450b6a4982f95d936064c4de691246bf20503950f13911ef96d0f1b860da27c54deb915466abbee30d42ce7160caf8ba65c58d5d8de4e22122b32ed4c6bd01c5bcc71d55bc47b12b85911a967a51e98b6635aa5272e2144272889c50e36698328eee5deb405d045cf057d1d068a2b6ec96292816af1ec7b8e5c0582b552ee28fcf6f88abfe120bacda82c4be8e30e2e0887d09bf2abccfb69c3ae1cf"}, &(0x7f0000000280)=0xa9) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000440)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x14) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r10, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x0, 0x5, 0x1, 0xfffffffb, 0x6}, 0x14) [ 382.607208][T32408] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 382.619273][T32408] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) 18:30:35 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) 18:30:35 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) [ 382.826203][T32517] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 382.843528][T32517] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:35 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 18:30:35 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r4], 0x3) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 382.867542][T32517] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:36 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:36 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) [ 382.975506][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 382.997854][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 383.026293][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 383.154844][T32517] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 383.162925][T32517] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 383.178494][T32517] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 383.196623][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:30:36 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x0) 18:30:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x27, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:36 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) [ 383.203939][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 383.214846][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:36 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x8001, 0x8, 0x4db, 0x4, 0x2, 0x200, 0x5, r4}, &(0x7f0000000040)=0x20) r6 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r6, 0x1) 18:30:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:30:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 18:30:36 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) 18:30:36 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:36 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x0) 18:30:36 executing program 5: unshare(0x2000400) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000140)={{0x3, 0x1, 0xc00, 0x7, 'syz1\x00'}, 0x1, [0x18d9, 0x90be, 0x4000000000, 0x4, 0x4, 0x1, 0x0, 0x7fff, 0x80000000, 0x8, 0xf94, 0x6, 0x80000000, 0x4234, 0x6, 0x81, 0x54, 0x10000, 0x1f, 0x7, 0x1, 0x3f, 0x8e74, 0x5, 0x80, 0x728, 0x400, 0x8, 0x5, 0x8, 0x0, 0x0, 0x1, 0x4, 0x5, 0x2, 0x32, 0x100, 0x81, 0xfffffffffffffff8, 0x7, 0x2, 0x1fc000000000000, 0x3, 0x1, 0x4, 0x5, 0x9, 0xfffffffffffffff9, 0x400, 0x80000000, 0x5, 0x8, 0x56be, 0x5, 0x5, 0x9, 0x9f, 0xfffffffffffffffc, 0x9, 0x2, 0x5, 0x9, 0x596, 0x2, 0x80000000, 0x8, 0x40, 0x5, 0xff, 0x2, 0x5, 0x7fff, 0xb8, 0x6, 0x5c44, 0x4, 0xffffffffffffff00, 0x1, 0x2000000000000, 0x4, 0x101, 0x100, 0xffffffffffff95f5, 0x3, 0x8000, 0x6, 0x20, 0xb28, 0x7fff, 0x8, 0x3, 0x1, 0x4, 0x9, 0x7, 0x2, 0x5, 0x9, 0xffffffffc52d7c9e, 0x78c, 0x8, 0x400, 0x1, 0xc334, 0x2, 0x1, 0x0, 0x8000, 0x0, 0x1, 0x5, 0x5, 0x8, 0x0, 0x1, 0x100, 0x3, 0x200, 0x38, 0x8000, 0x80000001, 0x1, 0x3, 0xfffffffffffffffa, 0x2, 0x1, 0x1]}) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) [ 383.527406][T32644] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 383.548910][T32644] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 383.595561][T32644] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:36 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, r1]}, 0x2) 18:30:36 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) [ 383.826626][T32644] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 383.839872][T32644] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 383.853677][T32644] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:36 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x2c, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:36 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 18:30:36 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x0) 18:30:36 executing program 5: unshare(0x40000000) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x1c, 0x35, 0xc, 0xc, 0x4, 0x3, 0x200003, 0x135, 0xffffffffffffffff}}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:36 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 383.945563][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 383.962467][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 383.983330][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 384.005091][T32738] IPVS: ftp: loaded support on port[0] = 21 18:30:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 18:30:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 384.130808][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:37 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:37 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:37 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) [ 384.152123][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 384.242049][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 384.242664][T32738] IPVS: ftp: loaded support on port[0] = 21 18:30:37 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 384.308457][T32766] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 384.317982][T32766] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 384.339791][T32766] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 384.551804][T32766] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 384.558280][T32766] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 384.592500][T32766] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:37 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 18:30:37 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:30:37 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x64, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) [ 384.852366][ T413] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 384.868221][ T413] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 384.911826][ T413] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 385.140378][ T413] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 385.150931][ T413] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 385.185994][ T413] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 385.275169][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 385.286897][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 385.315004][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:39 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x18, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:39 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 18:30:39 executing program 3: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x18, 0x0, 0xfffffffe) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = io_uring_setup(0xa4, &(0x7f0000000000)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000200)=[r8, r2, r7, 0xffffffffffffffff, r2, 0xffffffffffffffff], 0x6) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x3) io_uring_register$IORING_UNREGISTER_FILES(r6, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000100)=r5, 0x1) 18:30:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d6, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:39 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RLOPEN(r2, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x10, 0x4, 0x7}, 0x7ff}}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000140)={0x4, 0x8, 0x0, 'queue0\x00', 0x7}) r5 = socket$phonet(0x23, 0x2, 0x1) shutdown(r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = dup2(r6, 0xffffffffffffffff) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r8, 0x1) 18:30:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) [ 386.370605][ T7] tipc: TX() has been purged, node left! 18:30:39 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 386.432107][ T500] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) [ 386.454116][ T500] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:39 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 386.509068][ T500] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) 18:30:39 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:39 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:30:39 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) 18:30:39 executing program 3: unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 18:30:39 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 386.799114][ T500] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 386.807988][ T500] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 386.827323][ T500] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x204, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:39 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa7, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x7ffffffd}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$rfkill(r4, &(0x7f0000000040), 0x8) r5 = dup2(r1, r1) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000014000104000000000000000002000000", @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f00000001c0)={r7, 0x1, 0x6, @local}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r5, 0x1) 18:30:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 18:30:40 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:30:40 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:40 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x6e20, 0x80000001, @ipv4={[], [], @empty}}, 0x1c) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x20003, 0x0) r6 = dup2(r5, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCCONS(r6, 0x541d) 18:30:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) [ 387.131072][ T612] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 387.144635][ T612] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 387.187218][ T612] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 18:30:40 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r7, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) 18:30:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 18:30:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 18:30:40 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 387.390915][ T612] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 387.397663][ T612] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 387.425464][ T612] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x22a, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:40 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x0, 0x6, '9P2000'}, 0x13) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) sched_getparam(r3, &(0x7f0000000040)) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x4800, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) 18:30:40 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 18:30:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) 18:30:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) 18:30:40 executing program 0: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:40 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:30:40 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 18:30:40 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) 18:30:40 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) r5 = socket$inet6(0xa, 0x800, 0x7) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f00000001c0)={0x3, 'ip6_vti0\x00', {}, 0x1e99}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r7 = dup(r5) ioctl$MON_IOCG_STATS(r7, 0x80089203, &(0x7f0000000040)) r8 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r8, 0xffffffffffffffff, r4], 0x3) connect$rose(r8, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) [ 387.791324][ T709] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 387.801317][ T709] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:40 executing program 0: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 387.843213][ T709] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) [ 388.041176][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 388.048751][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 388.060885][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 388.079067][ T709] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 388.086573][ T709] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 388.100867][ T709] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:41 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 18:30:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:30:41 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:30:41 executing program 0: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 18:30:41 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:30:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 18:30:41 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0x40a1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x338}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x8}, 0x10) r5 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) write$rfkill(0xffffffffffffffff, &(0x7f0000000180)={0xffffff2d, 0x1, 0x2, 0x1, 0x1}, 0x8) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5, 0xfffffffc, 0x8000, r7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup2(r8, r8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r9, 0x1) [ 388.395511][ T830] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 388.410397][ T830] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:41 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) [ 388.449038][ T830] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:41 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) [ 388.718313][ T830] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 388.753630][ T830] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 388.787315][ T830] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:41 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x32d, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:41 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$inet_dccp_int(r6, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18:30:41 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:41 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) [ 388.810925][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 388.824973][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 388.836992][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:41 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 18:30:41 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f0000000140)=r5) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 18:30:42 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:42 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 389.060857][ T936] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 389.067826][ T936] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:42 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:42 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) [ 389.170499][ T936] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:42 executing program 5: unshare(0x2000400) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcsa\x00', 0x8000, 0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x257}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = socket$netlink(0x10, 0x3, 0x0) ioctl(r4, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x29800820}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000004) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x111100, 0x0) ioctl$RTC_WKALM_SET(r5, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x26, 0x1f, 0x4, 0xe, 0x3, 0x5, 0x1, 0x16c}}) [ 389.380098][ T936] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 389.390226][ T936] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 389.411003][ T936] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:42 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:42 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:42 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 18:30:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 18:30:42 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:42 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) dup3(r1, r2, 0x0) dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000140)=r4, 0x1) 18:30:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 18:30:42 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:42 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:42 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 18:30:42 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:42 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) lookup_dcookie(0x800, &(0x7f0000000140)=""/131, 0x83) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) [ 389.817325][ T1032] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 389.842694][ T1032] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 389.890741][ T1032] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 389.985062][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 389.992906][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 390.011069][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 390.148830][ T1032] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 390.166877][ T1032] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 390.198287][ T1032] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x600, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:43 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) 18:30:43 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet(0x2b, 0x1, 0x0) 18:30:43 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:43 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa8, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x0, 0xfffffffc}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = io_uring_setup(0x5fd, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0xa8}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000280)=[r4, 0xffffffffffffffff, r3], 0x3) bind$isdn_base(r4, &(0x7f0000000140)={0x22, 0x9, 0xdc, 0x40, 0x1}, 0x6) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SOUND_PCM_READ_BITS(r7, 0x80045005, &(0x7f0000000180)) r8 = dup2(r5, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r8, 0x1) [ 390.283449][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 390.326629][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:43 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 390.374176][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 18:30:43 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) 18:30:43 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 390.541003][ T1157] loop4: p1 < > p2 p3 < p5 p6 > p4 18:30:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) [ 390.570115][ T1157] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 390.592514][ T1157] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:43 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet(0x2b, 0x1, 0x0) [ 390.785386][ T1157] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 390.794947][ T1157] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 390.821887][ T1157] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:43 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:30:43 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) 18:30:43 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:43 executing program 5: unshare(0xa000180) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x4, @mcast1, 0x3}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000001c0)={0x8, &(0x7f0000000140)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r2, r4, 0xffffffffffffffff, 0xffffffffffffffff]}, 0xffffffffffffffd7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TIOCNXCL(r7, 0x540d) preadv(r1, &(0x7f00000000c0), 0x0, 0x2005) truncate(&(0x7f0000000200)='./file0\x00', 0x19bb) 18:30:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) 18:30:44 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) socket$inet(0x2b, 0x1, 0x0) 18:30:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) 18:30:44 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:30:44 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:44 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getpeername$llc(r3, &(0x7f0000000040), &(0x7f0000000140)=0x10) 18:30:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) [ 391.149703][ T1258] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 391.163996][ T1258] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 391.215127][ T1258] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 391.458164][ T1258] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 391.477298][ T1258] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 391.495352][ T1258] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:44 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xffa, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}) 18:30:44 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x20, 0x11, 0xa2b}, 0x20}}, 0x0) 18:30:44 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:44 executing program 5: unshare(0xc000000) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:44 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) [ 391.534610][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 391.541018][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 391.567782][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}) 18:30:44 executing program 2: r0 = socket$inet(0x2b, 0xa, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x44) unshare(0x2000400) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) r2 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1d7) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002011400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000000c76f4503775e3a23a7073ab87e54d66704d2654729"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32=r8, @ANYBLOB="08000200ffffe5bf"], 0x3}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 18:30:44 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25]}) 18:30:44 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 391.785032][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 391.798768][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:44 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000180)={0x72, "0757d9f4aaca7fcb0be7a2e55ca56a15358a6528f79c5d6b3b5241a0a9b2422acadb925c866a7bffc1661fdd7ba9215b196641890737c43c6568200fe9f65abb4d76e61b48f2bfb592cc70e44c38a10182c477396e21bdaadb5e54d69f23bfefb36db254050c0a25dc789841ad3b6ee00407"}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @empty, 0x9}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r5 = dup2(r2, r3) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r5, 0x1) [ 391.826603][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 391.848987][ T1349] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 391.858395][ T1349] loop4: p2 size 1073741824 extends beyond EOD, truncated 18:30:44 executing program 5: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x220000, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) [ 391.871874][ T1349] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 391.964679][ T1423] QAT: Invalid ioctl 18:30:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x3c00, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c]}) 18:30:45 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:45 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:45 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:45 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x3fb, 0x8, 0x70bd2d, 0x25dfdbff, "", ["", "", ""]}, 0xffffffbe}, 0x1, 0x0, 0x0, 0x24000095}, 0x80) r3 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 18:30:45 executing program 5: unshare(0x3c040000) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000180)=0x8cc2) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x227d, &(0x7f00000001c0)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x7, 0x4) r4 = dup2(r1, r1) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000140)={0x7, 'ipvlan1\x00', {0x94c5}, 0x98fd}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r4, 0x1) 18:30:45 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:45 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 18:30:45 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25GETUID(r3, 0x89e0, &(0x7f0000000180)={0x3, @default, r5}) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) [ 392.560801][ T1461] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 392.568569][ T1461] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 392.604605][ T1461] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 392.633841][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 392.641952][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 392.654739][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:45 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xbb00, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:45 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280), 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 18:30:45 executing program 5: unshare(0x48000080) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x3) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:45 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) socket$inet_icmp(0x2, 0x2, 0x1) 18:30:45 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:45 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) [ 392.947253][ T1561] IPVS: ftp: loaded support on port[0] = 21 18:30:46 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}) 18:30:46 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 18:30:46 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) [ 393.227065][ T1561] IPVS: ftp: loaded support on port[0] = 21 [ 393.710110][ T1564] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 393.716868][ T1564] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 393.733635][ T1564] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 393.749159][ T177] tipc: TX() has been purged, node left! [ 393.752400][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 393.762725][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 393.775984][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:46 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xbd00, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:46 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:46 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:46 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}) 18:30:46 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:46 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000001080)='fou\x00') sendmsg$FOU_CMD_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, r4, 0x29, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40041) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000240)) r6 = dup2(r1, r1) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0x72, &(0x7f00000000c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r8, @in={{0x2, 0x4e20, @remote}}, 0x0, 0x18f, 0x101, 0x3, 0x41, 0x9, 0x1f}, &(0x7f0000000380)=0x9c) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r6, 0x1) 18:30:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}) 18:30:47 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:47 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x4, 0x0, [{0x80000019, 0x1, 0x5, 0x5, 0x4ff5c854, 0x2, 0x7}, {0x7, 0x1, 0x2, 0x14, 0x4, 0x6100, 0x9b}, {0x1, 0x7278, 0x6, 0xfffffffe, 0xfff, 0x1024f4a4, 0x6}, {0xd, 0xa91, 0x9, 0x7fffffff, 0x4, 0x6, 0x9}]}) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00]}) 18:30:47 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:47 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) [ 394.550225][ T1716] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 394.558391][ T1716] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 394.594336][ T1716] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) 18:30:47 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:47 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:47 executing program 2: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:47 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xbe00, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:47 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xd0e, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x1}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:47 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}) 18:30:48 executing program 2: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}) 18:30:48 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x222102, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000040)) unshare(0x2000400) r1 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x238}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:48 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:48 executing program 2: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:48 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) socket(0x10, 0x2, 0x0) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500]}) 18:30:48 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) [ 395.439180][ T1797] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 395.460350][ T1797] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 395.477051][ T1797] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:48 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xbf00, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:48 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:48 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) vmsplice(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="7d96adee4e53260eeca422df1fe19d666692f6775b9b29daba1001ea735219f8a557d3c99bb9f6316e052b037f812f3b33e0f1079f1774d3ed3a0ae547caf6374aaa21c166ebf67aa7a50dabd8bd22079c8c16068f366799d9c0d5be362567cb66e809e3af33da09b9d77e283c3bec313f2e902546d42e", 0x77}], 0x1, 0x5) unshare(0x12050880) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f00000002c0)={0x0, &(0x7f0000000280)="8be12733de74565e237fe9f1b53aaba56afc9842c34e7ed9f2d9bff059bc3764a0a68e7b9ca0c322dc", 0x29}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f0000000240)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) fcntl$getownex(r6, 0x10, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5201) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00]}) 18:30:48 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) socket(0x10, 0x2, 0x0) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:48 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:48 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:48 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 18:30:48 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:48 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:49 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000002c0), &(0x7f0000000300)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = io_uring_setup(0xa4, &(0x7f0000000080)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r4], 0x3) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x481, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x2, 0x1, 0x1, 0x3}) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x1f8, @local, 0x5}}, 0x24) r7 = dup2(r2, r2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r7, 0x1) 18:30:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 396.463767][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 396.473868][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 396.487847][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated [ 396.508209][ T1907] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 396.516711][ T1907] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 396.531670][ T1907] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:49 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xc200, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:49 executing program 2: r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:49 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) socket(0x10, 0x2, 0x0) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:49 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 18:30:49 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e21, 0x6, @empty, 0xb}}, 0x0, 0x0, 0x1f, 0x0, "67ea08c128d0f5cdd079331fbcfc649d413b0920dc35f9baaaed6b83dc3755f268e7ce11e66a24e0c61e21658ef6c9901d3b898515b55da7c6edb3c5fd2fcedb00"}, 0xd8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) waitid$P_PIDFD(0x3, r4, &(0x7f0000000000), 0x20000000, &(0x7f0000000140)) 18:30:49 executing program 2: r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:49 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 18:30:50 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:50 executing program 5: unshare(0x2000400) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffa000/0x4000)=nil], &(0x7f0000000040)=[0x401], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:50 executing program 2: r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 397.480597][ T2001] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 397.488437][ T2001] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 397.512958][ T2001] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:50 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xc400, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:50 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:50 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 18:30:50 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:50 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, r4}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000480), r5, r3}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000000)={0xf, 0x8, 0xfa00, {r5, 0x2}}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r8, 0x1) 18:30:50 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:30:50 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:50 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:51 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 18:30:51 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:51 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xc600, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:51 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000]}) 18:30:51 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000140)=""/225) write$snddsp(r1, &(0x7f00000002c0)="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", 0x1000) r2 = io_uring_setup(0xa4, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_open_dev$swradio(&(0x7f0000000280)='/dev/swradio#\x00', 0x0, 0x2) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100)=r4, 0x1) getsockopt$netlink(r4, 0x10e, 0x7, &(0x7f0000000000)=""/90, &(0x7f0000000240)=0x5a) 18:30:51 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:51 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:51 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 18:30:51 executing program 5: unshare(0x2000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x3f, 0x5, 0x6, 0x2, 0x5, 0x8}) r2 = io_uring_setup(0xa4, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xfffffffd, 0x400004}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000100)=r4, 0x1) ioctl$EVIOCREVOKE(r4, 0x40044591, &(0x7f0000000000)=0x69486778) 18:30:52 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:52 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:52 executing program 5: unshare(0x2000400) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="0b24a96f4ec172935f0aba230ae2aea42f28559f967874c2e46cd812ab2de964ee94a8f03abcc5e8d7787d6869064ce86681a90250edeacf449332910491e32095cae04597a018f9ece361defb834d7ad02dac80bbe4aed11477c3c5d90faf7bf5da27ead01abe022c93c3dcb9ade27d9d5c61d4f50c0ebb7b8435e448d0764ed4fcb0498bfb89ec1f639f773eeca3a1994a2af229375b0de42aa60a2aa3ed91e98f626b95947ecec5e6f5b896197fbad45a940fdd0a1ed03bc30c59aefc09af8c62d6063146e8c9cd88891cee687949c83345efe2bf", 0xd6, 0x6}], 0x8000, &(0x7f0000000280)={[{@user_subvol_rm='user_subvol_rm_allowed'}, {@compress_force='compress-force'}, {@noautodefrag='noautodefrag'}], [{@context={'context', 0x3d, 'root'}}]}) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='trusted.overlay.nlink\x00', &(0x7f0000000380)={'U+', 0xffffffff}, 0x16, 0x3) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb000000]}) 18:30:52 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0xc700, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:52 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:52 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000000]}) 18:30:52 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:52 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0x400a4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0x72, &(0x7f00000000c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000140)={r6, 0x8}, &(0x7f0000000180)=0x8) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000040)=0x800, 0x4) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000000)={0x7, 0xcbf1}) r9 = pkey_alloc(0x0, 0x0) pkey_free(r9) 18:30:52 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd000000]}) [ 399.955586][ T2217] debugfs: Directory 'vcpu0' with parent '2217-5' already present! 18:30:53 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) 18:30:53 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x37a}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071") r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x400, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x44882}, 0x800) 18:30:53 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) [ 400.108849][ T8333] tipc: TX() has been purged, node left! 18:30:53 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_setup(0xa4, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) [ 400.753212][ T2221] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 400.764361][ T2221] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 400.787478][ T2221] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:53 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1963a, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:53 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:53 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000]}) 18:30:53 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:30:53 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = dup2(r1, r2) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r3, 0x1) 18:30:53 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_setup(0xa4, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) [ 400.854440][ T4113] loop4: p1 < > p2 p3 < p5 p6 > p4 [ 400.867878][ T4113] loop4: p2 size 1073741824 extends beyond EOD, truncated [ 400.907763][ T4113] loop4: p5 size 1073741824 extends beyond EOD, truncated 18:30:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000]}) 18:30:54 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:30:54 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_setup(0xa4, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:54 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000000]}) 18:30:54 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:54 executing program 5: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KDSETLED(r3, 0x4b32, 0x8001) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.mem_exclusive\x00', 0x2, 0x0) fchdir(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r5 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[r5, 0xffffffffffffffff, r1], 0x3) accept4$rose(r5, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@netrom, @default, @remote, @netrom, @netrom, @netrom]}, &(0x7f0000000040)=0x40, 0x800) unshare(0x2000400) r6 = io_uring_setup(0xa4, &(0x7f0000000080)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TCSETA(r8, 0x5406, &(0x7f00000001c0)={0x5153, 0xfff7, 0x6, 0x0, 0x19, "7fdf8173f5764967"}) r9 = dup2(r7, r7) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000100)=r9, 0x1) 18:30:55 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1963b, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25000000]}) 18:30:55 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:55 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:30:55 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:55 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c000000]}) 18:30:55 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:55 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, &(0x7f0000000140)={0x5, 0x10000, 0x8001}) r4 = dup2(r1, r1) accept$phonet_pipe(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r4, 0x1) 18:30:55 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:55 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:30:55 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:56 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1963c, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:56 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x1, 0x6, r1, 0x0, &(0x7f0000000040)={0x9b0001, 0xc1b, [], @p_u16=&(0x7f0000000000)=0x2}}) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000180)=0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) write$smackfs_access(r5, &(0x7f00000001c0)={'selfcpuset', 0x20, '/', 0x20, 'rb'}, 0x10) 18:30:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:30:56 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:56 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:56 executing program 3: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 18:30:56 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x1, 0x6, r1, 0x0, &(0x7f0000000040)={0x9b0001, 0xc1b, [], @p_u16=&(0x7f0000000000)=0x2}}) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000180)=0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) write$smackfs_access(r5, &(0x7f00000001c0)={'selfcpuset', 0x20, '/', 0x20, 'rb'}, 0x10) 18:30:56 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff]}, 0x2) 18:30:56 executing program 3: unshare(0x2000400) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:56 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 18:30:56 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:57 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1963d, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:57 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x1, 0x6, r1, 0x0, &(0x7f0000000040)={0x9b0001, 0xc1b, [], @p_u16=&(0x7f0000000000)=0x2}}) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000180)=0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) write$smackfs_access(r5, &(0x7f00000001c0)={'selfcpuset', 0x20, '/', 0x20, 'rb'}, 0x10) 18:30:57 executing program 3: unshare(0x2000400) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 18:30:57 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, 0x0}, 0x0) 18:30:57 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:57 executing program 3: unshare(0x2000400) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:57 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 18:30:57 executing program 5: unshare(0x2000400) r0 = io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x1, 0x6, r1, 0x0, &(0x7f0000000040)={0x9b0001, 0xc1b, [], @p_u16=&(0x7f0000000000)=0x2}}) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000180)=0x8) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000100)=r2, 0x1) 18:30:57 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, 0x0}, 0x0) 18:30:57 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:57 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:58 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1963e, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:58 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, 0x0}, 0x0) 18:30:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 18:30:58 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x1, 0x6, r0, 0x0, &(0x7f0000000040)={0x9b0001, 0xc1b, [], @p_u16=&(0x7f0000000000)=0x2}}) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000180)=0x8) 18:30:58 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:58 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:58 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 18:30:58 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x1, 0x6, r0, 0x0, &(0x7f0000000040)={0x9b0001, 0xc1b, [], @p_u16=&(0x7f0000000000)=0x2}}) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000180)=0x8) 18:30:58 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:58 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:58 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) 18:30:58 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0x9c0000, 0x1, 0x6, r0, 0x0, &(0x7f0000000040)={0x9b0001, 0xc1b, [], @p_u16=&(0x7f0000000000)=0x2}}) 18:30:59 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1963f, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:30:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 18:30:59 executing program 3: r0 = io_uring_setup(0x0, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:59 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:30:59 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:30:59 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) 18:30:59 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 18:30:59 executing program 3: r0 = io_uring_setup(0xa4, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:59 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:30:59 executing program 3: r0 = io_uring_setup(0xa4, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:30:59 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) 18:30:59 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:31:00 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19640, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:00 executing program 3: r0 = io_uring_setup(0xa4, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000]}) 18:31:00 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) 18:31:00 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:31:00 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) 18:31:00 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:00 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 18:31:00 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) socket$inet6_tcp(0xa, 0x1, 0x0) 18:31:01 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, 0x0, 0x0) 18:31:01 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) 18:31:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00000000000000]}) 18:31:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19641, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:01 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) 18:31:01 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:01 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) 18:31:01 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00000000000000]}) 18:31:01 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x0, &(0x7f0000000100)=[0xffffffffffffffff]}, 0x1) 18:31:02 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) 18:31:02 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) 18:31:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00000000000000]}) 18:31:02 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:31:02 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) 18:31:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19642, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:02 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) socket$inet6_tcp(0xa, 0x1, 0x0) 18:31:02 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, 0x0}, 0x0) 18:31:02 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000]}) 18:31:02 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:31:02 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:03 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) socket$inet6_tcp(0xa, 0x1, 0x0) 18:31:03 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000]}) 18:31:03 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x0) 18:31:03 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:31:03 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:03 executing program 5: unshare(0x2000400) io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) 18:31:04 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19643, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000]}) 18:31:04 executing program 5: io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) 18:31:04 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x0) 18:31:04 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:04 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:04 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2500000000000000]}) 18:31:04 executing program 5: io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) 18:31:04 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:04 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}, 0x0) 18:31:04 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:04 executing program 5: io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) 18:31:05 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19644, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c00000000000000]}) 18:31:05 executing program 5: io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x0, 0x282}) 18:31:05 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x9, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:31:05 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:05 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:05 executing program 5: io_uring_setup(0x8df, 0x0) 18:31:05 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:31:05 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x9, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:31:05 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:05 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:05 executing program 5: io_uring_setup(0x8df, 0x0) 18:31:06 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19645, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:06 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 18:31:06 executing program 5: io_uring_setup(0x8df, 0x0) 18:31:06 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x9, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:31:06 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:06 executing program 5: io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x282}) 18:31:06 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:06 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 18:31:06 executing program 0: unshare(0x2000400) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:06 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:06 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x8, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:31:07 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19646, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:07 executing program 5: io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x282}) 18:31:07 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 18:31:07 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:07 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x8, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) socket$inet_icmp(0x2, 0x2, 0x1) 18:31:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 18:31:07 executing program 5: io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x282}) 18:31:07 executing program 0: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:07 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x3, &(0x7f0000000100)=r2, 0x1) 18:31:07 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:07 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 18:31:08 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19647, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:08 executing program 5: io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5}) 18:31:08 executing program 2: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x3, &(0x7f0000000100)=r2, 0x1) 18:31:08 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:08 executing program 0: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 18:31:08 executing program 2 (fault-call:2 fault-nth:0): r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:31:08 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 18:31:08 executing program 5 (fault-call:0 fault-nth:0): io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5}) 18:31:08 executing program 0: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:09 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) [ 415.965013][ T3093] FAULT_INJECTION: forcing a failure. [ 415.965013][ T3093] name failslab, interval 1, probability 0, space 0, times 0 [ 415.989363][ T3088] FAULT_INJECTION: forcing a failure. [ 415.989363][ T3088] name failslab, interval 1, probability 0, space 0, times 0 [ 416.033788][ T3088] CPU: 0 PID: 3088 Comm: syz-executor.2 Not tainted 5.6.0-syzkaller #0 [ 416.042963][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.053056][ T3088] Call Trace: [ 416.056367][ T3088] dump_stack+0x1e9/0x30e [ 416.060714][ T3088] should_fail+0x433/0x5b0 [ 416.065138][ T3088] ? __io_sqe_files_scm+0x18b/0x680 [ 416.070363][ T3088] should_failslab+0x5/0x20 [ 416.074869][ T3088] kmem_cache_alloc_trace+0x57/0x300 [ 416.080160][ T3088] __io_sqe_files_scm+0x18b/0x680 [ 416.085187][ T3088] ? lockdep_hardirqs_on+0x4a4/0x8a0 [ 416.090471][ T3088] ? _raw_spin_unlock_irq+0x1f/0x80 [ 416.095695][ T3088] __io_sqe_files_update+0x866/0xb40 [ 416.101195][ T3088] ? __might_fault+0xf5/0x150 [ 416.105902][ T3088] __se_sys_io_uring_register+0x7d8/0x3020 [ 416.113581][ T3088] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 416.119068][ T3088] ? retint_kernel+0x2b/0x2b [ 416.123695][ T3088] ? do_syscall_64+0xb5/0x1b0 [ 416.128387][ T3088] ? __x64_sys_io_uring_register+0x1b/0xa0 [ 416.135863][ T3088] do_syscall_64+0xf3/0x1b0 [ 416.141510][ T3088] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 416.150634][ T3088] RIP: 0033:0x45c889 [ 416.154564][ T3088] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.174177][ T3088] RSP: 002b:00007fc518314c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 416.182594][ T3088] RAX: ffffffffffffffda RBX: 00007fc5183156d4 RCX: 000000000045c889 [ 416.190569][ T3088] RDX: 0000000020000300 RSI: 0000000000000006 RDI: 0000000000000003 [ 416.198556][ T3088] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 416.206546][ T3088] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000004 [ 416.214525][ T3088] R13: 00000000000001fe R14: 00000000004d2f88 R15: 0000000000000000 18:31:09 executing program 0: unshare(0x0) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 416.241125][ T3093] CPU: 1 PID: 3093 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 416.249503][ T3093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.259687][ T3093] Call Trace: [ 416.263000][ T3093] dump_stack+0x1e9/0x30e [ 416.267345][ T3093] should_fail+0x433/0x5b0 [ 416.271780][ T3093] ? __se_sys_io_uring_setup+0x59f/0x2540 [ 416.277508][ T3093] should_failslab+0x5/0x20 [ 416.282024][ T3093] kmem_cache_alloc_trace+0x57/0x300 [ 416.287330][ T3093] __se_sys_io_uring_setup+0x59f/0x2540 [ 416.292902][ T3093] ? ksys_write+0x1b1/0x220 [ 416.297407][ T3093] ? ksys_write+0x1b1/0x220 [ 416.301963][ T3093] do_syscall_64+0xf3/0x1b0 [ 416.307043][ T3093] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 416.312945][ T3093] RIP: 0033:0x45c889 [ 416.316843][ T3093] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.336456][ T3093] RSP: 002b:00007f7880858c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 416.346871][ T3093] RAX: ffffffffffffffda RBX: 00007f78808596d4 RCX: 000000000045c889 [ 416.354896][ T3093] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000008df [ 416.362879][ T3093] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 416.371302][ T3093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 416.379317][ T3093] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000000 18:31:09 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19648, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 18:31:09 executing program 5 (fault-call:0 fault-nth:1): io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5}) 18:31:09 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setuid(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:09 executing program 2 (fault-call:2 fault-nth:1): r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:31:09 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 416.703610][ T3122] FAULT_INJECTION: forcing a failure. [ 416.703610][ T3122] name failslab, interval 1, probability 0, space 0, times 0 [ 416.736482][ T3122] CPU: 0 PID: 3122 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 416.744779][ T3122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 416.755014][ T3122] Call Trace: [ 416.758333][ T3122] dump_stack+0x1e9/0x30e [ 416.762675][ T3122] should_fail+0x433/0x5b0 [ 416.767110][ T3122] ? __se_sys_io_uring_setup+0x5c8/0x2540 [ 416.772837][ T3122] should_failslab+0x5/0x20 [ 416.777635][ T3122] kmem_cache_alloc+0x53/0x2d0 [ 416.782429][ T3122] __se_sys_io_uring_setup+0x5c8/0x2540 [ 416.788262][ T3122] ? ksys_write+0x1b1/0x220 [ 416.792945][ T3122] ? ksys_write+0x1b1/0x220 [ 416.802173][ T3122] do_syscall_64+0xf3/0x1b0 [ 416.806679][ T3122] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 416.812569][ T3122] RIP: 0033:0x45c889 [ 416.816464][ T3122] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 416.836077][ T3122] RSP: 002b:00007f7880858c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 416.844849][ T3122] RAX: ffffffffffffffda RBX: 00007f78808596d4 RCX: 000000000045c889 18:31:09 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:09 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}) [ 416.852824][ T3122] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000008df [ 416.860796][ T3122] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 416.869117][ T3122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 416.877221][ T3122] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000001 18:31:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 18:31:10 executing program 5 (fault-call:0 fault-nth:2): io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5}) 18:31:10 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0x0, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:10 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) [ 417.142224][ T3145] FAULT_INJECTION: forcing a failure. [ 417.142224][ T3145] name failslab, interval 1, probability 0, space 0, times 0 [ 417.163783][ T3145] CPU: 0 PID: 3145 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 417.172427][ T3145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.182763][ T3145] Call Trace: [ 417.186350][ T3145] dump_stack+0x1e9/0x30e [ 417.191058][ T3145] should_fail+0x433/0x5b0 [ 417.195506][ T3145] ? __se_sys_io_uring_setup+0x64c/0x2540 [ 417.201541][ T3145] should_failslab+0x5/0x20 [ 417.206154][ T3145] kmem_cache_alloc_trace+0x57/0x300 [ 417.211545][ T3145] ? kmem_cache_alloc+0x21f/0x2d0 [ 417.216593][ T3145] __se_sys_io_uring_setup+0x64c/0x2540 [ 417.222178][ T3145] ? ksys_write+0x1b1/0x220 [ 417.226690][ T3145] ? ksys_write+0x1b1/0x220 [ 417.231236][ T3145] do_syscall_64+0xf3/0x1b0 [ 417.236531][ T3145] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 417.242874][ T3145] RIP: 0033:0x45c889 [ 417.246779][ T3145] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 417.267913][ T3145] RSP: 002b:00007f7880858c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 417.276670][ T3145] RAX: ffffffffffffffda RBX: 00007f78808596d4 RCX: 000000000045c889 [ 417.284742][ T3145] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000008df [ 417.293076][ T3145] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 417.301160][ T3145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 417.309401][ T3145] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000002 18:31:10 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x19649, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:10 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:10 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}) 18:31:10 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:10 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:31:10 executing program 5 (fault-call:0 fault-nth:3): io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5}) 18:31:10 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 417.776405][ T3169] FAULT_INJECTION: forcing a failure. [ 417.776405][ T3169] name failslab, interval 1, probability 0, space 0, times 0 [ 417.854343][ T3169] CPU: 1 PID: 3169 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 417.864987][ T3169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 417.875404][ T3169] Call Trace: [ 417.878712][ T3169] dump_stack+0x1e9/0x30e [ 417.883497][ T3169] should_fail+0x433/0x5b0 [ 417.887947][ T3169] ? __se_sys_io_uring_setup+0x715/0x2540 [ 417.893686][ T3169] should_failslab+0x5/0x20 [ 417.898738][ T3169] __kmalloc+0x74/0x330 [ 417.902932][ T3169] __se_sys_io_uring_setup+0x715/0x2540 [ 417.908524][ T3169] ? ksys_write+0x1b1/0x220 [ 417.913181][ T3169] do_syscall_64+0xf3/0x1b0 [ 417.918230][ T3169] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 417.924677][ T3169] RIP: 0033:0x45c889 [ 417.928763][ T3169] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 18:31:11 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 417.949212][ T3169] RSP: 002b:00007f7880858c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 417.957895][ T3169] RAX: ffffffffffffffda RBX: 00007f78808596d4 RCX: 000000000045c889 [ 417.967461][ T3169] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000008df [ 417.976676][ T3169] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 417.984936][ T3169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 417.992926][ T3169] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000003 18:31:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}) 18:31:11 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x3f00, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) 18:31:11 executing program 0: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:11 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:11 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1964a, &(0x7f0000000080)=[{&(0x7f0000000040)="02010500000000c70000ff07000000fffffffd000800000000000000004000ffffff8500000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:31:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}) 18:31:11 executing program 5 (fault-call:0 fault-nth:4): io_uring_setup(0x8df, &(0x7f0000000080)={0x0, 0x0, 0x5}) 18:31:11 executing program 0: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:11 executing program 3: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setuid(0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:11 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0x3f000000, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x3) [ 418.834208][ T3232] FAULT_INJECTION: forcing a failure. [ 418.834208][ T3232] name fail_page_alloc, interval 1, probability 0, space 0, times 0 18:31:11 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) [ 418.942569][ T3232] CPU: 0 PID: 3232 Comm: syz-executor.5 Not tainted 5.6.0-syzkaller #0 [ 418.951131][ T3232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.961223][ T3232] Call Trace: [ 418.964529][ T3232] dump_stack+0x1e9/0x30e [ 418.969495][ T3232] should_fail+0x433/0x5b0 [ 418.973938][ T3232] prepare_alloc_pages+0x28c/0x4a0 [ 418.979250][ T3232] __alloc_pages_nodemask+0xbc/0x5e0 [ 418.984572][ T3232] __get_free_pages+0x8/0x30 18:31:12 executing program 0: unshare(0x2000400) io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0xa, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) [ 418.989476][ T3232] __se_sys_io_uring_setup+0xee4/0x2540 [ 418.995074][ T3232] do_syscall_64+0xf3/0x1b0 [ 419.000143][ T3232] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 419.006534][ T3232] RIP: 0033:0x45c889 [ 419.010449][ T3232] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 419.030249][ T3232] RSP: 002b:00007f7880858c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 419.041543][ T3232] RAX: ffffffffffffffda RBX: 00007f78808596d4 RCX: 000000000045c889 [ 419.051375][ T3232] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 00000000000008df [ 419.059362][ T3232] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 419.067613][ T3232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 419.075743][ T3232] R13: 0000000000000202 R14: 00000000004c4284 R15: 0000000000000004 18:31:12 executing program 3: io_uring_setup(0xa4, &(0x7f0000000080)) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)={0x1000, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @remote}}}, 0x108) 18:31:12 executing program 2: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) r1 = io_uring_setup(0xa4, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket(0x10, 0x803, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000280)=[r3, 0xffffffffffffffff, r2], 0x3) bind$rose(r3, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) getsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000100)={@multicast1, @local, @multicast1}, &(0x7f0000000140)=0xc) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000300)={0xe50d, &(0x7f00000002c0)=[0xffffffffffffffff]}, 0x1) 18:31:12 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x4, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}) 18:31:12 executing program 0: unshare(0x2000400) r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0xa, 0x0, 0x0)