tack+0x107/0x167 [ 1621.236473] should_fail.cold+0x5/0xa [ 1621.237246] ? create_object.isra.0+0x3a/0xa20 [ 1621.238193] should_failslab+0x5/0x20 [ 1621.238966] kmem_cache_alloc+0x5b/0x360 [ 1621.239791] ? mark_held_locks+0x9e/0xe0 [ 1621.240620] create_object.isra.0+0x3a/0xa20 [ 1621.240672] attempt to access beyond end of device [ 1621.240672] loop5: rw=1, want=26, limit=15 [ 1621.241511] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1621.241536] kmem_cache_alloc_bulk+0x168/0x320 [ 1621.241567] io_submit_sqes+0x707f/0x86a0 [ 1621.243432] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 1621.244453] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1621.244473] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1621.249712] ? lock_downgrade+0x6d0/0x6d0 [ 1621.250559] ? find_held_lock+0x2c/0x110 [ 1621.251390] ? io_submit_sqes+0x86a0/0x86a0 [ 1621.252273] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1621.253254] ? wait_for_completion_io+0x270/0x270 [ 1621.254256] ? rcu_read_lock_any_held+0x75/0xa0 [ 1621.255199] ? vfs_write+0x354/0xa30 [ 1621.255964] ? fput_many+0x2f/0x1a0 [ 1621.256704] ? ksys_write+0x1a9/0x260 [ 1621.257487] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1621.258564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1621.259614] do_syscall_64+0x33/0x40 [ 1621.260371] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1621.261411] RIP: 0033:0x7fe23ca34b19 [ 1621.261538] attempt to access beyond end of device [ 1621.261538] loop5: rw=1, want=27, limit=15 [ 1621.262178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.262189] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1621.262209] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1621.262227] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1621.264105] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1621.267774] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1621.267784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.267795] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:58:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x127, 0x0, 0x0) [ 1621.326887] attempt to access beyond end of device [ 1621.326887] loop5: rw=1, want=28, limit=15 [ 1621.328847] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 1621.351460] attempt to access beyond end of device [ 1621.351460] loop5: rw=1, want=2044, limit=15 04:58:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0x3, 0x0, 0x0, @loopback}, 0x1c) 04:58:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0) [ 1621.651218] attempt to access beyond end of device [ 1621.651218] loop5: rw=2049, want=21, limit=15 04:58:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:58:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0x7, 0x0, 0x0, @loopback}, 0x1c) 04:58:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:58:21 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) 04:58:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xcc4, 0x0, 0x0) 04:58:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1802, @loopback}, 0x1c) [ 1621.862865] FAULT_INJECTION: forcing a failure. [ 1621.862865] name failslab, interval 1, probability 0, space 0, times 0 [ 1621.865328] CPU: 1 PID: 10334 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1621.866792] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1621.868538] Call Trace: [ 1621.869097] dump_stack+0x107/0x167 [ 1621.869876] should_fail.cold+0x5/0xa [ 1621.870684] ? create_object.isra.0+0x3a/0xa20 [ 1621.871631] should_failslab+0x5/0x20 [ 1621.872417] kmem_cache_alloc+0x5b/0x360 [ 1621.873266] ? mark_held_locks+0x9e/0xe0 [ 1621.874130] create_object.isra.0+0x3a/0xa20 [ 1621.875042] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1621.876102] kmem_cache_alloc_bulk+0x168/0x320 [ 1621.877072] io_submit_sqes+0x707f/0x86a0 [ 1621.877978] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1621.879003] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1621.880002] ? lock_downgrade+0x6d0/0x6d0 [ 1621.880867] ? find_held_lock+0x2c/0x110 [ 1621.881718] ? io_submit_sqes+0x86a0/0x86a0 [ 1621.882642] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1621.883627] ? wait_for_completion_io+0x270/0x270 [ 1621.884623] ? rcu_read_lock_any_held+0x75/0xa0 [ 1621.885568] ? vfs_write+0x354/0xa30 [ 1621.886346] ? fput_many+0x2f/0x1a0 [ 1621.887095] ? ksys_write+0x1a9/0x260 [ 1621.887901] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1621.888975] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1621.890041] do_syscall_64+0x33/0x40 [ 1621.890801] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1621.891844] RIP: 0033:0x7fe23ca34b19 [ 1621.892605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1621.896349] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1621.897890] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1621.899323] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1621.900783] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1621.902247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.903695] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:58:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 04:58:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 1622.017393] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1622.018727] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1622.019954] Buffer I/O error on dev loop5, logical block 23, lost async page write 04:58:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x263e, 0x0, 0x0) 04:58:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:58:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x2, 0x0, @loopback}, 0x1c) 04:58:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 04:58:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2002, @loopback}, 0x1c) 04:58:36 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:58:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:58:36 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) [ 1636.368919] FAULT_INJECTION: forcing a failure. [ 1636.368919] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.370657] CPU: 0 PID: 10382 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1636.371712] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1636.372969] Call Trace: [ 1636.373380] dump_stack+0x107/0x167 [ 1636.373952] should_fail.cold+0x5/0xa [ 1636.374531] ? create_object.isra.0+0x3a/0xa20 [ 1636.375225] should_failslab+0x5/0x20 [ 1636.375803] kmem_cache_alloc+0x5b/0x360 [ 1636.376425] ? mark_held_locks+0x9e/0xe0 [ 1636.376959] create_object.isra.0+0x3a/0xa20 [ 1636.377635] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1636.378369] kmem_cache_alloc_bulk+0x168/0x320 [ 1636.378943] io_submit_sqes+0x707f/0x86a0 [ 1636.379474] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1636.380096] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1636.380696] ? lock_downgrade+0x6d0/0x6d0 [ 1636.381229] ? find_held_lock+0x2c/0x110 [ 1636.381748] ? io_submit_sqes+0x86a0/0x86a0 [ 1636.382327] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1636.382948] ? wait_for_completion_io+0x270/0x270 [ 1636.383565] ? rcu_read_lock_any_held+0x75/0xa0 [ 1636.384158] ? vfs_write+0x354/0xa30 [ 1636.384641] ? fput_many+0x2f/0x1a0 [ 1636.385109] ? ksys_write+0x1a9/0x260 [ 1636.385596] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1636.386294] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1636.386948] do_syscall_64+0x33/0x40 [ 1636.387441] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1636.388112] RIP: 0033:0x7fe23ca34b19 [ 1636.388600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1636.391029] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1636.392032] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1636.392960] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1636.393871] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1636.394811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1636.395725] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:58:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 04:58:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2701, 0x0, 0x0) 04:58:53 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 04:58:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000, @loopback}, 0x1c) 04:58:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:58:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x0, @loopback}, 0x1c) 04:58:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:58:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:58:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 04:58:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5, 0x0, @loopback}, 0x1c) [ 1653.282556] FAULT_INJECTION: forcing a failure. [ 1653.282556] name failslab, interval 1, probability 0, space 0, times 0 [ 1653.285043] CPU: 1 PID: 10414 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1653.286428] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1653.288096] Call Trace: [ 1653.288627] dump_stack+0x107/0x167 [ 1653.289355] should_fail.cold+0x5/0xa [ 1653.290107] ? create_object.isra.0+0x3a/0xa20 [ 1653.291072] should_failslab+0x5/0x20 [ 1653.291822] kmem_cache_alloc+0x5b/0x360 [ 1653.292628] create_object.isra.0+0x3a/0xa20 [ 1653.293492] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1653.294510] __kmalloc+0x16e/0x3f0 [ 1653.295216] io_setup_async_rw+0x180/0x580 [ 1653.296049] io_read+0xe98/0x11e0 [ 1653.296748] ? mark_lock+0xf5/0x2df0 [ 1653.297484] ? kiocb_done+0xc90/0xc90 [ 1653.298257] ? lock_chain_count+0x20/0x20 [ 1653.299089] ? __lockdep_reset_lock+0x180/0x180 [ 1653.300030] ? __lock_acquire+0xbb1/0x5b00 [ 1653.300870] io_issue_sqe+0x2cea/0x7700 [ 1653.301656] ? perf_trace_lock+0xac/0x490 [ 1653.302497] ? __lockdep_reset_lock+0x180/0x180 [ 1653.303407] ? perf_trace_lock+0xac/0x490 [ 1653.304220] ? io_uring_setup+0x2aa0/0x2aa0 [ 1653.305070] ? find_held_lock+0x2c/0x110 [ 1653.305869] ? __fget_files+0x26d/0x480 [ 1653.306672] ? lock_downgrade+0x6d0/0x6d0 [ 1653.307490] __io_queue_sqe+0x90/0x9d0 [ 1653.308263] ? io_issue_sqe+0x7700/0x7700 [ 1653.309093] io_submit_sqes+0x44a4/0x86a0 [ 1653.309962] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1653.311080] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1653.312320] ? lock_downgrade+0x6d0/0x6d0 [ 1653.313343] ? find_held_lock+0x2c/0x110 [ 1653.314391] ? io_submit_sqes+0x86a0/0x86a0 [ 1653.315445] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1653.316570] ? wait_for_completion_io+0x270/0x270 [ 1653.317742] ? rcu_read_lock_any_held+0x75/0xa0 [ 1653.318846] ? vfs_write+0x354/0xa30 [ 1653.319713] ? fput_many+0x2f/0x1a0 [ 1653.320578] ? ksys_write+0x1a9/0x260 [ 1653.321465] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1653.322701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1653.323908] do_syscall_64+0x33/0x40 [ 1653.324816] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1653.325984] RIP: 0033:0x7fe23ca34b19 [ 1653.326761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1653.330806] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1653.332471] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1653.334083] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1653.335526] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1653.336949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1653.338408] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:58:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3e26, 0x0, 0x0) 04:58:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x6, 0x0, @loopback}, 0x1c) 04:59:10 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 04:59:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 04:59:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4002, @loopback}, 0x1c) 04:59:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x7, 0x0, @loopback}, 0x1c) 04:59:10 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:59:10 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00, 0x0, 0x0) [ 1670.433069] FAULT_INJECTION: forcing a failure. [ 1670.433069] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.435583] CPU: 0 PID: 10472 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1670.437054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1670.438822] Call Trace: [ 1670.439392] dump_stack+0x107/0x167 [ 1670.440170] should_fail.cold+0x5/0xa [ 1670.440982] ? create_io_worker+0xe8/0x620 [ 1670.441884] should_failslab+0x5/0x20 [ 1670.442711] kmem_cache_alloc_node_trace+0x59/0x380 [ 1670.443766] create_io_worker+0xe8/0x620 [ 1670.444628] io_wqe_enqueue+0x69f/0xba0 [ 1670.445460] ? create_worker_cb+0x260/0x260 [ 1670.446367] ? find_held_lock+0x2c/0x110 [ 1670.447259] io_queue_async_work+0x26b/0x550 [ 1670.448187] __io_queue_sqe+0x608/0x9d0 [ 1670.449032] ? io_issue_sqe+0x7700/0x7700 [ 1670.449918] io_submit_sqes+0x44a4/0x86a0 [ 1670.450836] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1670.451874] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1670.452892] ? lock_downgrade+0x6d0/0x6d0 [ 1670.453781] ? find_held_lock+0x2c/0x110 [ 1670.454646] ? io_submit_sqes+0x86a0/0x86a0 [ 1670.455568] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1670.456581] ? wait_for_completion_io+0x270/0x270 [ 1670.457597] ? rcu_read_lock_any_held+0x75/0xa0 [ 1670.458627] ? vfs_write+0x354/0xa30 [ 1670.459414] ? fput_many+0x2f/0x1a0 [ 1670.460183] ? ksys_write+0x1a9/0x260 [ 1670.460990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1670.462095] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1670.463207] do_syscall_64+0x33/0x40 [ 1670.463990] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1670.465068] RIP: 0033:0x7fe23ca34b19 [ 1670.465848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.469660] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1670.471255] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1670.472732] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1670.474209] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.475693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1670.477170] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:59:10 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 04:59:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 04:59:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @loopback}, 0x1c) 04:59:10 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 04:59:10 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:10 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:59:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe, 0x0, @loopback}, 0x1c) 04:59:10 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xc40c, 0x0, 0x0) 04:59:10 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) [ 1670.773796] FAULT_INJECTION: forcing a failure. [ 1670.773796] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.775149] CPU: 1 PID: 10499 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1670.775966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1670.776905] Call Trace: [ 1670.777225] dump_stack+0x107/0x167 [ 1670.777664] should_fail.cold+0x5/0xa [ 1670.778119] ? create_object.isra.0+0x3a/0xa20 [ 1670.778664] should_failslab+0x5/0x20 [ 1670.779131] kmem_cache_alloc+0x5b/0x360 [ 1670.779610] create_object.isra.0+0x3a/0xa20 [ 1670.780129] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1670.780713] kmem_cache_alloc_node_trace+0x16d/0x380 [ 1670.781297] create_io_worker+0xe8/0x620 [ 1670.781767] io_wqe_enqueue+0x69f/0xba0 [ 1670.782223] ? create_worker_cb+0x260/0x260 [ 1670.782743] ? find_held_lock+0x2c/0x110 [ 1670.783214] io_queue_async_work+0x26b/0x550 [ 1670.783717] __io_queue_sqe+0x608/0x9d0 [ 1670.784172] ? io_issue_sqe+0x7700/0x7700 [ 1670.784649] io_submit_sqes+0x44a4/0x86a0 [ 1670.785150] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1670.785708] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1670.786296] ? lock_downgrade+0x6d0/0x6d0 [ 1670.786779] ? find_held_lock+0x2c/0x110 [ 1670.787275] ? io_submit_sqes+0x86a0/0x86a0 [ 1670.787794] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1670.788394] ? wait_for_completion_io+0x270/0x270 [ 1670.788967] ? rcu_read_lock_any_held+0x75/0xa0 [ 1670.789521] ? vfs_write+0x354/0xa30 [ 1670.789975] ? fput_many+0x2f/0x1a0 [ 1670.790428] ? ksys_write+0x1a9/0x260 [ 1670.790892] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1670.791535] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1670.792154] do_syscall_64+0x33/0x40 [ 1670.792612] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1670.793239] RIP: 0033:0x7fe23ca34b19 [ 1670.793694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1670.795865] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1670.796764] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1670.797628] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1670.798503] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1670.799348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1670.800202] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:59:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5000, @loopback}, 0x1c) 04:59:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:28 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:28 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 04:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x50, 0x0, @loopback}, 0x1c) 04:59:28 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:59:28 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 04:59:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) [ 1688.903324] FAULT_INJECTION: forcing a failure. [ 1688.903324] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.905746] CPU: 1 PID: 10528 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1688.907160] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1688.908831] Call Trace: [ 1688.909377] dump_stack+0x107/0x167 [ 1688.910119] should_fail.cold+0x5/0xa [ 1688.910915] ? copy_process+0x5c4/0x67d0 [ 1688.911744] should_failslab+0x5/0x20 [ 1688.912512] kmem_cache_alloc_node+0x55/0x370 [ 1688.913416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1688.914478] copy_process+0x5c4/0x67d0 [ 1688.915282] ? kasan_save_stack+0x32/0x40 [ 1688.916132] ? kasan_save_stack+0x1b/0x40 [ 1688.916972] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1688.918000] ? create_io_worker+0xe8/0x620 [ 1688.918863] ? io_wqe_enqueue+0x69f/0xba0 [ 1688.919707] ? io_queue_async_work+0x26b/0x550 [ 1688.920635] ? io_submit_sqes+0x44a4/0x86a0 [ 1688.921520] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1688.922552] ? __cleanup_sighand+0xb0/0xb0 [ 1688.923431] ? lock_acquire+0x197/0x490 [ 1688.924238] ? create_object.isra.0+0x3ad/0xa20 [ 1688.925188] ? find_held_lock+0x2c/0x110 [ 1688.926017] ? io_wqe_dec_running+0x220/0x220 [ 1688.926932] create_io_thread+0xb6/0xf0 [ 1688.927744] ? copy_init_mm+0x20/0x20 [ 1688.928527] ? mark_held_locks+0x9e/0xe0 [ 1688.929352] ? io_wqe_dec_running+0x220/0x220 [ 1688.930286] ? __init_swait_queue_head+0xc6/0x150 [ 1688.931275] create_io_worker+0x23a/0x620 [ 1688.932122] io_wqe_enqueue+0x69f/0xba0 [ 1688.932935] ? create_worker_cb+0x260/0x260 [ 1688.933818] ? find_held_lock+0x2c/0x110 [ 1688.934677] io_queue_async_work+0x26b/0x550 [ 1688.935583] __io_queue_sqe+0x608/0x9d0 [ 1688.936390] ? io_issue_sqe+0x7700/0x7700 [ 1688.937244] io_submit_sqes+0x44a4/0x86a0 [ 1688.938114] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1688.939131] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1688.940099] ? lock_downgrade+0x6d0/0x6d0 [ 1688.940925] ? find_held_lock+0x2c/0x110 [ 1688.941752] ? io_submit_sqes+0x86a0/0x86a0 [ 1688.942659] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1688.943626] ? wait_for_completion_io+0x270/0x270 [ 1688.944601] ? rcu_read_lock_any_held+0x75/0xa0 [ 1688.945529] ? vfs_write+0x354/0xa30 [ 1688.946282] ? fput_many+0x2f/0x1a0 [ 1688.947021] ? ksys_write+0x1a9/0x260 [ 1688.947801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1688.948851] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1688.949895] do_syscall_64+0x33/0x40 [ 1688.950650] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1688.951679] RIP: 0033:0x7fe23ca34b19 [ 1688.952437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1688.956163] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1688.957684] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1688.959117] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1688.960542] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1688.961971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1688.963418] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc, 0x0, @loopback}, 0x1c) 04:59:28 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) 04:59:28 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:28 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 04:59:28 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r6, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:59:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1f4, 0x0, @loopback}, 0x1c) 04:59:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) [ 1689.173622] FAULT_INJECTION: forcing a failure. [ 1689.173622] name failslab, interval 1, probability 0, space 0, times 0 [ 1689.176040] CPU: 0 PID: 10547 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1689.177462] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1689.179177] Call Trace: [ 1689.179727] dump_stack+0x107/0x167 [ 1689.180481] should_fail.cold+0x5/0xa [ 1689.181275] ? create_object.isra.0+0x3a/0xa20 [ 1689.182218] should_failslab+0x5/0x20 [ 1689.183016] kmem_cache_alloc+0x5b/0x360 [ 1689.183865] create_object.isra.0+0x3a/0xa20 [ 1689.184770] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1689.185825] kmem_cache_alloc_node+0x169/0x370 [ 1689.186789] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1689.187722] copy_process+0x5c4/0x67d0 [ 1689.188581] ? kasan_save_stack+0x32/0x40 [ 1689.189441] ? kasan_save_stack+0x1b/0x40 [ 1689.190311] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1689.191371] ? create_io_worker+0xe8/0x620 [ 1689.192206] ? io_wqe_enqueue+0x69f/0xba0 [ 1689.193068] ? io_queue_async_work+0x26b/0x550 [ 1689.194017] ? io_submit_sqes+0x44a4/0x86a0 [ 1689.194919] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1689.195954] ? __cleanup_sighand+0xb0/0xb0 [ 1689.196826] ? lock_acquire+0x197/0x490 [ 1689.197661] ? create_object.isra.0+0x3ad/0xa20 [ 1689.198636] ? find_held_lock+0x2c/0x110 [ 1689.199506] ? io_wqe_dec_running+0x220/0x220 [ 1689.200443] create_io_thread+0xb6/0xf0 [ 1689.201280] ? copy_init_mm+0x20/0x20 [ 1689.202072] ? mark_held_locks+0x9e/0xe0 [ 1689.202946] ? io_wqe_dec_running+0x220/0x220 [ 1689.203881] ? __init_swait_queue_head+0xc6/0x150 [ 1689.204889] create_io_worker+0x23a/0x620 [ 1689.205745] io_wqe_enqueue+0x69f/0xba0 [ 1689.206584] ? create_worker_cb+0x260/0x260 [ 1689.207483] ? find_held_lock+0x2c/0x110 [ 1689.208344] io_queue_async_work+0x26b/0x550 [ 1689.209254] __io_queue_sqe+0x608/0x9d0 [ 1689.210093] ? io_issue_sqe+0x7700/0x7700 [ 1689.210980] io_submit_sqes+0x44a4/0x86a0 [ 1689.211879] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1689.212914] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1689.213932] ? lock_downgrade+0x6d0/0x6d0 [ 1689.214814] ? find_held_lock+0x2c/0x110 [ 1689.215667] ? io_submit_sqes+0x86a0/0x86a0 [ 1689.216570] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1689.217580] ? wait_for_completion_io+0x270/0x270 [ 1689.218592] ? rcu_read_lock_any_held+0x75/0xa0 [ 1689.219561] ? vfs_write+0x354/0xa30 [ 1689.220349] ? fput_many+0x2f/0x1a0 [ 1689.221104] ? ksys_write+0x1a9/0x260 [ 1689.221906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1689.223009] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1689.224087] do_syscall_64+0x33/0x40 [ 1689.224863] entry_SYSCALL_64_after_hwframe+0x61/0xc6 04:59:29 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r6, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 1689.225936] RIP: 0033:0x7fe23ca34b19 [ 1689.226919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1689.230748] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1689.232334] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1689.233827] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1689.235329] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1689.236817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1689.238305] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:59:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) 04:59:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 04:59:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0) 04:59:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x218, 0x0, @loopback}, 0x1c) 04:59:44 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r6, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:59:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe, @loopback}, 0x1c) 04:59:44 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 1704.968813] FAULT_INJECTION: forcing a failure. [ 1704.968813] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.970450] CPU: 0 PID: 10567 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1704.971353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1704.972421] Call Trace: [ 1704.972776] dump_stack+0x107/0x167 [ 1704.973251] should_fail.cold+0x5/0xa [ 1704.973761] ? create_object.isra.0+0x3a/0xa20 [ 1704.974352] should_failslab+0x5/0x20 [ 1704.974866] kmem_cache_alloc+0x5b/0x360 [ 1704.975402] create_object.isra.0+0x3a/0xa20 [ 1704.975960] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1704.976628] kmem_cache_alloc_node_trace+0x16d/0x380 [ 1704.977296] create_io_worker+0xe8/0x620 [ 1704.977827] io_wqe_enqueue+0x69f/0xba0 [ 1704.978346] ? create_worker_cb+0x260/0x260 [ 1704.978923] ? find_held_lock+0x2c/0x110 [ 1704.979461] io_queue_async_work+0x26b/0x550 [ 1704.980035] __io_queue_sqe+0x608/0x9d0 [ 1704.980535] ? io_issue_sqe+0x7700/0x7700 [ 1704.981085] io_submit_sqes+0x44a4/0x86a0 [ 1704.981626] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1704.982273] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1704.982911] ? lock_downgrade+0x6d0/0x6d0 [ 1704.983430] ? find_held_lock+0x2c/0x110 [ 1704.983947] ? io_submit_sqes+0x86a0/0x86a0 [ 1704.984499] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1704.985107] ? wait_for_completion_io+0x270/0x270 [ 1704.985726] ? rcu_read_lock_any_held+0x75/0xa0 [ 1704.986305] ? vfs_write+0x354/0xa30 [ 1704.986791] ? fput_many+0x2f/0x1a0 [ 1704.987260] ? ksys_write+0x1a9/0x260 [ 1704.987745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1704.988412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1704.989064] do_syscall_64+0x33/0x40 [ 1704.989529] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1704.990172] RIP: 0033:0x7fe23ca34b19 [ 1704.990654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1704.993029] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1704.993989] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1704.994909] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1704.995813] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1704.996731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.997623] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:59:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x240, 0x0, @loopback}, 0x1c) 04:59:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) [ 1705.140605] handle_bad_sector: 8 callbacks suppressed [ 1705.140616] attempt to access beyond end of device [ 1705.140616] loop5: rw=2049, want=148, limit=15 04:59:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x300, 0x0, @loopback}, 0x1c) 04:59:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) 04:59:44 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:59:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 1705.221775] FAULT_INJECTION: forcing a failure. [ 1705.221775] name failslab, interval 1, probability 0, space 0, times 0 [ 1705.224193] CPU: 1 PID: 10606 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1705.225566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1705.227268] Call Trace: [ 1705.227810] dump_stack+0x107/0x167 [ 1705.228562] should_fail.cold+0x5/0xa [ 1705.229332] ? copy_process+0x5c4/0x67d0 [ 1705.230163] should_failslab+0x5/0x20 [ 1705.230959] kmem_cache_alloc_node+0x55/0x370 [ 1705.231867] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1705.232934] copy_process+0x5c4/0x67d0 [ 1705.233730] ? kasan_save_stack+0x32/0x40 [ 1705.234565] ? kasan_save_stack+0x1b/0x40 [ 1705.235419] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1705.236454] ? create_io_worker+0xe8/0x620 [ 1705.237301] ? io_wqe_enqueue+0x69f/0xba0 [ 1705.238139] ? io_queue_async_work+0x26b/0x550 [ 1705.239084] ? io_submit_sqes+0x44a4/0x86a0 [ 1705.239953] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1705.240974] ? __cleanup_sighand+0xb0/0xb0 [ 1705.241832] ? lock_acquire+0x197/0x490 [ 1705.242657] ? create_object.isra.0+0x3ad/0xa20 [ 1705.243622] ? find_held_lock+0x2c/0x110 [ 1705.244462] ? io_wqe_dec_running+0x220/0x220 [ 1705.245377] create_io_thread+0xb6/0xf0 [ 1705.246206] ? copy_init_mm+0x20/0x20 [ 1705.247002] ? mark_held_locks+0x9e/0xe0 [ 1705.247864] ? io_wqe_dec_running+0x220/0x220 [ 1705.248776] ? __init_swait_queue_head+0xc6/0x150 [ 1705.249753] create_io_worker+0x23a/0x620 [ 1705.250591] io_wqe_enqueue+0x69f/0xba0 [ 1705.251411] ? create_worker_cb+0x260/0x260 [ 1705.252286] ? find_held_lock+0x2c/0x110 [ 1705.253118] io_queue_async_work+0x26b/0x550 [ 1705.254017] __io_queue_sqe+0x608/0x9d0 [ 1705.254823] ? io_issue_sqe+0x7700/0x7700 [ 1705.255682] io_submit_sqes+0x44a4/0x86a0 [ 1705.256553] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1705.257607] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1705.258592] ? lock_downgrade+0x6d0/0x6d0 [ 1705.259488] ? find_held_lock+0x2c/0x110 [ 1705.260323] ? io_submit_sqes+0x86a0/0x86a0 [ 1705.261253] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1705.262235] ? wait_for_completion_io+0x270/0x270 [ 1705.263237] ? rcu_read_lock_any_held+0x75/0xa0 [ 1705.264190] ? vfs_write+0x354/0xa30 [ 1705.264979] ? fput_many+0x2f/0x1a0 [ 1705.265714] ? ksys_write+0x1a9/0x260 [ 1705.266508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1705.267590] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1705.268636] do_syscall_64+0x33/0x40 [ 1705.269380] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1705.270415] RIP: 0033:0x7fe23ca34b19 [ 1705.271175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1705.274879] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1705.276420] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1705.277856] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1705.279312] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1705.280744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1705.282178] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 [ 1705.351418] attempt to access beyond end of device [ 1705.351418] loop5: rw=1, want=2044, limit=15 04:59:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe, @loopback}, 0x1c) 04:59:59 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x3e8, 0x0, @loopback}, 0x1c) 04:59:59 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 04:59:59 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 04:59:59 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 04:59:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 04:59:59 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) [ 1719.996170] FAULT_INJECTION: forcing a failure. [ 1719.996170] name failslab, interval 1, probability 0, space 0, times 0 [ 1719.998503] CPU: 1 PID: 10629 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1719.999966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.001762] Call Trace: [ 1720.002337] dump_stack+0x107/0x167 [ 1720.003143] should_fail.cold+0x5/0xa [ 1720.003963] ? create_object.isra.0+0x3a/0xa20 [ 1720.004944] should_failslab+0x5/0x20 [ 1720.005761] kmem_cache_alloc+0x5b/0x360 [ 1720.006663] create_object.isra.0+0x3a/0xa20 [ 1720.007596] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1720.008649] kmem_cache_alloc+0x159/0x360 [ 1720.009510] __delayacct_tsk_init+0x1b/0x80 [ 1720.010392] copy_process+0x4500/0x67d0 [ 1720.011227] ? kasan_save_stack+0x32/0x40 [ 1720.012069] ? kasan_save_stack+0x1b/0x40 [ 1720.012925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1720.013957] ? create_io_worker+0xe8/0x620 [ 1720.014823] ? io_wqe_enqueue+0x69f/0xba0 [ 1720.015726] ? __cleanup_sighand+0xb0/0xb0 [ 1720.016590] ? lock_acquire+0x197/0x490 [ 1720.017398] ? create_object.isra.0+0x3ad/0xa20 [ 1720.018365] ? find_held_lock+0x2c/0x110 [ 1720.019211] ? io_wqe_dec_running+0x220/0x220 [ 1720.020133] create_io_thread+0xb6/0xf0 [ 1720.020933] ? copy_init_mm+0x20/0x20 [ 1720.021708] ? mark_held_locks+0x9e/0xe0 [ 1720.022549] ? io_wqe_dec_running+0x220/0x220 [ 1720.023484] ? __init_swait_queue_head+0xc6/0x150 [ 1720.024487] create_io_worker+0x23a/0x620 [ 1720.025343] io_wqe_enqueue+0x69f/0xba0 [ 1720.026174] ? create_worker_cb+0x260/0x260 [ 1720.027133] ? find_held_lock+0x2c/0x110 [ 1720.027989] io_queue_async_work+0x26b/0x550 [ 1720.028951] __io_queue_sqe+0x608/0x9d0 [ 1720.029767] ? io_issue_sqe+0x7700/0x7700 [ 1720.030681] io_submit_sqes+0x44a4/0x86a0 [ 1720.031588] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1720.032639] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1720.033636] ? lock_downgrade+0x6d0/0x6d0 [ 1720.034482] ? find_held_lock+0x2c/0x110 [ 1720.035326] ? io_submit_sqes+0x86a0/0x86a0 [ 1720.036218] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1720.037202] ? wait_for_completion_io+0x270/0x270 [ 1720.038188] ? rcu_read_lock_any_held+0x75/0xa0 [ 1720.039160] ? vfs_write+0x354/0xa30 [ 1720.039923] ? fput_many+0x2f/0x1a0 [ 1720.040674] ? ksys_write+0x1a9/0x260 [ 1720.041467] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1720.042530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1720.043596] do_syscall_64+0x33/0x40 [ 1720.044359] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1720.045412] RIP: 0033:0x7fe23ca34b19 [ 1720.046173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.049913] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1720.051488] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1720.052976] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1720.054467] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.055935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.057413] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 04:59:59 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 1720.104156] attempt to access beyond end of device [ 1720.104156] loop5: rw=2049, want=148, limit=15 04:59:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x500, 0x0, @loopback}, 0x1c) [ 1720.185792] attempt to access beyond end of device [ 1720.185792] loop5: rw=1, want=2044, limit=15 04:59:59 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 04:59:59 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:00 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x27010000, 0x0, 0x0) 05:00:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x600, 0x0, @loopback}, 0x1c) 05:00:00 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r5, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:00:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x700, 0x0, @loopback}, 0x1c) 05:00:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3e260000, 0x0, 0x0) 05:00:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 05:00:16 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r5, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:00:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:00:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe00, 0x0, @loopback}, 0x1c) 05:00:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc00, @loopback}, 0x1c) 05:00:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0) [ 1736.935789] FAULT_INJECTION: forcing a failure. [ 1736.935789] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.938464] CPU: 0 PID: 10688 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1736.939943] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.941693] Call Trace: [ 1736.942369] dump_stack+0x107/0x167 [ 1736.943151] should_fail.cold+0x5/0xa [ 1736.944012] ? alloc_pid+0xd7/0xd30 [ 1736.944791] should_failslab+0x5/0x20 [ 1736.945753] kmem_cache_alloc+0x5b/0x360 [ 1736.946753] alloc_pid+0xd7/0xd30 [ 1736.947522] copy_process+0x278b/0x67d0 [ 1736.948403] ? __cleanup_sighand+0xb0/0xb0 [ 1736.949299] ? lock_acquire+0x197/0x490 [ 1736.950124] ? create_object.isra.0+0x3ad/0xa20 [ 1736.951090] ? find_held_lock+0x2c/0x110 [ 1736.951977] ? io_wqe_dec_running+0x220/0x220 [ 1736.952987] create_io_thread+0xb6/0xf0 [ 1736.953832] ? copy_init_mm+0x20/0x20 [ 1736.954754] ? mark_held_locks+0x9e/0xe0 [ 1736.955754] ? io_wqe_dec_running+0x220/0x220 [ 1736.956804] ? __init_swait_queue_head+0xc6/0x150 [ 1736.957860] create_io_worker+0x23a/0x620 [ 1736.958800] io_wqe_enqueue+0x69f/0xba0 [ 1736.959639] ? create_worker_cb+0x260/0x260 [ 1736.960531] ? find_held_lock+0x2c/0x110 [ 1736.961377] io_queue_async_work+0x26b/0x550 [ 1736.962311] __io_queue_sqe+0x608/0x9d0 [ 1736.963173] ? io_issue_sqe+0x7700/0x7700 [ 1736.964086] io_submit_sqes+0x44a4/0x86a0 [ 1736.964991] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1736.966029] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1736.967031] ? lock_downgrade+0x6d0/0x6d0 [ 1736.967888] ? find_held_lock+0x2c/0x110 [ 1736.968724] ? io_submit_sqes+0x86a0/0x86a0 [ 1736.969622] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1736.970615] ? wait_for_completion_io+0x270/0x270 [ 1736.971628] ? rcu_read_lock_any_held+0x75/0xa0 [ 1736.972584] ? vfs_write+0x354/0xa30 [ 1736.973347] ? fput_many+0x2f/0x1a0 [ 1736.974100] ? ksys_write+0x1a9/0x260 [ 1736.974889] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.975977] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1736.977048] do_syscall_64+0x33/0x40 [ 1736.977814] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1736.978870] RIP: 0033:0x7fe23ca34b19 [ 1736.979639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.983413] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1736.984963] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1736.986420] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1736.987881] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.989348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.990817] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 [ 1737.000562] attempt to access beyond end of device [ 1737.000562] loop5: rw=2049, want=116, limit=15 05:00:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1802, 0x0, @loopback}, 0x1c) 05:00:16 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r5, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:00:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0) 05:00:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) [ 1737.218596] FAULT_INJECTION: forcing a failure. [ 1737.218596] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.221059] CPU: 1 PID: 10709 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1737.222438] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1737.224124] Call Trace: [ 1737.224660] dump_stack+0x107/0x167 [ 1737.225393] should_fail.cold+0x5/0xa [ 1737.226147] ? create_object.isra.0+0x3a/0xa20 [ 1737.227039] should_failslab+0x5/0x20 [ 1737.227818] kmem_cache_alloc+0x5b/0x360 [ 1737.228665] create_object.isra.0+0x3a/0xa20 [ 1737.229555] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1737.230580] kmem_cache_alloc+0x159/0x360 [ 1737.231435] alloc_pid+0xd7/0xd30 [ 1737.232149] copy_process+0x278b/0x67d0 [ 1737.232957] ? __cleanup_sighand+0xb0/0xb0 [ 1737.233805] ? lock_acquire+0x197/0x490 [ 1737.234591] ? create_object.isra.0+0x3ad/0xa20 [ 1737.235557] ? find_held_lock+0x2c/0x110 [ 1737.236379] ? io_wqe_dec_running+0x220/0x220 [ 1737.237274] create_io_thread+0xb6/0xf0 [ 1737.238067] ? copy_init_mm+0x20/0x20 [ 1737.238845] ? mark_held_locks+0x9e/0xe0 [ 1737.239671] ? io_wqe_dec_running+0x220/0x220 [ 1737.240587] ? __init_swait_queue_head+0xc6/0x150 [ 1737.241570] create_io_worker+0x23a/0x620 [ 1737.242415] io_wqe_enqueue+0x69f/0xba0 [ 1737.243224] ? create_worker_cb+0x260/0x260 [ 1737.244117] ? find_held_lock+0x2c/0x110 [ 1737.244954] io_queue_async_work+0x26b/0x550 [ 1737.245851] __io_queue_sqe+0x608/0x9d0 [ 1737.246661] ? io_issue_sqe+0x7700/0x7700 [ 1737.247528] io_submit_sqes+0x44a4/0x86a0 [ 1737.248407] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1737.249422] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1737.250404] ? lock_downgrade+0x6d0/0x6d0 [ 1737.251229] ? find_held_lock+0x2c/0x110 [ 1737.252063] ? io_submit_sqes+0x86a0/0x86a0 [ 1737.252941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1737.253924] ? wait_for_completion_io+0x270/0x270 [ 1737.254894] ? rcu_read_lock_any_held+0x75/0xa0 [ 1737.255843] ? vfs_write+0x354/0xa30 [ 1737.256594] ? fput_many+0x2f/0x1a0 [ 1737.257327] ? ksys_write+0x1a9/0x260 [ 1737.258100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1737.259145] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1737.260189] do_syscall_64+0x33/0x40 [ 1737.260936] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1737.261961] RIP: 0033:0x7fe23ca34b19 [ 1737.262712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1737.266369] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1737.267914] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1737.269322] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1737.270754] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1737.272197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.273619] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 05:00:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @loopback}, 0x1c) 05:00:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xc40c0000, 0x0, 0x0) 05:00:17 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:00:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4002, 0x0, @loopback}, 0x1c) 05:00:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0) 05:00:17 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 1737.626567] attempt to access beyond end of device [ 1737.626567] loop5: rw=1, want=2044, limit=15 05:00:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0) 05:00:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe80, @loopback}, 0x1c) 05:00:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 05:00:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:00:31 executing program 6: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:00:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback}, 0x1c) 05:00:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) [ 1751.697599] FAULT_INJECTION: forcing a failure. [ 1751.697599] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.700410] CPU: 1 PID: 10745 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1751.701886] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1751.703691] Call Trace: [ 1751.704264] dump_stack+0x107/0x167 [ 1751.705045] should_fail.cold+0x5/0xa [ 1751.705861] ? radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1751.707086] should_failslab+0x5/0x20 [ 1751.707919] kmem_cache_alloc+0x5b/0x360 [ 1751.708794] radix_tree_node_alloc.constprop.0+0x1e3/0x300 [ 1751.709995] idr_get_free+0x4b5/0x8f0 [ 1751.710836] idr_alloc_u32+0x170/0x2d0 [ 1751.711684] ? __fprop_inc_percpu_max+0x130/0x130 [ 1751.712726] ? lock_acquire+0x197/0x490 [ 1751.713581] ? alloc_pid+0x491/0xd30 [ 1751.714398] idr_alloc_cyclic+0x102/0x230 [ 1751.715296] ? idr_alloc+0x130/0x130 [ 1751.716112] ? rwlock_bug.part.0+0x90/0x90 [ 1751.717035] alloc_pid+0x4fb/0xd30 [ 1751.717812] copy_process+0x278b/0x67d0 [ 1751.718701] ? __cleanup_sighand+0xb0/0xb0 [ 1751.719613] ? lock_acquire+0x197/0x490 [ 1751.720478] ? create_object.isra.0+0x3ad/0xa20 [ 1751.721477] ? find_held_lock+0x2c/0x110 [ 1751.722347] ? io_wqe_dec_running+0x220/0x220 [ 1751.723300] create_io_thread+0xb6/0xf0 [ 1751.724154] ? copy_init_mm+0x20/0x20 [ 1751.724965] ? mark_held_locks+0x9e/0xe0 [ 1751.725833] ? io_wqe_dec_running+0x220/0x220 [ 1751.726810] ? __init_swait_queue_head+0xc6/0x150 [ 1751.727887] create_io_worker+0x23a/0x620 [ 1751.728780] io_wqe_enqueue+0x69f/0xba0 [ 1751.729650] ? create_worker_cb+0x260/0x260 [ 1751.730620] ? find_held_lock+0x2c/0x110 [ 1751.731534] io_queue_async_work+0x26b/0x550 [ 1751.732512] __io_queue_sqe+0x608/0x9d0 [ 1751.733403] ? io_issue_sqe+0x7700/0x7700 [ 1751.734327] io_submit_sqes+0x44a4/0x86a0 [ 1751.735257] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1751.736337] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 1751.737381] ? lock_downgrade+0x6d0/0x6d0 [ 1751.738299] ? find_held_lock+0x2c/0x110 [ 1751.739178] ? io_submit_sqes+0x86a0/0x86a0 [ 1751.740154] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1751.741195] ? wait_for_completion_io+0x270/0x270 [ 1751.742229] ? rcu_read_lock_any_held+0x75/0xa0 [ 1751.743229] ? vfs_write+0x354/0xa30 [ 1751.744070] ? fput_many+0x2f/0x1a0 [ 1751.744877] ? ksys_write+0x1a9/0x260 [ 1751.745713] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1751.746897] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1751.748058] do_syscall_64+0x33/0x40 [ 1751.748859] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1751.749981] RIP: 0033:0x7fe23ca34b19 [ 1751.750813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1751.754914] RSP: 002b:00007fe239faa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1751.756606] RAX: ffffffffffffffda RBX: 00007fe23cb47f60 RCX: 00007fe23ca34b19 [ 1751.758158] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1751.759690] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.761266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1751.762810] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 05:00:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 1751.911257] FAULT_INJECTION: forcing a failure. [ 1751.911257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1751.914455] CPU: 0 PID: 10769 Comm: syz-executor.2 Not tainted 5.10.167 #1 [ 1751.915921] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1751.917612] Call Trace: [ 1751.918166] dump_stack+0x107/0x167 [ 1751.918923] should_fail.cold+0x5/0xa [ 1751.919893] _copy_from_user+0x2e/0x1b0 [ 1751.920738] kstrtouint_from_user+0xbd/0x220 [ 1751.921685] ? kstrtou8_from_user+0x210/0x210 [ 1751.922659] ? lock_acquire+0x197/0x490 [ 1751.923503] ? ksys_write+0x12d/0x260 [ 1751.924462] proc_fail_nth_write+0x78/0x220 [ 1751.925425] ? proc_task_getattr+0x1f0/0x1f0 [ 1751.926424] ? __fget_files+0x296/0x480 [ 1751.927336] ? proc_task_getattr+0x1f0/0x1f0 [ 1751.928323] vfs_write+0x29a/0xa30 [ 1751.929208] ksys_write+0x12d/0x260 [ 1751.930028] ? __ia32_sys_read+0xb0/0xb0 [ 1751.930960] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1751.932177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1751.933466] do_syscall_64+0x33/0x40 [ 1751.934293] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 1751.935448] RIP: 0033:0x7fe23c9e75ff [ 1751.936327] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 1751.940641] RSP: 002b:00007fe239faa170 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1751.942310] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe23c9e75ff [ 1751.943870] RDX: 0000000000000001 RSI: 00007fe239faa1e0 RDI: 0000000000000005 [ 1751.945443] RBP: 00007fe239faa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.947013] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1751.948617] R13: 00007ffe341239df R14: 00007fe239faa300 R15: 0000000000022000 05:00:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:00:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) 05:00:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x80fe, 0x0, @loopback}, 0x1c) 05:00:46 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:00:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xc0fe, 0x0, @loopback}, 0x1c) 05:00:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, 0x0, 0x0) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:00:46 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:46 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0) 05:00:46 executing program 6: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:00:46 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfec0, @loopback}, 0x1c) 05:00:46 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xe803, 0x0, @loopback}, 0x1c) 05:00:46 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:00:46 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) [ 1766.988316] attempt to access beyond end of device [ 1766.988316] loop5: rw=2049, want=148, limit=15 05:00:46 executing program 6: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:00:46 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 1767.154914] attempt to access beyond end of device [ 1767.154914] loop5: rw=1, want=2044, limit=15 05:00:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xf401, 0x0, @loopback}, 0x1c) 05:00:46 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) 05:00:46 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 05:00:46 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:00:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfc00, 0x0, @loopback}, 0x1c) [ 1767.440121] attempt to access beyond end of device [ 1767.440121] loop5: rw=2049, want=21, limit=15 [ 1767.502898] attempt to access beyond end of device [ 1767.502898] loop5: rw=2049, want=22, limit=15 [ 1767.505047] buffer_io_error: 4 callbacks suppressed [ 1767.505059] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1767.552593] attempt to access beyond end of device [ 1767.552593] loop5: rw=2049, want=23, limit=15 [ 1767.554600] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1767.586730] attempt to access beyond end of device [ 1767.586730] loop5: rw=2049, want=24, limit=15 [ 1767.591086] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 1767.647818] attempt to access beyond end of device [ 1767.647818] loop5: rw=2049, want=25, limit=15 [ 1767.649852] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 1767.674620] attempt to access beyond end of device [ 1767.674620] loop5: rw=2049, want=26, limit=15 [ 1767.676947] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 1767.687590] attempt to access beyond end of device [ 1767.687590] loop5: rw=2049, want=27, limit=15 [ 1767.689921] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1767.716015] attempt to access beyond end of device [ 1767.716015] loop5: rw=2049, want=28, limit=15 [ 1767.718142] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:00:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) 05:00:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfe80, 0x0, @loopback}, 0x1c) 05:00:47 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2701000000000000, 0x0, 0x0) 05:00:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff00, @loopback}, 0x1c) 05:00:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:00:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfec0, 0x0, @loopback}, 0x1c) 05:00:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) 05:00:47 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3e26000000000000, 0x0, 0x0) 05:00:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(0xffffffffffffffff, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:01:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:01:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) 05:01:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x2e7, 0x0, 0x0, 0x0) 05:01:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xff00, 0x0, @loopback}, 0x1c) 05:01:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff0f, @loopback}, 0x1c) 05:01:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(0xffffffffffffffff, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:01:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xff0f, 0x0, @loopback}, 0x1c) [ 1783.935228] handle_bad_sector: 4 callbacks suppressed [ 1783.935245] attempt to access beyond end of device [ 1783.935245] loop5: rw=2049, want=21, limit=15 05:01:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) 05:01:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) [ 1783.956885] attempt to access beyond end of device [ 1783.956885] loop5: rw=0, want=21, limit=15 05:01:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(0xffffffffffffffff, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) [ 1784.078894] attempt to access beyond end of device [ 1784.078894] loop5: rw=2049, want=21, limit=15 [ 1784.085474] attempt to access beyond end of device [ 1784.085474] loop5: rw=0, want=21, limit=15 05:01:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xc40c000000000000, 0x0, 0x0) 05:01:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1000000, @loopback}, 0x1c) 05:01:19 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:19 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0xcc4, 0x0, 0x0, 0x0) 05:01:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 05:01:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:01:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 1799.921494] attempt to access beyond end of device [ 1799.921494] loop5: rw=2049, want=21, limit=15 05:01:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @loopback}, 0x1c) 05:01:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 05:01:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) 05:01:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000000, @loopback}, 0x1c) 05:01:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0) 05:01:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3, @loopback}, 0x1c) 05:01:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 05:01:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 1815.463262] attempt to access beyond end of device [ 1815.463262] loop5: rw=2049, want=21, limit=15 05:01:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @loopback}, 0x1c) 05:01:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) 05:01:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r0, 0x1000003) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 05:01:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x2a2c, 0x0, 0x0, 0x0) 05:01:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) 05:01:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:01:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x2c2a, 0x0, 0x0, 0x0) [ 1815.676579] attempt to access beyond end of device [ 1815.676579] loop5: rw=2049, want=21, limit=15 [ 1815.924569] attempt to access beyond end of device [ 1815.924569] loop5: rw=1, want=22, limit=15 [ 1815.926741] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1815.929937] attempt to access beyond end of device [ 1815.929937] loop5: rw=1, want=23, limit=15 [ 1815.931942] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1815.934519] attempt to access beyond end of device [ 1815.934519] loop5: rw=1, want=24, limit=15 [ 1815.936511] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 1815.938942] attempt to access beyond end of device [ 1815.938942] loop5: rw=1, want=25, limit=15 [ 1815.941073] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 1815.943471] attempt to access beyond end of device [ 1815.943471] loop5: rw=1, want=26, limit=15 [ 1815.945493] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 1815.947783] attempt to access beyond end of device [ 1815.947783] loop5: rw=1, want=27, limit=15 [ 1815.949836] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1815.952160] attempt to access beyond end of device [ 1815.952160] loop5: rw=1, want=28, limit=15 [ 1815.954133] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 1815.959102] attempt to access beyond end of device [ 1815.959102] loop5: rw=1, want=2044, limit=15 05:01:51 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:51 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r0, 0x1000003) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 05:01:51 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:51 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5) 05:01:51 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0) 05:01:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3000000, @loopback}, 0x1c) 05:01:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:01:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5, @loopback}, 0x1c) 05:01:51 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) [ 1831.506810] attempt to access beyond end of device [ 1831.506810] loop5: rw=2049, want=21, limit=15 05:01:51 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback}, 0x1c) 05:01:51 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) 05:01:51 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:01:51 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:01:51 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0xc40c, 0x0, 0x0, 0x0) 05:01:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @loopback}, 0x1c) [ 1831.767152] attempt to access beyond end of device [ 1831.767152] loop5: rw=1, want=22, limit=15 [ 1831.768210] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1831.769114] attempt to access beyond end of device [ 1831.769114] loop5: rw=1, want=23, limit=15 [ 1831.770102] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1831.771134] attempt to access beyond end of device [ 1831.771134] loop5: rw=1, want=24, limit=15 [ 1831.772159] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 1831.773351] attempt to access beyond end of device [ 1831.773351] loop5: rw=1, want=25, limit=15 [ 1831.774419] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 1831.775573] attempt to access beyond end of device [ 1831.775573] loop5: rw=1, want=26, limit=15 [ 1831.776585] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 1831.777526] attempt to access beyond end of device [ 1831.777526] loop5: rw=1, want=27, limit=15 [ 1831.778531] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1831.779486] attempt to access beyond end of device [ 1831.779486] loop5: rw=1, want=28, limit=15 [ 1831.780554] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 1831.782891] attempt to access beyond end of device [ 1831.782891] loop5: rw=1, want=2044, limit=15 05:02:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000000, @loopback}, 0x1c) 05:02:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:02:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r0, 0x1000003) sendfile(0xffffffffffffffff, r0, 0x0, 0x80000001) 05:02:06 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0xe702, 0x0, 0x0, 0x0) 05:02:06 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x127) 05:02:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:02:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:02:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @loopback}, 0x1c) [ 1847.189922] attempt to access beyond end of device [ 1847.189922] loop5: rw=2049, want=21, limit=15 05:02:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe, @loopback}, 0x1c) 05:02:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) [ 1847.305440] attempt to access beyond end of device [ 1847.305440] loop5: rw=1, want=22, limit=15 [ 1847.307408] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1847.310462] attempt to access beyond end of device [ 1847.310462] loop5: rw=1, want=23, limit=15 [ 1847.312485] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1847.318398] attempt to access beyond end of device [ 1847.318398] loop5: rw=1, want=24, limit=15 [ 1847.320290] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 1847.324377] attempt to access beyond end of device [ 1847.324377] loop5: rw=1, want=25, limit=15 [ 1847.326472] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 1847.331515] attempt to access beyond end of device 05:02:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) [ 1847.331515] loop5: rw=1, want=26, limit=15 [ 1847.333724] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 1847.337807] attempt to access beyond end of device [ 1847.337807] loop5: rw=1, want=27, limit=15 [ 1847.339753] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1847.342686] attempt to access beyond end of device [ 1847.342686] loop5: rw=1, want=28, limit=15 [ 1847.344573] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:02:07 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500) [ 1847.352844] attempt to access beyond end of device [ 1847.352844] loop5: rw=1, want=2044, limit=15 05:02:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:02:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:02:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x50, @loopback}, 0x1c) 05:02:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 1847.627217] attempt to access beyond end of device [ 1847.627217] loop5: rw=2049, want=21, limit=15 [ 1847.730536] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1847.732382] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1847.734192] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:02:24 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) 05:02:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 05:02:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc, @loopback}, 0x1c) 05:02:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5000000, @loopback}, 0x1c) 05:02:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc4) 05:02:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:02:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:02:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 1864.552522] handle_bad_sector: 8 callbacks suppressed [ 1864.552538] attempt to access beyond end of device [ 1864.552538] loop5: rw=2049, want=21, limit=15 05:02:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1f4, @loopback}, 0x1c) 05:02:24 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) 05:02:24 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 05:02:24 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:02:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:02:24 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 1864.946786] attempt to access beyond end of device [ 1864.946786] loop5: rw=1, want=22, limit=15 [ 1864.948736] buffer_io_error: 4 callbacks suppressed [ 1864.948748] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1864.954844] attempt to access beyond end of device [ 1864.954844] loop5: rw=1, want=23, limit=15 [ 1864.956730] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1864.958595] attempt to access beyond end of device [ 1864.958595] loop5: rw=1, want=24, limit=15 [ 1864.960451] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 1864.965601] attempt to access beyond end of device [ 1864.965601] loop5: rw=1, want=25, limit=15 [ 1864.967494] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 1864.969285] attempt to access beyond end of device [ 1864.969285] loop5: rw=1, want=26, limit=15 [ 1864.972682] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 1864.977897] attempt to access beyond end of device [ 1864.977897] loop5: rw=1, want=27, limit=15 [ 1864.979792] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1864.981860] attempt to access beyond end of device [ 1864.981860] loop5: rw=1, want=28, limit=15 [ 1864.983710] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 1864.990189] attempt to access beyond end of device [ 1864.990189] loop5: rw=1, want=2044, limit=15 05:02:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6000000, @loopback}, 0x1c) 05:02:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) 05:02:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, 0xffffffffffffffff, 0x0, 0x80000001) 05:02:44 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:02:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x263e) 05:02:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x218, @loopback}, 0x1c) 05:02:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:02:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 1884.711603] attempt to access beyond end of device [ 1884.711603] loop5: rw=2049, want=21, limit=15 05:02:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2701) 05:02:44 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:02:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 05:02:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x240, @loopback}, 0x1c) [ 1884.852001] attempt to access beyond end of device [ 1884.852001] loop5: rw=1, want=22, limit=15 [ 1884.853984] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1884.855719] attempt to access beyond end of device [ 1884.855719] loop5: rw=1, want=23, limit=15 [ 1884.857661] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1884.872713] attempt to access beyond end of device [ 1884.872713] loop5: rw=1, want=24, limit=15 [ 1884.874651] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:02:44 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:02:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 1884.892390] attempt to access beyond end of device [ 1884.892390] loop5: rw=1, want=25, limit=15 [ 1884.894358] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 1884.909575] attempt to access beyond end of device [ 1884.909575] loop5: rw=1, want=26, limit=15 [ 1884.911669] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:02:44 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x0) [ 1884.929494] attempt to access beyond end of device [ 1884.929494] loop5: rw=1, want=27, limit=15 [ 1884.931419] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1884.946134] attempt to access beyond end of device [ 1884.946134] loop5: rw=1, want=28, limit=15 [ 1884.948170] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 1884.974268] attempt to access beyond end of device [ 1884.974268] loop5: rw=1, want=2044, limit=15 05:02:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3e26) [ 1885.187513] attempt to access beyond end of device [ 1885.187513] loop5: rw=2049, want=21, limit=15 [ 1885.421845] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1885.423782] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1885.426160] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:03:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x300, @loopback}, 0x1c) 05:03:00 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:03:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7000000, @loopback}, 0x1c) 05:03:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:00 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:00 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x2c2a0000, 0x0, 0x0, 0x0) 05:03:00 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) 05:03:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x0) [ 1901.077570] handle_bad_sector: 8 callbacks suppressed [ 1901.077583] attempt to access beyond end of device [ 1901.077583] loop5: rw=2049, want=21, limit=15 05:03:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3e8, @loopback}, 0x1c) 05:03:00 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 05:03:00 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0) 05:03:00 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x500, @loopback}, 0x1c) 05:03:01 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc40c) 05:03:01 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x40000000, 0x0, 0x0, 0x0) [ 1901.486828] attempt to access beyond end of device [ 1901.486828] loop5: rw=1, want=22, limit=15 [ 1901.489076] buffer_io_error: 4 callbacks suppressed [ 1901.489089] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1901.492501] attempt to access beyond end of device [ 1901.492501] loop5: rw=1, want=23, limit=15 [ 1901.494458] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1901.499561] attempt to access beyond end of device [ 1901.499561] loop5: rw=1, want=24, limit=15 [ 1901.501583] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 1901.504584] attempt to access beyond end of device [ 1901.504584] loop5: rw=1, want=25, limit=15 [ 1901.506587] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 1901.511695] attempt to access beyond end of device [ 1901.511695] loop5: rw=1, want=26, limit=15 [ 1901.513682] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 1901.517189] attempt to access beyond end of device [ 1901.517189] loop5: rw=1, want=27, limit=15 [ 1901.519305] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1901.523384] attempt to access beyond end of device [ 1901.523384] loop5: rw=1, want=28, limit=15 [ 1901.525398] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 1901.538153] attempt to access beyond end of device [ 1901.538153] loop5: rw=1, want=2044, limit=15 05:03:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000000, @loopback}, 0x1c) 05:03:16 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:16 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:03:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0xc40c0000, 0x0, 0x0, 0x0) 05:03:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x600, @loopback}, 0x1c) 05:03:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 05:03:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x0) 05:03:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) [ 1916.801740] attempt to access beyond end of device [ 1916.801740] loop5: rw=2049, want=21, limit=15 05:03:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x700, @loopback}, 0x1c) 05:03:16 executing program 4: r0 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0xe4ffffff, 0x0, 0x0, 0x0) 05:03:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe00, @loopback}, 0x1c) 05:03:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000) [ 1917.048756] attempt to access beyond end of device [ 1917.048756] loop5: rw=1, want=22, limit=15 [ 1917.051119] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 1917.053216] attempt to access beyond end of device [ 1917.053216] loop5: rw=1, want=23, limit=15 [ 1917.055275] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 1917.064070] attempt to access beyond end of device [ 1917.064070] loop5: rw=1, want=24, limit=15 [ 1917.066202] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 1917.076546] attempt to access beyond end of device [ 1917.076546] loop5: rw=1, want=25, limit=15 [ 1917.077861] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 1917.084737] attempt to access beyond end of device [ 1917.084737] loop5: rw=1, want=26, limit=15 [ 1917.086027] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 1917.088438] attempt to access beyond end of device [ 1917.088438] loop5: rw=1, want=27, limit=15 [ 1917.089444] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 1917.095998] attempt to access beyond end of device [ 1917.095998] loop5: rw=1, want=28, limit=15 [ 1917.097041] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 1917.103430] attempt to access beyond end of device [ 1917.103430] loop5: rw=1, want=2044, limit=15 05:03:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe000000, @loopback}, 0x1c) 05:03:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:03:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1802, @loopback}, 0x1c) 05:03:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0xe7020000, 0x0, 0x0, 0x0) 05:03:31 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 05:03:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0xffffffe4, 0x0, 0x0, 0x0) 05:03:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000, @loopback}, 0x1c) 05:03:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 05:03:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:03:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 05:03:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000120, @loopback}, 0x1c) 05:03:54 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4002, @loopback}, 0x1c) 05:03:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:03:54 executing program 4: r0 = syz_io_uring_setup(0x4d4f, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:54 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x5, 0x0, 0x0) 05:03:54 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x27010000) 05:03:54 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5000, @loopback}, 0x1c) 05:03:54 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) 05:03:54 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:03:54 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:54 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3e260000) 05:03:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x80fe, @loopback}, 0x1c) 05:03:54 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2e7, 0x0, 0x0) 05:03:54 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) 05:03:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x18020000, @loopback}, 0x1c) 05:03:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:03:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x500, 0x0, 0x0) 05:03:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc0fe, @loopback}, 0x1c) 05:03:55 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) 05:03:55 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:03:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe803, @loopback}, 0x1c) 05:03:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xcc4, 0x0, 0x0) 05:04:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x20010010, @loopback}, 0x1c) 05:04:12 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:04:12 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:04:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf401, @loopback}, 0x1c) 05:04:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc40c0000) 05:04:12 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:12 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) 05:04:12 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:12 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff) 05:04:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc00, @loopback}, 0x1c) 05:04:12 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2a2c, 0x0, 0x0) 05:04:12 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:13 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4) 05:04:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe80, @loopback}, 0x1c) 05:04:13 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2c2a, 0x0, 0x0) 05:04:13 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 05:04:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:04:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfec0, @loopback}, 0x1c) 05:04:29 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00, 0x0, 0x0) 05:04:29 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:29 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:04:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x20020000, @loopback}, 0x1c) 05:04:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff00, @loopback}, 0x1c) 05:04:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x40000000, @loopback}, 0x1c) 05:04:48 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:48 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) 05:04:48 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 05:04:48 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:04:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:04:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff0f, @loopback}, 0x1c) 05:04:48 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xc40c, 0x0, 0x0) 05:04:48 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000) 05:04:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:04:48 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:04:48 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe702, 0x0, 0x0) 05:04:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x30000, @loopback}, 0x1c) 05:05:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x40020000, @loopback}, 0x1c) 05:05:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000) 05:05:03 executing program 5: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x50000, @loopback}, 0x1c) 05:05:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:05:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000, 0x0, 0x0) 05:05:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:03 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 05:05:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x60000, @loopback}, 0x1c) 05:05:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:05:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000, 0x0, 0x0) 05:05:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x70000, @loopback}, 0x1c) 05:05:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x50000000, @loopback}, 0x1c) 05:05:19 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x5000000, 0x0, 0x0) 05:05:19 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 1) 05:05:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:05:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2701000000000000) 05:05:19 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe0000, @loopback}, 0x1c) 05:05:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2040.085270] attempt to access beyond end of device [ 2040.085270] loop5: rw=2049, want=21, limit=15 05:05:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x400000, @loopback}, 0x1c) 05:05:19 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x8000000, 0x0, 0x0) 05:05:19 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3e26000000000000) 05:05:19 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) 05:05:19 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2040.183672] FAULT_INJECTION: forcing a failure. [ 2040.183672] name failslab, interval 1, probability 0, space 0, times 0 [ 2040.186127] CPU: 0 PID: 11791 Comm: syz-executor.5 Not tainted 5.10.167 #1 [ 2040.187628] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2040.189395] Call Trace: [ 2040.189983] dump_stack+0x107/0x167 [ 2040.190766] should_fail.cold+0x5/0xa [ 2040.191602] ? alloc_pipe_info+0x105/0x580 [ 2040.192515] should_failslab+0x5/0x20 [ 2040.193334] kmem_cache_alloc_trace+0x55/0x360 [ 2040.194322] alloc_pipe_info+0x105/0x580 [ 2040.195202] splice_direct_to_actor+0x774/0x980 [ 2040.196238] ? _cond_resched+0x12/0x80 [ 2040.197077] ? inode_security+0x107/0x140 [ 2040.197961] ? pipe_to_sendpage+0x380/0x380 [ 2040.198890] ? selinux_file_permission+0x36/0x510 [ 2040.199935] ? do_splice_to+0x160/0x160 [ 2040.200788] ? security_file_permission+0x24e/0x570 [ 2040.201865] do_splice_direct+0x1c4/0x290 [ 2040.202753] ? splice_direct_to_actor+0x980/0x980 [ 2040.203798] ? selinux_file_permission+0x36/0x510 [ 2040.204834] ? security_file_permission+0x24e/0x570 [ 2040.205917] do_sendfile+0x553/0x1040 [ 2040.206745] ? do_pwritev+0x270/0x270 [ 2040.207587] ? wait_for_completion_io+0x270/0x270 [ 2040.208617] ? rcu_read_lock_any_held+0x75/0xa0 [ 2040.209603] ? vfs_write+0x354/0xa30 [ 2040.210409] __x64_sys_sendfile64+0x1d1/0x210 [ 2040.211376] ? __ia32_sys_sendfile+0x220/0x220 [ 2040.212358] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2040.213478] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2040.214581] do_syscall_64+0x33/0x40 [ 2040.215397] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2040.216488] RIP: 0033:0x7f25e5c8bb19 [ 2040.217286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2040.221199] RSP: 002b:00007f25e31e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2040.222824] RAX: ffffffffffffffda RBX: 00007f25e5d9f020 RCX: 00007f25e5c8bb19 [ 2040.224351] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2040.225868] RBP: 00007f25e31e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2040.227406] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 2040.228924] R13: 00007ffe8c3a8ecf R14: 00007f25e31e0300 R15: 0000000000022000 05:05:20 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2c2a0000, 0x0, 0x0) 05:05:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x500000, @loopback}, 0x1c) [ 2040.547786] attempt to access beyond end of device [ 2040.547786] loop5: rw=1, want=22, limit=15 [ 2040.550184] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2040.552337] attempt to access beyond end of device [ 2040.552337] loop5: rw=1, want=23, limit=15 [ 2040.554509] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2040.560637] attempt to access beyond end of device [ 2040.560637] loop5: rw=1, want=24, limit=15 [ 2040.562837] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2040.570433] attempt to access beyond end of device [ 2040.570433] loop5: rw=1, want=25, limit=15 [ 2040.572649] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2040.578062] attempt to access beyond end of device [ 2040.578062] loop5: rw=1, want=26, limit=15 [ 2040.580115] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2040.586063] attempt to access beyond end of device [ 2040.586063] loop5: rw=1, want=27, limit=15 [ 2040.589903] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2040.595120] attempt to access beyond end of device [ 2040.595120] loop5: rw=1, want=28, limit=15 [ 2040.597108] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2040.606606] attempt to access beyond end of device [ 2040.606606] loop5: rw=1, want=2044, limit=15 [ 2055.755885] attempt to access beyond end of device [ 2055.755885] loop5: rw=2049, want=21, limit=15 05:05:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:05:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f000000, 0x0, 0x0) 05:05:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfcffff, @loopback}, 0x1c) 05:05:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000) 05:05:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 2) 05:05:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x91ffffff, @loopback}, 0x1c) [ 2055.809424] FAULT_INJECTION: forcing a failure. [ 2055.809424] name failslab, interval 1, probability 0, space 0, times 0 [ 2055.811870] CPU: 0 PID: 11837 Comm: syz-executor.5 Not tainted 5.10.167 #1 [ 2055.813287] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2055.814986] Call Trace: [ 2055.815540] dump_stack+0x107/0x167 [ 2055.816318] should_fail.cold+0x5/0xa [ 2055.817113] ? create_object.isra.0+0x3a/0xa20 [ 2055.818058] should_failslab+0x5/0x20 [ 2055.818840] kmem_cache_alloc+0x5b/0x360 [ 2055.819698] create_object.isra.0+0x3a/0xa20 [ 2055.820589] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2055.821631] kmem_cache_alloc_trace+0x151/0x360 [ 2055.822587] alloc_pipe_info+0x105/0x580 [ 2055.823437] splice_direct_to_actor+0x774/0x980 [ 2055.824389] ? _cond_resched+0x12/0x80 [ 2055.825191] ? inode_security+0x107/0x140 [ 2055.826029] ? pipe_to_sendpage+0x380/0x380 [ 2055.826902] ? selinux_file_permission+0x36/0x510 [ 2055.827892] ? do_splice_to+0x160/0x160 [ 2055.828701] ? security_file_permission+0x24e/0x570 [ 2055.829711] do_splice_direct+0x1c4/0x290 [ 2055.830578] ? splice_direct_to_actor+0x980/0x980 [ 2055.831576] ? selinux_file_permission+0x36/0x510 [ 2055.832575] ? security_file_permission+0x24e/0x570 [ 2055.833609] do_sendfile+0x553/0x1040 [ 2055.834407] ? do_pwritev+0x270/0x270 [ 2055.835194] ? wait_for_completion_io+0x270/0x270 [ 2055.836206] ? rcu_read_lock_any_held+0x75/0xa0 [ 2055.837173] ? vfs_write+0x354/0xa30 [ 2055.837964] __x64_sys_sendfile64+0x1d1/0x210 [ 2055.838882] ? __ia32_sys_sendfile+0x220/0x220 [ 2055.839792] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2055.840866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2055.841939] do_syscall_64+0x33/0x40 [ 2055.842703] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2055.843766] RIP: 0033:0x7f25e5c8bb19 [ 2055.844543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2055.848326] RSP: 002b:00007f25e31e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2055.849902] RAX: ffffffffffffffda RBX: 00007f25e5d9f020 RCX: 00007f25e5c8bb19 [ 2055.851376] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2055.852860] RBP: 00007f25e31e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2055.854323] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 2055.855802] R13: 00007ffe8c3a8ecf R14: 00007f25e31e0300 R15: 0000000000022000 05:05:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000, 0x0, 0x0) 05:05:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) 05:05:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffff, @loopback}, 0x1c) [ 2055.936186] attempt to access beyond end of device [ 2055.936186] loop5: rw=2049, want=22, limit=15 [ 2055.937506] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2055.938658] attempt to access beyond end of device [ 2055.938658] loop5: rw=2049, want=23, limit=15 [ 2055.940011] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2055.950187] attempt to access beyond end of device [ 2055.950187] loop5: rw=2049, want=24, limit=15 [ 2055.951582] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2055.953042] attempt to access beyond end of device [ 2055.953042] loop5: rw=2049, want=25, limit=15 [ 2055.954288] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2055.963103] attempt to access beyond end of device [ 2055.963103] loop5: rw=2049, want=26, limit=15 [ 2055.964361] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2055.971081] attempt to access beyond end of device [ 2055.971081] loop5: rw=2049, want=27, limit=15 [ 2055.972410] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2055.978904] attempt to access beyond end of device [ 2055.978904] loop5: rw=2049, want=28, limit=15 [ 2055.980310] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2055.987704] attempt to access beyond end of device [ 2055.987704] loop5: rw=2049, want=148, limit=15 05:05:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc40c000000000000) 05:05:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xc40c0000, 0x0, 0x0) [ 2056.045185] attempt to access beyond end of device [ 2056.045185] loop5: rw=1, want=2044, limit=15 05:05:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 3) 05:05:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2056.304492] FAULT_INJECTION: forcing a failure. [ 2056.304492] name failslab, interval 1, probability 0, space 0, times 0 [ 2056.306038] CPU: 1 PID: 11873 Comm: syz-executor.5 Not tainted 5.10.167 #1 [ 2056.306807] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2056.307739] Call Trace: [ 2056.308040] dump_stack+0x107/0x167 [ 2056.308448] should_fail.cold+0x5/0xa [ 2056.308874] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2056.309460] should_failslab+0x5/0x20 [ 2056.309883] __kmalloc_node+0x76/0x4b0 [ 2056.310320] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 2056.310875] memcg_slab_post_alloc_hook+0x1f9/0x3f0 [ 2056.311439] ? trace_hardirqs_on+0x5b/0x180 [ 2056.311939] kmem_cache_alloc_trace+0x169/0x360 [ 2056.312460] alloc_pipe_info+0x105/0x580 [ 2056.312921] splice_direct_to_actor+0x774/0x980 [ 2056.313437] ? _cond_resched+0x12/0x80 [ 2056.313880] ? inode_security+0x107/0x140 [ 2056.314337] ? pipe_to_sendpage+0x380/0x380 [ 2056.314799] ? selinux_file_permission+0x36/0x510 [ 2056.315330] ? do_splice_to+0x160/0x160 [ 2056.315783] ? security_file_permission+0x24e/0x570 [ 2056.316343] do_splice_direct+0x1c4/0x290 [ 2056.316813] ? splice_direct_to_actor+0x980/0x980 [ 2056.317340] ? selinux_file_permission+0x36/0x510 [ 2056.317888] ? security_file_permission+0x24e/0x570 [ 2056.318453] do_sendfile+0x553/0x1040 [ 2056.318870] ? do_pwritev+0x270/0x270 [ 2056.319296] ? wait_for_completion_io+0x270/0x270 [ 2056.319816] ? rcu_read_lock_any_held+0x75/0xa0 [ 2056.320318] ? vfs_write+0x354/0xa30 [ 2056.320738] __x64_sys_sendfile64+0x1d1/0x210 [ 2056.321222] ? __ia32_sys_sendfile+0x220/0x220 [ 2056.321724] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2056.322276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2056.322836] do_syscall_64+0x33/0x40 [ 2056.323250] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2056.323817] RIP: 0033:0x7f25e5c8bb19 [ 2056.324222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2056.326259] RSP: 002b:00007f25e31e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2056.327106] RAX: ffffffffffffffda RBX: 00007f25e5d9f020 RCX: 00007f25e5c8bb19 [ 2056.327895] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2056.328656] RBP: 00007f25e31e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2056.329437] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 2056.330185] R13: 00007ffe8c3a8ecf R14: 00007f25e31e0300 R15: 0000000000022000 [ 2056.417547] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2056.418526] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2056.420456] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:05:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 4) 05:05:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff, 0x0, 0x0) 05:05:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1000000, @loopback}, 0x1c) 05:05:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000) 05:05:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x9aad79c1, @loopback}, 0x1c) 05:05:52 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, 0x0, 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:05:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe7020000, 0x0, 0x0) [ 2072.987222] handle_bad_sector: 10 callbacks suppressed [ 2072.987239] attempt to access beyond end of device [ 2072.987239] loop5: rw=2049, want=21, limit=15 05:05:52 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:05:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) [ 2073.074880] FAULT_INJECTION: forcing a failure. [ 2073.074880] name failslab, interval 1, probability 0, space 0, times 0 [ 2073.077287] CPU: 1 PID: 11908 Comm: syz-executor.5 Not tainted 5.10.167 #1 [ 2073.078784] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2073.080644] Call Trace: [ 2073.081283] dump_stack+0x107/0x167 [ 2073.082163] should_fail.cold+0x5/0xa [ 2073.082940] ? create_object.isra.0+0x3a/0xa20 [ 2073.083871] should_failslab+0x5/0x20 [ 2073.084662] kmem_cache_alloc+0x5b/0x360 [ 2073.085633] create_object.isra.0+0x3a/0xa20 [ 2073.086638] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2073.087871] __kmalloc+0x16e/0x3f0 [ 2073.088728] alloc_pipe_info+0x1e0/0x580 [ 2073.089622] splice_direct_to_actor+0x774/0x980 [ 2073.090555] ? _cond_resched+0x12/0x80 [ 2073.091385] ? inode_security+0x107/0x140 [ 2073.092241] ? pipe_to_sendpage+0x380/0x380 [ 2073.093111] ? selinux_file_permission+0x36/0x510 [ 2073.094099] ? do_splice_to+0x160/0x160 [ 2073.094938] ? security_file_permission+0x24e/0x570 [ 2073.096021] do_splice_direct+0x1c4/0x290 [ 2073.096901] ? splice_direct_to_actor+0x980/0x980 [ 2073.097928] ? selinux_file_permission+0x36/0x510 [ 2073.098950] ? security_file_permission+0x24e/0x570 [ 2073.100019] do_sendfile+0x553/0x1040 [ 2073.100792] ? do_pwritev+0x270/0x270 [ 2073.101549] ? wait_for_completion_io+0x270/0x270 [ 2073.102506] ? rcu_read_lock_any_held+0x75/0xa0 [ 2073.103420] ? vfs_write+0x354/0xa30 [ 2073.104330] __x64_sys_sendfile64+0x1d1/0x210 [ 2073.105280] ? __ia32_sys_sendfile+0x220/0x220 [ 2073.106197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2073.107264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2073.108448] do_syscall_64+0x33/0x40 [ 2073.109278] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2073.110372] RIP: 0033:0x7f25e5c8bb19 [ 2073.111115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2073.115086] RSP: 002b:00007f25e31e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2073.116691] RAX: ffffffffffffffda RBX: 00007f25e5d9f020 RCX: 00007f25e5c8bb19 [ 2073.118101] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2073.119561] RBP: 00007f25e31e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2073.121016] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 2073.122490] R13: 00007ffe8c3a8ecf R14: 00007f25e31e0300 R15: 0000000000022000 05:05:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000000, @loopback}, 0x1c) 05:05:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:05:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffe4, 0x0, 0x0) 05:05:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3000000, @loopback}, 0x1c) 05:05:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4000000, @loopback}, 0x1c) [ 2073.452910] attempt to access beyond end of device [ 2073.452910] loop5: rw=2049, want=22, limit=15 [ 2073.455059] buffer_io_error: 4 callbacks suppressed [ 2073.455072] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2073.481485] attempt to access beyond end of device [ 2073.481485] loop5: rw=2049, want=23, limit=15 [ 2073.483746] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2073.500867] attempt to access beyond end of device [ 2073.500867] loop5: rw=2049, want=24, limit=15 [ 2073.503399] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2073.527632] attempt to access beyond end of device [ 2073.527632] loop5: rw=2049, want=25, limit=15 [ 2073.529817] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2073.542341] attempt to access beyond end of device [ 2073.542341] loop5: rw=2049, want=26, limit=15 [ 2073.544527] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2073.564401] attempt to access beyond end of device [ 2073.564401] loop5: rw=2049, want=27, limit=15 [ 2073.566743] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2073.579659] attempt to access beyond end of device [ 2073.579659] loop5: rw=2049, want=28, limit=15 [ 2073.581816] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2073.594891] attempt to access beyond end of device [ 2073.594891] loop5: rw=2049, want=148, limit=15 [ 2073.646862] attempt to access beyond end of device [ 2073.646862] loop5: rw=1, want=2044, limit=15 05:06:08 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x80000000000000, 0x0, 0x0) 05:06:08 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:08 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x800}}, './file0/file0\x00'}) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r10 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x80000000, 0x6, &(0x7f0000001600)=[{&(0x7f0000000100)="e421792b6961a635b804c3f3955e82058b4c365d4d5fecd06f80e9074f87405b4575c2841ac9", 0x26, 0xff}, {&(0x7f0000000340)="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", 0x1000, 0x8000}, {&(0x7f0000001340)="e94d06bb7ce10a46aa86878d2f9e30a71dff0ea9f2ac4fede12b854f56b66c41291cdd8adcc0c77de4434b1cedd98138a135d0db1a53dbc6ff52410ab3e5378c7d2cf2eb61d48c260de2306449435704fec1186ed1f88fbcaf6ca6e1164f637bb9ba3acbb59139f941e47e7b79ba41598aa641acd7fd6db5750bf6015e045b47be28ec401d9e63201444396d7b389e13e1aba7d96d0184f6e0382809cba1ecd099181e547685022fbec7c6c81928610f256ccc45f0b7555f7bd28a72c2dc63b38e2937a1c28f2ef3", 0xc8, 0x101}, {&(0x7f0000001440)="a11b90fe00733bc0e249adac97fa86cba838f5a2ff3b7b66a4ca46f6a3311fb762f1410be88a05920f504529be661ab3c07ab14b8672cfdf03c27bd7a85d3dae4c7eead2a6824d102cacce8eb0cf54bfb1b1655ba076f95ec5a339a08c280b36e2b7ada05afd92110e9d991728c3dd40d92fa7f807cd5edc5bacdf8c5431448e9ec9fa38cfadd7d820ca592135d6d765f67ee781d05ef3e65776406ea0ee9745a59fc4e12f0ef5d59cee5eb0affa02fa6500ec625e12b58652", 0xb9, 0x3}, {&(0x7f0000000180)="5ae6bbfe0639b8c536dfd185b129f0ebb1ad123a97e98ff5fbb2aa3a", 0x1c, 0x1}, {&(0x7f0000001500)="1d6da1a973d36b210e64e43c895fdb84d70af85588c02250ee0d7d2bb97ab270fb5d72a1cd08623d112b8985dd62179fdc2c73d05b3c18a9f2019283ad738843bd4eb1ca801775ccb92e81264eced586213431ebd1c4d2b9453eab74340596c2bad59d11b3541665460a7ed57231abc204cbd1800c747ce37cef95265685191cb34b88db50d59c3f3fed02a1690c22a9ed035e0ad39d62b876b337f4d42664113fafe73e4926cf2396121c1a92955a46db4316575e60adf9f751dcf4d7749f7194", 0xc1, 0x8000}], 0x800, &(0x7f00000016c0)={[{@nobh}, {@nombcache}, {@grpid}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/full\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@dont_appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '\x00'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_FSYNC={0x3, 0x3, 0x0, @fd=r10}, 0x40) 05:06:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc179ad9a, @loopback}, 0x1c) 05:06:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5000000, @loopback}, 0x1c) 05:06:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:06:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) (fail_nth: 5) 05:06:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:08 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x200000000000000, 0x0, 0x0) [ 2088.693185] attempt to access beyond end of device [ 2088.693185] loop5: rw=2049, want=21, limit=15 [ 2088.695231] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 05:06:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x6000000, @loopback}, 0x1c) 05:06:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2088.764438] FAULT_INJECTION: forcing a failure. [ 2088.764438] name failslab, interval 1, probability 0, space 0, times 0 [ 2088.767023] CPU: 0 PID: 11981 Comm: syz-executor.5 Not tainted 5.10.167 #1 [ 2088.768476] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2088.770198] Call Trace: [ 2088.770777] dump_stack+0x107/0x167 [ 2088.771550] should_fail.cold+0x5/0xa [ 2088.772378] ? mempool_alloc+0x148/0x360 [ 2088.773216] ? mempool_free_pages+0x20/0x20 [ 2088.774117] should_failslab+0x5/0x20 [ 2088.774904] kmem_cache_alloc+0x5b/0x360 [ 2088.775745] ? mempool_free_pages+0x20/0x20 [ 2088.776653] mempool_alloc+0x148/0x360 [ 2088.777469] ? mempool_resize+0x7d0/0x7d0 [ 2088.778314] ? lock_downgrade+0x6d0/0x6d0 [ 2088.779220] bio_alloc_bioset+0x36e/0x600 [ 2088.780103] ? bvec_alloc+0x2f0/0x2f0 [ 2088.780897] ? write_one_page+0x4f0/0x4f0 [ 2088.781761] submit_bh_wbc.constprop.0+0x1b8/0x780 [ 2088.782790] __block_write_full_page+0x7cd/0x1050 [ 2088.783786] ? end_buffer_write_sync+0xf0/0xf0 [ 2088.784732] ? fat_add_cluster+0x100/0x100 [ 2088.785606] block_write_full_page+0x220/0x290 [ 2088.786538] ? fat_add_cluster+0x100/0x100 [ 2088.787419] __mpage_writepage+0x7ed/0x1670 [ 2088.788349] ? clean_buffers+0x2a0/0x2a0 [ 2088.789193] ? page_mapped+0x18b/0x350 [ 2088.789991] ? find_get_pages_range_tag+0x5f1/0xbb0 [ 2088.791002] ? page_mkclean+0x151/0x2c0 [ 2088.791816] ? invalid_page_referenced_vma+0x520/0x520 [ 2088.792899] ? find_get_pages_contig+0x940/0x940 [ 2088.793877] ? mark_held_locks+0x9e/0xe0 [ 2088.794787] ? percpu_counter_add_batch+0x8b/0x140 [ 2088.795866] write_cache_pages+0x57f/0xef0 [ 2088.796814] ? clean_buffers+0x2a0/0x2a0 [ 2088.797690] ? clear_page_dirty_for_io+0x7c0/0x7c0 [ 2088.798777] ? perf_trace_lock+0xac/0x490 [ 2088.799675] ? __is_insn_slot_addr+0x124/0x260 [ 2088.800714] ? find_held_lock+0x2c/0x110 [ 2088.801605] ? fat_add_cluster+0x100/0x100 [ 2088.802505] ? fat_readahead+0x20/0x20 [ 2088.803348] mpage_writepages+0xd8/0x230 [ 2088.804228] ? mpage_end_io+0x2c0/0x2c0 [ 2088.805121] ? fat_add_cluster+0x100/0x100 [ 2088.806068] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2088.807226] ? __is_insn_slot_addr+0x14d/0x260 [ 2088.808256] ? kernel_text_address+0xf2/0x120 [ 2088.809256] do_writepages+0xee/0x2a0 [ 2088.810115] ? page_writeback_cpu_online+0x20/0x20 [ 2088.811222] ? stack_trace_save+0x8c/0xc0 [ 2088.812145] ? stack_trace_consume_entry+0x160/0x160 [ 2088.813203] __filemap_fdatawrite_range+0x24b/0x2f0 [ 2088.814265] ? delete_from_page_cache_batch+0xcc0/0xcc0 [ 2088.815364] ? kasan_save_stack+0x32/0x40 [ 2088.816240] ? do_sendfile+0x553/0x1040 [ 2088.817054] ? __x64_sys_sendfile64+0x1d1/0x210 [ 2088.818015] ? do_syscall_64+0x33/0x40 [ 2088.818821] ? entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2088.819925] ? perf_trace_lock+0xac/0x490 [ 2088.820805] ? lock_chain_count+0x20/0x20 [ 2088.821660] filemap_write_and_wait_range+0x65/0x100 [ 2088.822718] generic_file_read_iter+0x359/0x490 [ 2088.823701] generic_file_splice_read+0x455/0x6d0 [ 2088.824696] ? pipe_to_user+0x170/0x170 [ 2088.825551] ? _cond_resched+0x12/0x80 [ 2088.826359] ? avc_policy_seqno+0x9/0x70 [ 2088.827208] ? selinux_file_permission+0x36/0x510 [ 2088.828315] ? lockdep_init_map_type+0x2c7/0x780 [ 2088.829379] ? pipe_to_user+0x170/0x170 [ 2088.830224] do_splice_to+0x10e/0x160 [ 2088.831020] splice_direct_to_actor+0x2fe/0x980 [ 2088.832006] ? pipe_to_sendpage+0x380/0x380 [ 2088.832950] ? do_splice_to+0x160/0x160 [ 2088.833859] ? security_file_permission+0x24e/0x570 [ 2088.834952] do_splice_direct+0x1c4/0x290 [ 2088.835824] ? splice_direct_to_actor+0x980/0x980 [ 2088.836840] ? selinux_file_permission+0x36/0x510 [ 2088.837849] ? security_file_permission+0x24e/0x570 [ 2088.838897] do_sendfile+0x553/0x1040 [ 2088.839705] ? do_pwritev+0x270/0x270 [ 2088.840513] ? wait_for_completion_io+0x270/0x270 [ 2088.841518] ? rcu_read_lock_any_held+0x75/0xa0 [ 2088.842485] ? vfs_write+0x354/0xa30 [ 2088.843266] __x64_sys_sendfile64+0x1d1/0x210 [ 2088.844209] ? __ia32_sys_sendfile+0x220/0x220 [ 2088.845159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2088.846276] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2088.847364] do_syscall_64+0x33/0x40 [ 2088.848165] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2088.849249] RIP: 0033:0x7f25e5c8bb19 [ 2088.850031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2088.853829] RSP: 002b:00007f25e31e0188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2088.855402] RAX: ffffffffffffffda RBX: 00007f25e5d9f020 RCX: 00007f25e5c8bb19 [ 2088.856863] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 2088.858342] RBP: 00007f25e31e01d0 R08: 0000000000000000 R09: 0000000000000000 [ 2088.859794] R10: 0000000080000001 R11: 0000000000000246 R12: 0000000000000001 [ 2088.861281] R13: 00007ffe8c3a8ecf R14: 00007f25e31e0300 R15: 0000000000022000 05:06:08 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000080)={0x14, 0x24, 0xe, 0x17, 0x1, 0x4, 0x2, 0x127, 0x1}) 05:06:08 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x500000000000000, 0x0, 0x0) 05:06:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7000000, @loopback}, 0x1c) 05:06:08 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:06:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2089.408562] attempt to access beyond end of device [ 2089.408562] loop5: rw=2049, want=22, limit=15 [ 2089.410532] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2089.420015] attempt to access beyond end of device [ 2089.420015] loop5: rw=2049, want=23, limit=15 [ 2089.421871] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2089.433501] attempt to access beyond end of device [ 2089.433501] loop5: rw=2049, want=24, limit=15 [ 2089.435321] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2089.446236] attempt to access beyond end of device [ 2089.446236] loop5: rw=2049, want=25, limit=15 [ 2089.448103] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2089.454701] attempt to access beyond end of device [ 2089.454701] loop5: rw=2049, want=26, limit=15 [ 2089.456547] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2089.462289] attempt to access beyond end of device [ 2089.462289] loop5: rw=2049, want=27, limit=15 [ 2089.464113] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2089.471146] attempt to access beyond end of device [ 2089.471146] loop5: rw=2049, want=28, limit=15 [ 2089.473022] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2089.479492] attempt to access beyond end of device [ 2089.479492] loop5: rw=2049, want=148, limit=15 [ 2089.519928] attempt to access beyond end of device [ 2089.519928] loop5: rw=1, want=2044, limit=15 05:06:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:06:26 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000000, @loopback}, 0x1c) 05:06:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf5ffffff, @loopback}, 0x1c) 05:06:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x800000000000000, 0x0, 0x0) 05:06:26 executing program 7: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000b8923a1475dccf5e78de799ca186e9828d55552ff012866edd5f1fa28ccaf9ad8a2f495333e04735438487e25ebb3039e31a07c57710000001a9371c4f83668095b11a812c1d7c5f11a302891d7", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000050601020000000000000000020000090900020073797a31000000000900030073797a300000000005000100070000000900020073797a320000000005000100070000000900030073797a300073797a3200"/96], 0x60}, 0x1, 0x0, 0x0, 0xc0000}, 0x40004) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = getpgrp(0x0) tgkill(r4, r4, 0x0) kcmp(r4, 0x0, 0x0, r0, r0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:06:26 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) [ 2106.512226] attempt to access beyond end of device [ 2106.512226] loop5: rw=2049, want=21, limit=15 05:06:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) [ 2106.596811] attempt to access beyond end of device [ 2106.596811] loop5: rw=2049, want=22, limit=15 [ 2106.599013] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:06:26 executing program 7: ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000340)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:06:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe000000, @loopback}, 0x1c) [ 2106.641095] attempt to access beyond end of device [ 2106.641095] loop5: rw=2049, want=23, limit=15 [ 2106.642613] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2106.645691] attempt to access beyond end of device [ 2106.645691] loop5: rw=2049, want=24, limit=15 [ 2106.647212] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2106.658618] attempt to access beyond end of device [ 2106.658618] loop5: rw=2049, want=25, limit=15 [ 2106.660147] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2106.673861] attempt to access beyond end of device [ 2106.673861] loop5: rw=2049, want=26, limit=15 [ 2106.675378] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2106.691494] attempt to access beyond end of device [ 2106.691494] loop5: rw=2049, want=27, limit=15 [ 2106.693123] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2106.713946] attempt to access beyond end of device [ 2106.713946] loop5: rw=2049, want=28, limit=15 [ 2106.715452] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2106.735089] attempt to access beyond end of device [ 2106.735089] loop5: rw=2049, want=148, limit=15 05:06:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2c2a000000000000, 0x0, 0x0) 05:06:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x18020000, @loopback}, 0x1c) 05:06:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:06:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x28b703b7, @loopback}, 0x1c) 05:06:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3f00000000000000, 0x0, 0x0) [ 2107.034647] attempt to access beyond end of device [ 2107.034647] loop5: rw=1, want=2044, limit=15 05:06:40 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x4000000000000000, 0x0, 0x0) 05:06:40 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x40058ab, 0x3, 0x0, 0x0, 0xfffffe54) r4 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x486800, 0xb0) io_uring_enter(r0, 0x31e0, 0x13e9, 0x1, &(0x7f0000000580)={[0x5]}, 0x8) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x30, r4, 0x8000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r6, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/114, 0x72}, {&(0x7f0000000240)=""/59, 0x3b}, {&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/68, 0x44}], 0x4, &(0x7f00000004c0)=""/33, 0x21}, 0x0, 0x40, 0x2, {0x2, r7}}, 0x4) 05:06:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x3f8cc2e3, @loopback}, 0x1c) 05:06:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc000000, @loopback}, 0x1c) 05:06:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000002) 05:06:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:06:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2120.344788] attempt to access beyond end of device [ 2120.344788] loop5: rw=2049, want=21, limit=15 05:06:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x40000000, @loopback}, 0x1c) 05:06:40 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_setup(0x8000, &(0x7f0000000080)={0x0, 0xe79c, 0x20, 0x1, 0x358, 0x0, r0}) syz_io_uring_setup(0x71e6, &(0x7f0000000180)={0x0, 0xdb54, 0x8, 0x1, 0x6d, 0x0, r3}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000000100), &(0x7f0000000240)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000006, 0x4000010, r4, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r4, 0x0) syz_io_uring_setup(0x6a3d, &(0x7f0000000340)={0x0, 0x8894, 0x8, 0x2, 0x1d4}, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000280), &(0x7f00000003c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2120.398718] attempt to access beyond end of device [ 2120.398718] loop5: rw=2049, want=22, limit=15 [ 2120.400681] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2120.405805] attempt to access beyond end of device [ 2120.405805] loop5: rw=2049, want=23, limit=15 [ 2120.407785] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2120.413680] attempt to access beyond end of device [ 2120.413680] loop5: rw=2049, want=24, limit=15 [ 2120.415700] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2120.420889] attempt to access beyond end of device [ 2120.420889] loop5: rw=2049, want=25, limit=15 [ 2120.422802] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2120.426434] attempt to access beyond end of device 05:06:40 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xc40c000000000000, 0x0, 0x0) [ 2120.426434] loop5: rw=2049, want=26, limit=15 [ 2120.428525] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2120.431069] attempt to access beyond end of device [ 2120.431069] loop5: rw=2049, want=27, limit=15 [ 2120.433202] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2120.439058] attempt to access beyond end of device [ 2120.439058] loop5: rw=2049, want=28, limit=15 [ 2120.441040] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2120.442869] attempt to access beyond end of device [ 2120.442869] loop5: rw=2049, want=148, limit=15 05:06:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x40020000, @loopback}, 0x1c) 05:06:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:40 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe4ffffff00000000, 0x0, 0x0) 05:06:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x50000000, @loopback}, 0x1c) 05:06:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:40 executing program 7: sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8800}, 0x20004050) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0xfffffffffffffff7, &(0x7f00000001c0)=[r3, r0, r3, r7], 0x4}, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x543, 0x0) close(r8) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r8, 0xc058534f, &(0x7f0000000280)={{}, 0x1, 0x0, 0x2}) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r9 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000300), 0x810020, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r7, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x9, 0x3, "659677b16fc6c4c8ad36a9cd9ff3d9202edad0a6743a7b86204a87f7b1aef935d5be2f209b7184d275c6ab91d194bef56fb7a71f9b02ab4ed3bc8b3cb443a0", 0x1d}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000480)="8e7b0789cac9c74065619300b57352e970be9a96d29069a38279a097b92e24038e535f420296e27cf1071e92d30c102b46954006d0106ca0092e87511cc982d3bc2d13c0b7cfa6a5a8c1f4be1b6cd230bd08710c7394fb339959", 0x5a}, {&(0x7f00000005c0)="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", 0xfc}], 0x2, &(0x7f0000000940)=[{0xd8, 0x10d, 0x1f, "efedaf4bf83713c738d092a88271a2551b9af05ecf714e4188add14670c7e45c8ccff00611171e5e682ce801e71e36fff448231f96fdd68917cf72c5e40acc05967759d3fbf90e06f7a85da32f606c1a75a90e4b62b36aed03caff8c641492de8e363e1c5f2656a654e682188505852e29f748045bda01ad43a5a4b87860b80da9df8d4c75e5c37005ebfab7baa3d2368a4e7ee0f56411a74a137f650230ac78912bc55850f54a00d6a6167770c227b54f48bf5b63c196124783926ef75fa9688c3346c1"}, {0x88, 0x118, 0x101, "2d44a0dcc26a9c60ad028784057703bc40f538d66e48190d674e0d74312c5b7d31f09ec294fb26f97162edb595c1447272e6ad45b80220851ca7f0c714a7926b3e908568791c3ba21b9713943f64ed935c3a2cc46adf9d94d7c9b3a157dc67ed8b14210dcf93eadb8b7ced9fd18dc4dec1e8073f8b682e"}, {0x98, 0x10c, 0x1f, "559ffa51e5f5c4de9e03a3817e5d57d6d22eedcf912fc1a8b78e54472d5deb59b0275fc1d9331770f3b257b99ca7251eb164b68db5b1e4684f5de787ac279305a5acc9a643ebe722425df320a906994cc60061cac539f2f8e8b554bd31e1ca85f594629f2041d6a2f0abccaf1b8a1e67084fe313d71bb959c325c7e6d62ebed70cab6c9b"}, {0xc8, 0x10a, 0xa8e4, "20f0729336ac08488a08a9cfb3334ffdfdbc1c8f792858ea76b5e073de1eb68b074ed06bb07f7cb88a14fc32126cdf1ac142adc3fe06312ff1635238a58c447309357f3430e5e37760a2377c5fece9a1c3044b316848855a2de673f05c11f0d83a89453f7648e7a2dd9e168c512db776a0c53bec870c1ad542a42e540f167d8db3c189b6876d610fa5f89d194eb5a6447c2e583e0007187e72b0d4fd4ef26bc745be2a051b185711e857ade5cb45b4af3a40a48523aa4d"}, {0x60, 0x114, 0x97d1, "8a51a2ca0d955315e4ae796b4fcd90397e5dfc48334b681fe6e41beb08f307c3ee28f630fad912d223c2e35091567dc072d123ded490b5bb0b4cf16fdda1d01415ff7199202fe64255"}], 0x320}, 0x0, 0x40000}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) [ 2120.904272] attempt to access beyond end of device [ 2120.904272] loop5: rw=1, want=2044, limit=15 05:06:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe800000, @loopback}, 0x1c) 05:06:57 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xe702000000000000, 0x0, 0x0) 05:06:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:57 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x91ffffff, @loopback}, 0x1c) 05:06:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x10, r3, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:06:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000004) 05:06:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:06:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xb703b728, @loopback}, 0x1c) 05:06:57 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(r2, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x2004, @fd_index=0x8, 0x800, 0x0, 0x0, 0x2, 0x1, {0x3}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2138.233454] attempt to access beyond end of device [ 2138.233454] loop5: rw=2049, want=21, limit=15 [ 2138.307787] attempt to access beyond end of device [ 2138.307787] loop5: rw=2049, want=22, limit=15 [ 2138.309273] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2138.313363] attempt to access beyond end of device [ 2138.313363] loop5: rw=2049, want=23, limit=15 [ 2138.314728] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2138.320057] attempt to access beyond end of device [ 2138.320057] loop5: rw=2049, want=24, limit=15 [ 2138.321577] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2138.327068] attempt to access beyond end of device [ 2138.327068] loop5: rw=2049, want=25, limit=15 [ 2138.328544] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2138.334067] attempt to access beyond end of device [ 2138.334067] loop5: rw=2049, want=26, limit=15 [ 2138.335552] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2138.348510] attempt to access beyond end of device [ 2138.348510] loop5: rw=2049, want=27, limit=15 [ 2138.350001] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:06:58 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) [ 2138.374071] attempt to access beyond end of device [ 2138.374071] loop5: rw=2049, want=28, limit=15 [ 2138.375528] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:06:58 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe3c28c3f, @loopback}, 0x1c) [ 2138.403157] attempt to access beyond end of device [ 2138.403157] loop5: rw=2049, want=148, limit=15 05:06:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:06:58 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x3ec5, &(0x7f0000000080)={0x0, 0xfc41, 0x4, 0x1, 0x2fe, 0x0, r0}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4000, @fd, 0x7ff, 0x6, 0x2, 0x10, 0x1, {0x2}}, 0x800) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r8, r9, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r8, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x4}, 0xff) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r11}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:06:58 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2) [ 2138.774280] attempt to access beyond end of device [ 2138.774280] loop5: rw=1, want=2044, limit=15 05:07:14 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:07:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xe8030000, @loopback}, 0x1c) 05:07:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfec00000, @loopback}, 0x1c) 05:07:14 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5) 05:07:14 executing program 7: sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x60, 0xe, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x66f59af6f2235290) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = accept$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000280)=0x14) write$binfmt_elf64(r4, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x1a, 0x3, 0x1, 0x8, 0x9, 0x3, 0x6, 0x8, 0x2d9, 0x40, 0x2c2, 0x81, 0x4, 0x38, 0x2, 0x1, 0x7f, 0xe180}, [{0x2, 0x1000, 0x8, 0xea, 0x7, 0x10000, 0x9, 0x7ff}], "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", ['\x00', '\x00', '\x00']}, 0x1378) 05:07:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:07:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000007) 05:07:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2154.604448] attempt to access beyond end of device [ 2154.604448] loop5: rw=2049, want=21, limit=15 05:07:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf4010000, @loopback}, 0x1c) [ 2154.686394] attempt to access beyond end of device [ 2154.686394] loop5: rw=2049, want=22, limit=15 [ 2154.688511] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2154.745145] attempt to access beyond end of device [ 2154.745145] loop5: rw=2049, want=23, limit=15 [ 2154.747529] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:07:14 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8) 05:07:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x8000000}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x64, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10000}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfff}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x9}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xb6a1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4004) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r3, 0x2, 0x0, 0x1, {0x0, r5}}, 0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r4, 0x89a1, &(0x7f00000003c0)='ip_vti0\x00') syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:07:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xf5ffffff, @loopback}, 0x1c) [ 2154.803102] attempt to access beyond end of device [ 2154.803102] loop5: rw=2049, want=24, limit=15 [ 2154.805187] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:07:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2154.836067] attempt to access beyond end of device [ 2154.836067] loop5: rw=2049, want=25, limit=15 [ 2154.838010] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2154.869856] attempt to access beyond end of device [ 2154.869856] loop5: rw=2049, want=26, limit=15 [ 2154.871797] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2154.901234] attempt to access beyond end of device [ 2154.901234] loop5: rw=2049, want=27, limit=15 [ 2154.903162] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2154.934702] attempt to access beyond end of device [ 2154.934702] loop5: rw=2049, want=28, limit=15 [ 2154.936632] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:07:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfc000000, @loopback}, 0x1c) 05:07:14 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2e7) [ 2154.970423] attempt to access beyond end of device [ 2154.970423] loop5: rw=2049, want=148, limit=15 [ 2155.203719] attempt to access beyond end of device [ 2155.203719] loop5: rw=1, want=2044, limit=15 05:07:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff000000, @loopback}, 0x1c) 05:07:29 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:07:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:07:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000080), 0x1, 0x40000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r4, r5+60000000}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4000, @fd=r3, 0xffffffffee94933c, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f0000000500)=""/140, 0x8c}], 0x3, 0x4, 0x1, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:07:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfe800000, @loopback}, 0x1c) 05:07:29 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500) 05:07:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000008) 05:07:29 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2169.590394] attempt to access beyond end of device [ 2169.590394] loop5: rw=2049, want=21, limit=15 05:07:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x9}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f0000001440)=""/146, 0x92}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/186, 0xba}], 0x7) [ 2169.649324] attempt to access beyond end of device [ 2169.649324] loop5: rw=2049, want=22, limit=15 [ 2169.651434] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2169.667247] attempt to access beyond end of device [ 2169.667247] loop5: rw=2049, want=23, limit=15 [ 2169.669308] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:07:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfec00000, @loopback}, 0x1c) [ 2169.710056] attempt to access beyond end of device [ 2169.710056] loop5: rw=2049, want=24, limit=15 [ 2169.712196] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:07:29 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:07:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff000000, @loopback}, 0x1c) 05:07:29 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xcc4) [ 2169.760040] attempt to access beyond end of device [ 2169.760040] loop5: rw=2049, want=25, limit=15 [ 2169.762211] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2169.784122] attempt to access beyond end of device [ 2169.784122] loop5: rw=2049, want=26, limit=15 [ 2169.786132] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2169.789923] attempt to access beyond end of device [ 2169.789923] loop5: rw=2049, want=27, limit=15 [ 2169.791895] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2169.800089] attempt to access beyond end of device [ 2169.800089] loop5: rw=2049, want=28, limit=15 [ 2169.802226] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2169.814347] attempt to access beyond end of device [ 2169.814347] loop5: rw=2049, want=148, limit=15 05:07:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff0f0000, @loopback}, 0x1c) 05:07:29 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000001e40)=@IORING_OP_SENDMSG={0x9, 0x3, 0x0, r3, 0x0, &(0x7f0000001e00)={&(0x7f00000000c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="77ea5da5d88bc4c834d20237a62efd253d82f2efd69dc334b7445426d98d0bc64f01e03ac921bfbb835409a3af5475bd2339ea8bbbe84c4afd6c7f3af49bbc7f6a089a3cb90591f60df957414e070ff7d9a87b7ce2e454a4074ae0260e6e82e6f7", 0x61}, {&(0x7f0000000340)="e4cdb97ad77392e5f14f455b470bef20a338e790450af6baa0ba0f98473c4c2dbd0f27fa2b99d17afee7e10bd113fd95bff37fc944057b9619c9a0308b1d62bb1cd1139a08d96c0d6d48174f32643a4b845f4f153b41ad70294e29813f624ca243174e05ac5944a85f3aea083b1e267328a0961f821d6a9c41f06f6f0da794e0dc5b5a381fef4b61cfb0807f248bc4a0a04ad69985f49cff4818c18b6adfc9ed6538d448d635b105efc4ed01bfa902b71acd5456b928bbaeaecf2cb7182d953e87087ac2df25522d5b6481af50a36ee0e5fca29a2cb94752f087ca3132e098f98874d67fc031346045e7fe08", 0xec}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="f5ecce9c30cc43274acae8024df05d9c951fb9555f3308b6da9c3aba2ff1e272c23164674831181ad4145ae379d2b609180bd7e26cd3b7f2d6a4ed551396ca389dbc8cb3d620f5426628c83d99d5db4a38f5d87f6d2e0fb0edd7e929ecc8a8348393602405841ca155443cb2843977568ea7c3eb6086befa3e7fccd74cdc72f83d5a9ae4499ab0204f187112897b33", 0x8f}, {&(0x7f0000001500)="b650707c4cfe3903f7cebf6aa50aeec0bc908a12dbf7a0b1b77eb6862f836427b0712a7f4dc2cebdef9664d2634b0015f58665840087e8e28a649246d4d35ce48fef52c97998f597e2188030a683d18df225422d39ba363c2e7ae22c0a3c96dc134ebb4d7731b59e19a809fc0ff94052dad470dbdcb6e33af99a965bc2940f22e3384776614bae405d4c589257900967366d6b82d65054076f3d504d2dd5b756729769f196b9dca57ec4816d8f365115fcbef173509f5358da4ecc93c4b7b3d4c72679e30bdbdea2585a841ca2b9e6627679a6232e681de2e040f773bcd6569be8a8c3c97c4dc2837e09ac65", 0xec}], 0x5, &(0x7f0000001600)=[{0x108, 0x0, 0xfffffffb, "631597b068c9f4004fc2e9a65b84b51057dbf5b17905ab8e1d8d05453945c70f51b1764b5446be61451bba895e2df2f21350f6504dec56f1630499567f944c2437a279cd3c23ae4a376894ceb208df9db735183f95420affd5df30b6ec7abf8d1ee43cc95a288ec959a5748481ebe22b99c156a10daee273b9352b8a4e5ff20cd41718e3131e90ff82df3eed808ab29c1f05b6ee34fa62eda57706ac6ea442f067a4062935e730757df8930c0a40ed848ddb0040ac4ea940b00981c8b5700a71b36900232026eb56daec5f71099aa93d84a022b9a48171f8f3bd0b56a6c6a5a54be1b837d99fb7d6adafda0905579c0f32dae67e08"}, {0xf0, 0x29, 0x3f, "626fbdeb8537428daedbc9ad11f5938c2e4d356df57cca2044044fce23c24ee633262da7528418bd2d3ef21c226eb4d8fae6f9dfb46bc4e662bd10ce9ae0762c8aa784f810d8b77722fed8d64b6c9801a99bb627d607f7e5e889e4e6231a6918eb22292c4b927b7b21dd6ab9e4497ff7c4ee2a8917b919db349c1536386a98b1c845bbc9be200df207f7fa473df557de386219f908a4f584826627d00bee44e3f3d812d2c4eab5b71f0ffb4351bdc3200e27d7b7280d73a2b6b3ca4939bbcfb09818961cbf9d658d273b3766ce18146dc2634176fbfa5c32b6a243ac"}, {0x80, 0x10a, 0xc6, "5408b9970413fe37a272c29f100d225983002e107494ed5c5faf9ed47a526c227095c1f6e0e2e9666b99c1d2e84328b5dd4d2e22875fc22651e5010a351cf6ad2c20e2f2267e466a88ec0c8f1ecc2b3bec955bd5fc63662894d13c95c85d2f8e63b080944ca48cdcd16b55d8cdcacf"}, {0xb0, 0x10d, 0x5, "5a047f1bd757b9ce8ee4689c3472450d9d9b2fd7daaf09816716af81f39b306d0f42714879fe3496bdfa43282b7de8a71892a71faf83118c5e768e93622cfa58069f3ca752dc5d19511830b0a8a679fb326e55ddc3bf94e8d6fc7603dfdba75cd7820046f16618173b34b52b645491073a2544ff33579ab9b1899659dbed2b85a6776006fa7c3b70a423cd5e9f54454e35692c3e76602f7501"}, {0xc0, 0x88, 0x7, "cf858b1bec900b6efdf922c95d9f5cec7ebb0276a4384a3101519552668fbae7be3f1e15154f57c9ccc4e462480b8a827b2d0fb3b982c6a997ccc92823c0c6ac47f479db15f59ab3710c95400e12d9f798f9360b72b4129efb4580ef4c8e56da0f10577d7a33d7356de9cdfefbcec7f9fce6f79cbe1d5d072aea1aa56b3b44eeb4ef97dc487484391e35cb961767eff7dd0c5f61f2a78c95239f57078f2c11a380d627a5106435c2fb2b"}, {0xd8, 0x105, 0x81, "919c255fb9e7583fe171528fe0c082d6a095876199b95fcd9bb42c726d1fc3161dd6c303e4650c255e91b3f8c78cb0b9268e9ea07f04fc7fffa297742ebca383471d61072e16f32e803f7144c91b9d1489c91583d0b7422842cfb7d9442accaabbe1f4bb1c89e3492ab1dc9e184915be58b6a806b5e11a71d4b758fb5afe0c5d2b977ae7133d339d63bc7219cabd95046c9ae65fd6b96a4dfddc44050f485f69f4f0ace7544a051ca7a033aaf280e4abec880d613f1e38c535cba9565e952f0f1f"}, {0xb0, 0x110, 0x5, "1084857054a29278cb62bae02b8472a449819c845e606754fdb7540c9ac211723bd939af7c2872e505de6e4f7691d034dc8b04cbd9fc309a8f494d9c580653cb66d470bd5ece2f385536949762c049880211d45cb344b0d8f9a913b8946459af709b989cacbe36696b2294e81eb2bd08428c29b9ab122c2ddb47d2e1599850bbc724d6621d7f7a8bb6e5f1d68816563ce847a8f74471604b15c9c21e5b3f7d03"}, {0xf0, 0x3a, 0x10001, "7d02dc3b73f7f3374144fe2d080db05e55e279da255afa5351ac6001a726899e62126434d0f3bf3838423843902f5c44863a8ee7b302096a28c6934c99650f4d7bc1dfeb64ab431537127c42f4207e3c4dda84227322237991582a6f7f542a24a64da6834aa7514f9978625824135733bb41790c57bb8d31c46d72414c95b18b170d762310371eba9fc8b7c9bf14eec6ccf1c5a7694974d2c9d5cbf8948b3045381624b1d391be8a63ca0a73260a262c74aa34cdc12047a0f2caac9fcfd6b57219860be545933befa43cea470cebf9bb8e2e16f2cb3db88c8f41215aa320e60b"}, {0xb0, 0x118, 0x683f, "3e30b7fa69e61da9ca7f97daf9c1e5cf298fb9106cf0718cc8c09c3476f8eb9ec7743f0fb6d502ffa8ad5dcfe39ead0d092f5df77aed08e2fd7d9b6f0d672fbe1ab71ea284a9fdec90d4c10157bc134772848755f1672cddcfb42609bb4f68224958772d9d7d04aec0026deeba82f7d63af0110533807c712e80a429d21182bc87c78863c0c04e073d55bb335ec22fde7ea53198857e1b9f1af625b5195a"}, {0xe0, 0xff, 0x101, "a627d61909dd4db4fb979a1b05fe7884f1aed1a3f5a97ec469f5b734355902132df542d5d6e0ea51b0e64e7e4e5ea5a5005a1fa95623e350352bf947be7e43b7181621ef257b3a704d5f63f27ecf099189c0dcb0a4f0bc3f11fa0cfc5d68d09c6623f1fa10da36a0f100826cf7f1057dc347b2f36bf887bef312bfdc8b0928757ed29de11b7f87e527fd18f8612bb853c089fdbfe680ee63c8aeb24112df441afc15fbc44c2194a2ce74de6cf1a5e3d546224d6d86d665cdc404595e6cd55b2d661b10f40ab703c75b"}], 0x7f0}, 0x0, 0x44000}, 0xff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x810, r3, 0x10000000) io_uring_enter(r0, 0x4af2, 0x987c, 0x3, &(0x7f0000000080)={[0x7fffffff]}, 0x8) [ 2169.922630] attempt to access beyond end of device [ 2169.922630] loop5: rw=1, want=2044, limit=15 05:07:29 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000009) [ 2170.949014] FAT-fs (loop5): Unrecognized mount option "" or missing value 05:07:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x8000000a) 05:07:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffc00, @loopback}, 0x1c) 05:07:45 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xff0f0000, @loopback}, 0x1c) 05:07:45 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 05:07:45 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x1cb3, 0x2d31, 0x1, &(0x7f0000000080)={[0x7f]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:07:45 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:07:45 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:07:45 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2185.384169] attempt to access beyond end of device [ 2185.384169] loop5: rw=2049, want=21, limit=15 05:07:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffff00, @loopback}, 0x1c) 05:07:45 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:07:45 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2a2c) 05:07:45 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000080)) [ 2185.479636] attempt to access beyond end of device [ 2185.479636] loop5: rw=2049, want=22, limit=15 [ 2185.480879] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:07:45 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2c2a) [ 2185.509727] attempt to access beyond end of device [ 2185.509727] loop5: rw=2049, want=23, limit=15 [ 2185.511224] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:07:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffff91, @loopback}, 0x1c) [ 2185.546491] attempt to access beyond end of device [ 2185.546491] loop5: rw=2049, want=24, limit=15 [ 2185.548934] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:07:45 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00) [ 2185.561114] attempt to access beyond end of device [ 2185.561114] loop5: rw=2049, want=25, limit=15 [ 2185.563424] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:07:45 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2185.591161] attempt to access beyond end of device [ 2185.591161] loop5: rw=2049, want=26, limit=15 [ 2185.593450] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2185.624093] attempt to access beyond end of device [ 2185.624093] loop5: rw=2049, want=27, limit=15 [ 2185.626478] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2185.665354] attempt to access beyond end of device [ 2185.665354] loop5: rw=2049, want=28, limit=15 [ 2185.667580] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2185.697526] attempt to access beyond end of device [ 2185.697526] loop5: rw=2049, want=148, limit=15 [ 2185.760931] attempt to access beyond end of device [ 2185.760931] loop5: rw=1, want=2044, limit=15 05:08:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xffffff91, @loopback}, 0x1c) 05:08:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5, @loopback}, 0x1c) 05:08:00 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:08:00 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:00 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r3, r4+60000000}, 0x1, 0x1, 0x1, {0x0, r7}}, 0x40) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r8, r9+60000000}, 0x1, 0x1, 0x1, {0x0, r10}}, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r10}}, 0x1f) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r11, 0x8004f50c, &(0x7f0000000280)) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r2, &(0x7f0000000080)={0x412b01, 0xa0, 0x4}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x0) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_enter(r12, 0x8fc, 0x52d0, 0x2, &(0x7f0000000240)={[0x1]}, 0x8) io_uring_enter(r6, 0x22f7, 0xa30f, 0x0, 0x0, 0x0) 05:08:00 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 05:08:00 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x8000000f) 05:08:00 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c) [ 2200.889937] attempt to access beyond end of device [ 2200.889937] loop5: rw=2049, want=21, limit=15 05:08:00 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:00 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc40c) [ 2200.966720] attempt to access beyond end of device [ 2200.966720] loop5: rw=2049, want=22, limit=15 [ 2200.968060] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2200.969197] attempt to access beyond end of device [ 2200.969197] loop5: rw=2049, want=23, limit=15 [ 2200.970440] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2200.973044] attempt to access beyond end of device [ 2200.973044] loop5: rw=2049, want=24, limit=15 [ 2200.974284] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2200.976214] attempt to access beyond end of device [ 2200.976214] loop5: rw=2049, want=25, limit=15 [ 2200.977592] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2200.979538] attempt to access beyond end of device [ 2200.979538] loop5: rw=2049, want=26, limit=15 [ 2200.980784] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2200.982756] attempt to access beyond end of device [ 2200.982756] loop5: rw=2049, want=27, limit=15 [ 2200.984112] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2200.986461] attempt to access beyond end of device [ 2200.986461] loop5: rw=2049, want=28, limit=15 [ 2200.987808] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2200.989887] attempt to access beyond end of device [ 2200.989887] loop5: rw=2049, want=148, limit=15 05:08:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 05:08:00 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe702) 05:08:00 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4}}, 0x1c) 05:08:00 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r5 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r9, r10+60000000}, 0x1, 0x1, 0x1, {0x0, r11}}, 0x40) syz_io_uring_submit(r1, r7, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)={0x2, 0x20, 0x1d}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r11}}, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2201.223003] attempt to access beyond end of device [ 2201.223003] loop5: rw=1, want=2044, limit=15 05:08:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:08:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000) 05:08:16 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000010) 05:08:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5}}, 0x1c) 05:08:16 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:08:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffff5, @loopback}, 0x1c) 05:08:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6}}, 0x1c) [ 2216.993727] attempt to access beyond end of device [ 2216.993727] loop5: rw=2049, want=21, limit=15 05:08:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000) 05:08:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x7}}, 0x1c) [ 2217.060860] attempt to access beyond end of device [ 2217.060860] loop5: rw=2049, want=22, limit=15 [ 2217.062272] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2217.065759] attempt to access beyond end of device [ 2217.065759] loop5: rw=2049, want=23, limit=15 [ 2217.067090] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2217.073928] attempt to access beyond end of device [ 2217.073928] loop5: rw=2049, want=24, limit=15 [ 2217.075349] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2217.082276] attempt to access beyond end of device [ 2217.082276] loop5: rw=2049, want=25, limit=15 [ 2217.083697] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2217.089250] attempt to access beyond end of device [ 2217.089250] loop5: rw=2049, want=26, limit=15 [ 2217.090562] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2217.095131] attempt to access beyond end of device [ 2217.095131] loop5: rw=2049, want=27, limit=15 [ 2217.096460] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2217.102363] attempt to access beyond end of device [ 2217.102363] loop5: rw=2049, want=28, limit=15 [ 2217.103743] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2217.109256] attempt to access beyond end of device [ 2217.109256] loop5: rw=2049, want=124, limit=15 05:08:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:16 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r7, r8+60000000}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x40) connect(0xffffffffffffffff, &(0x7f0000000340)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80) syz_io_uring_submit(r4, 0x0, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0xaabc, 0x0, 0x7, 0x0, 0x0, {0x0, r9}}, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r10, 0x81009431, &(0x7f00000003c0)) 05:08:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8}}, 0x1c) 05:08:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x40010, r3, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={r5, r6+60000000}, 0x1, 0x1, 0x0, {0x0, r7}}, 0x0) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x380, 0x20000) 05:08:17 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x5000000) [ 2217.262141] mmap: syz-executor.7 (12545) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 2217.458923] attempt to access beyond end of device [ 2217.458923] loop5: rw=1, want=2044, limit=15 05:08:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe}}, 0x1c) 05:08:34 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x1c) 05:08:34 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:08:34 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:34 executing program 7: ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) ioctl$sock_inet_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000080)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:08:34 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x8000000) 05:08:34 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000025) 05:08:34 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2235.041729] attempt to access beyond end of device [ 2235.041729] loop5: rw=2049, want=21, limit=15 [ 2235.125603] attempt to access beyond end of device [ 2235.125603] loop5: rw=2049, want=22, limit=15 [ 2235.128123] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2235.178538] attempt to access beyond end of device [ 2235.178538] loop5: rw=2049, want=23, limit=15 [ 2235.180052] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:08:34 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x58, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x76}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x64}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x58}}, 0x400c0) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2235.184018] attempt to access beyond end of device [ 2235.184018] loop5: rw=2049, want=24, limit=15 [ 2235.185510] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2235.192331] attempt to access beyond end of device [ 2235.192331] loop5: rw=2049, want=25, limit=15 [ 2235.193803] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2235.201285] attempt to access beyond end of device [ 2235.201285] loop5: rw=2049, want=26, limit=15 [ 2235.202814] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2235.204184] attempt to access beyond end of device [ 2235.204184] loop5: rw=2049, want=27, limit=15 [ 2235.205701] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2235.207057] attempt to access beyond end of device [ 2235.207057] loop5: rw=2049, want=28, limit=15 [ 2235.208511] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:08:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) 05:08:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x50}}, 0x1c) 05:08:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) [ 2235.235362] attempt to access beyond end of device [ 2235.235362] loop5: rw=2049, want=148, limit=15 05:08:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc}}, 0x1c) 05:08:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4}}, 0x1c) 05:08:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1f4}}, 0x1c) 05:08:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5}}, 0x1c) [ 2235.528260] attempt to access beyond end of device [ 2235.528260] loop5: rw=1, want=2044, limit=15 05:08:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000009, 0x10010, r0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r4, r5+60000000}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x40) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r6}}, 0x7f) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:08:52 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6}}, 0x1c) 05:08:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x218}}, 0x1c) 05:08:52 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:08:52 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000056) 05:08:52 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:08:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2c2a0000) 05:08:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x7}}, 0x1c) 05:08:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x240}}, 0x1c) [ 2252.685716] attempt to access beyond end of device [ 2252.685716] loop5: rw=2049, want=21, limit=15 05:08:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f000000) [ 2252.749752] attempt to access beyond end of device [ 2252.749752] loop5: rw=2049, want=22, limit=15 [ 2252.751028] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:08:52 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000) 05:08:52 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2252.787501] attempt to access beyond end of device [ 2252.787501] loop5: rw=2049, want=23, limit=15 [ 2252.788724] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2252.816475] attempt to access beyond end of device [ 2252.816475] loop5: rw=2049, want=24, limit=15 [ 2252.817705] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:08:52 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8}}, 0x1c) 05:08:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x300}}, 0x1c) [ 2252.845228] attempt to access beyond end of device [ 2252.845228] loop5: rw=2049, want=25, limit=15 [ 2252.846396] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2252.867823] attempt to access beyond end of device [ 2252.867823] loop5: rw=2049, want=26, limit=15 [ 2252.869047] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:08:52 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r0, 0x10000000) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.dequeue\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x48, 0x0, 0x1, 0x801, 0x0, 0x0, {0x7}, [@CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0xc, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x200}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000000c0)=@IORING_OP_SPLICE={0x1e, 0x5, 0x0, @fd=r0, 0x6, {0x0, r0}, 0xa73d, 0x1, 0x0, {0x0, r4, r5}}, 0x7fffffff) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x30}, 0x1, 0x0, 0x0, 0x26e691f61b4fae78}, 0x20040010) r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r13}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r13, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a30f10a98038784025bcaf0a24f4055692ffc2a3a8e98c0fd5fb39b378434fb435d17d08df7245a19fae90502a0ea639d423ba56f0dc97aaf580b1b9751be5c27b5969d03e39194684493eb2917053c0656f4622d333a542b149a3e1cb162ae9a5ee9cbabcdd75720bacd69377e6fd8b45e439684b7a5a60dccd47de03089fbbea97f5b4529cae4a5e244168893734d54f59ac0b3f8cb97ffaf277ef4c3f184f230f92be93cfe08a83ce89be8c8d87b9a3ad79dd6490c080969673abace472d44a259d9bd11d7f1098550d09fb3719def8f83c9d1003cad813d9cd6bc9260c4abe811def7525429a0b307eec353b7cde7a507"], 0xf5) [ 2252.891853] attempt to access beyond end of device [ 2252.891853] loop5: rw=2049, want=27, limit=15 [ 2252.893031] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2252.909476] attempt to access beyond end of device [ 2252.909476] loop5: rw=2049, want=28, limit=15 [ 2252.910651] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2252.934769] attempt to access beyond end of device [ 2252.934769] loop5: rw=2049, want=148, limit=15 [ 2253.021484] attempt to access beyond end of device [ 2253.021484] loop5: rw=1, want=2044, limit=15 05:09:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc40c0000) 05:09:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:09:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:09:07 executing program 7: r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001440), 0x48000, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) r3 = syz_io_uring_setup(0x4d4f, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x4) 05:09:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:09:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3e8}}, 0x1c) 05:09:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe}}, 0x1c) 05:09:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000063) [ 2267.614082] attempt to access beyond end of device [ 2267.614082] loop5: rw=2049, want=21, limit=15 05:09:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x500}}, 0x1c) [ 2267.670545] attempt to access beyond end of device [ 2267.670545] loop5: rw=2049, want=22, limit=15 [ 2267.672674] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:09:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff) 05:09:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x50}}, 0x1c) [ 2267.722154] attempt to access beyond end of device [ 2267.722154] loop5: rw=2049, want=23, limit=15 [ 2267.724190] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2267.750088] attempt to access beyond end of device [ 2267.750088] loop5: rw=2049, want=24, limit=15 [ 2267.752152] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2267.782496] attempt to access beyond end of device [ 2267.782496] loop5: rw=2049, want=25, limit=15 [ 2267.784703] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:09:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe7020000) [ 2267.831103] attempt to access beyond end of device [ 2267.831103] loop5: rw=2049, want=26, limit=15 [ 2267.833303] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:09:07 executing program 7: r0 = syz_io_uring_setup(0x13e3, &(0x7f00000002c0)={0x0, 0xe9b3, 0x0, 0x1, 0x35e}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) syz_io_uring_submit(r1, r5, &(0x7f0000000280)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={r7, r8+10000000}, 0x1, 0x0, 0x1}, 0x19848b40) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r11 = getegid() chown(&(0x7f00000000c0)='./file0\x00', 0x0, r11) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r9, r10+60000000}, 0x1, 0x1, 0x1, {0x0, r12}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x4004, @fd_index=0x5, 0x7, 0x81, 0x6, 0x8, 0x2, {0x2, r12}}, 0x10001) r13 = socket$packet(0x11, 0x3, 0x300) ioctl$VFAT_IOCTL_READDIR_SHORT(r13, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2267.841095] attempt to access beyond end of device [ 2267.841095] loop5: rw=2049, want=27, limit=15 [ 2267.842148] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2267.843042] attempt to access beyond end of device [ 2267.843042] loop5: rw=2049, want=28, limit=15 [ 2267.844054] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2267.847184] attempt to access beyond end of device [ 2267.847184] loop5: rw=2049, want=148, limit=15 05:09:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x600}}, 0x1c) [ 2267.918707] attempt to access beyond end of device [ 2267.918707] loop5: rw=1, want=2044, limit=15 05:09:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:09:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:09:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:09:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc}}, 0x1c) 05:09:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000067) 05:09:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x700}}, 0x1c) 05:09:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:09:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffe4) 05:09:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x80000000000000) 05:09:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x218}}, 0x1c) 05:09:22 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x2, 0xffffffffffffff09, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0xffff0001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2282.853084] attempt to access beyond end of device [ 2282.853084] loop5: rw=2049, want=21, limit=15 05:09:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe00}}, 0x1c) 05:09:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x220}}, 0x1c) [ 2282.928405] attempt to access beyond end of device [ 2282.928405] loop5: rw=2049, want=22, limit=15 [ 2282.929522] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:09:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000000000000) [ 2282.978371] attempt to access beyond end of device [ 2282.978371] loop5: rw=2049, want=23, limit=15 [ 2282.979480] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2283.002197] attempt to access beyond end of device [ 2283.002197] loop5: rw=2049, want=24, limit=15 [ 2283.004828] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2283.012155] attempt to access beyond end of device [ 2283.012155] loop5: rw=2049, want=25, limit=15 [ 2283.014462] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:09:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1802}}, 0x1c) [ 2283.035716] attempt to access beyond end of device [ 2283.035716] loop5: rw=2049, want=26, limit=15 [ 2283.038001] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:09:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x240}}, 0x1c) [ 2283.058111] attempt to access beyond end of device [ 2283.058111] loop5: rw=2049, want=27, limit=15 [ 2283.060252] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2283.102572] attempt to access beyond end of device [ 2283.102572] loop5: rw=2049, want=28, limit=15 [ 2283.103645] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2283.133204] attempt to access beyond end of device [ 2283.133204] loop5: rw=2049, want=148, limit=15 [ 2283.294128] attempt to access beyond end of device [ 2283.294128] loop5: rw=1, want=2044, limit=15 05:09:39 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x500000000000000) 05:09:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x300}}, 0x1c) 05:09:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x11, 0x2, 0xfb}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r3, 0x65c0, 0xdd5f, 0x2, &(0x7f0000000180)={[0x7]}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x4007, @fd_index=0x6, 0x4, 0x0, 0x0, 0x2, 0x1}, 0x2a761d53) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = dup(r0) signalfd4(r4, &(0x7f0000000100)={[0xa]}, 0x8, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) writev(r5, &(0x7f0000002700)=[{&(0x7f0000000240)="7bb4d28ce66d243e66a8b3004ec94ed95fc50c96f48a1418334f11b30440043aa9ce83ce3058f8770c71a2604a4b836480d56ad546aa350221ce990243fc59d91fae243d3188a6247e6b03a07e71fe59e9eadaf9ed20234ac82a40706a519e4096670e22da76dad8c1de970f51bc0a7322f9b2e48cef2430d5f17efbb6ed0b828edfc6c7973caa3c9d8a510e4976e2f34d0cb1882315a232185a7837", 0x9c}, {&(0x7f0000000300)="5ba41214083ec31f3138463181c231873897e29d077e590bf930e135440e56ff38f262f3f6245b9791427daab4a53795de2bdaca293d76515546cecf2b084869ecfa21cc5d624456b162652f4204ec438300506b8769", 0x56}, {&(0x7f0000000380)="456ccb89dc6a14773df8554e90b100d77c55f7d509e110950e303c8f84c861954325152a7ef1287454cc50476ab5f6b8a2514d04b6a9c23dc73e5c7f11a20caadcfd42ab5abc010d6c40cb7de8fcdadf8ea930d77b5f155bf0d73ff5788af5a184d06926a897bd11e212757ee25dfd63bdbb49cb72354c7e8d6ebd51280e3148608e0d396584596912a246dc9fec90eb3f21bcb0eba9d26b4a016366df7eb2d420388910d16ea073530cf50b3d0dba590929a45c70dbf22fc992edf1e38244dbe73d01", 0xc3}, {&(0x7f0000000480)="dd3fce968347c0dd67c953fd4e9dc2a90de0b1652da12d52d5c44e768ca627d1181f46db064c0df054402e00fca9c44eeab0a092927b6e4bd20238c5b98ce4d268ba3c0a627db91a89e37f7653ba93b39502bacc7440eb8061be091a97db3246168583597e2b02e65a8105b545d35f42aa81", 0x72}, {&(0x7f0000000500)="f3fe37ccc6c69ed38df009187862fc9448369940406f8bfbfa24ed44aaae1a384164fbc26da97650d55b8afc900fc26425629dc9", 0x34}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="b043bafc89fd20d5dc5fd657a8a667fb50f49208e3aa3a153688fb7d281d97eb6b83e85ed7e699a7669835ce995d22790816858f5fc9cf06ee477084810ff18a18b90284eadb7ab7b5474d43da45207a", 0x50}, {&(0x7f00000015c0)="25d4940030360bbb124974d820df4a0adb6d4a8167fc7f817355f687277f0d0f7adc29906267132184f866eef1d660009760d1d1650e3e2c838d3a8fd024d72b2a1a2c06756c0cca22a4c360f7ea35aa2df14cb94cfe71ced6973a35186e5236d35942f91be0a67bad6a1914a5a31a8256f92c206ad4c955bb32e7cc580b9da203e20f03a41d09e215469bfe177d09aa5559889029d9e9c326a60770f541ec06d2c02a22749ff02572651d4da6151aa5ea8eb10c3717ee57527eeecf86d1c0b768441802a617c1d87a2bc829121e9cf1986b03f7e69debe5e2920142ac56de27c6f52f8e1ee33a639c2372a092d989b30218aabb8195f753ec16a27e796b6dac3c02fc5bdc5f16bfbf315b31a23c5274005d6640fcb759d5c6c7af0b6e931a745dc4c8f60626e8bab180b4467e131bf67a845a3f21de30d052cabec5907a0a80111385484b1c5a21386d122f8cea1be59b604f1810eee3af689c1242ca3abfd8f3acbc19c95996cf0da0f7911317e068575acde3fff9407af5f19d2433bdb3993717f483137585e3260f420dec44c5d7fef662fb6e7c4e50c1cee214dee5d52440c530db06105711a9233b7fadaf18b479ce7e374070a809fd01a50e973e092ced5c2d8296a06eca577627a0cbd7180a5425bc8086674bfdab56d66ff26637f5b7828909b1197ab984ff248f1e3a8496f0a68b5ac28dd3b6e9a81b0c3dae82c39f8b42006b95486ffb9530f32fbd2669353a22d1383c356d686699578297ce5a57aa977b7785b3d6fde45f9b76f17b784b445d705c9f5cb6530ea22d4e9498aa554354612d684fb45262bb48dd4a7d8f6bed8e3cfe92699efc7e8d8dd4584441b930607f4f1ba9f6f8dc74332114459a463d2e231649da0a2404281f1121275a4480eb2f4a121bc5725cdf8efb94bd4bf909e8599152a20870619f1231c370eff12bfdd8687a4671f5852edaff149002158d7f7cda77de2da9e35954eeffe6eb0dbbc79a18e7ec557416154ab1b2c05f251a7d985660f62afc3e437fab687a1bed6428609d904a61444655ededfb118c4f4012b2e39adca1608b7019d10b4056561bc8fff9b3b2461b06f6c12157546c515198791759ed9bedea64b6c4ef748eae4d3cc8e8f915b099308fac751f8867c65aa17d19626a9668ff260bf25518426d7bd37b549703f8dac5af3407d7479bc300fed6f624bb3ccbf4e135b44af6ba9167486a9c155228d057af30c926cc449e1f715d37a8f16fbea7e7e2c63b89a25f0f33344afe038c8ad94aa6322c17a1de9ebf0c0d7be36d8f302170090514cf5e7e513375ec73da7583912bfc4da80c4f41430dc64b2aae0d07c7f915bfed83afd2a748d57047eccea0756c6bce673e46da9ec7935861e246113a4908654bf7761a9d910ddb431d3a3f4c2fc371407812505f97ddece00b2f275b33d3c22052527f1b19c23aac86c49c0b1dc9e9c0ba24d4520970a1bcaf47c0158d002b8341c97fd32e1a86244512148a308edcfac9b46bcec33034f7c00770a08213ad1440e94f645396931cee958d8f454676eb09e8f8d59608274eeca1f5d2ece28a9ae72705006a6b3f94b7d1fbe710f2dab42bf4b43880a7d282ba8f69af32c7988124ee369be8e2eb7fee541d435ed441b3d5e7bd8090d4a7b5579b2d07983bcbd76de533ffed755d2f35d04b79ffbb86947fbcecbb50c6df8a6f5903106583408e613cb0c192286f42228b813be80e5a5933c1ddf6bd91b07b6cf0f6c0878d9228abbf320ae9d9ae1ed43e26a035ddc5b044005f732fe3afe4b37ed9517ef2336031a30f28c712235dd5905e015a4764c536e0d1fbf690a167556a1ef0f91db0d5cd75ec6f6bf05cf731c65d0bc740c08aa95b47172a8f10b020845594369808f8e72dddcc6b537a953b075d5d8d7e243a6480fc0248ee73347c7a06a7605086cc4224b1f8cf49bb6e69f397b7f44437f7ec38bf7f17c459da82a136b2abff67696379307d217abd821ceb1f16255150ff487f90b4b44b4d81e8ee7a2936b3ed832150bb38d428d7a0901d4a620f7083669b6de409f6123099fb29b1812d4ab14126e60457576519085ac70933da8c50852d81ae0df93b1adf00ca7264012498fdb943f51241bc953c05453b9df2b4a534074a7f3e1864bd1cad055f97aa3bf1940fc35293e91b568a593610054dcb9b3fb073e71cef133cd26bdd5858161a34e775098719d166d88d36f6df8b5cc785ee1ba814b302c4523e3e4300a6132c8bb801c3f9d82505d22dea60d08558a7d9810a378c74a9573486c4626290314f9f768ce49c15c4829af9f919852371491041f11777ba6870066ab52a0825b71fc778c06b0cee999de89eec972b664088f9301dce47f3ad55717e8a8c8ba129d26690e998e4e44b47673b17757dc06fac9ff66c1a255141fc76c34286f03745990a6a8ea06e4e7435a6e86bf611c17408ffdd35da1f85ff2ae8d497c4773bfa730e7474631c96efe4ba08341d0dd03843d86de476c385e6e872edd7334dd4d8be8b131a3a496cb47594f2ecf97e5f5231cf7150fc7ea359c8a6c6e45c4776898e59fd7c603479455e565f5ded184067717468a953ff45ab81e2457e2cb66619eef031ad4eb3fe8db0e2267c64e33683d9ddd0b9603628bbd4ea85acc4b14e788c080a2419605487ccb50a172364bdd89515d5565de092a665eaf06317097e40211edeb7dd86e2abc56737301336cf6578aa70d40883367da94e0922422b61fe4980e15dfb9ab24728eaad85e7ea18204d0ccb11e69a2cd2bf7ce4b61d1ddd11f679e11a1d12f49bfc6adfb7da3de47b7c90f7a34d1f8512ce102889a1a9bcc1db726256665740ffbcad04bfb6da9c8c4a7257f40418d0e13c65a2f7ae47438325c6f9bda0af98adbe88020b22955c445b252681fe433f7ee40e8f1b9d7aaca90372f5585553d60873d0018eed902203d913867e2b6e2eb55f3e5629cf511a65ff6e2dac9e65400241bde88bbacaa91bbe23f77b2c8dcb624acc902bdcfb8e72756dec930bf32044125f43bcbcc9ff1913ccb87e0c364f68c49e21e86f7c7bd70d7d8adede77b2f97ff320e643a36546c50f3a87cb9088a7fe03a57b31b94afcf130ab34cde0a83b4fd73869f2c78309d8ca8a19ea70430a7cafaf10e8781c68bfc499afaefb5eae6db975fd3b418e2721376af991d87b65a2671f0abffff50443f45162af3bb923fa6cfdc0b507ea45bb0b8f319e5a0596713a37914a58036ff2db5cefd8e8631749787d18756fb7f0221b3314e3f1f0942382ca88fb59daf54fc6b3c7ef4cb87525cd7a862c5eefb4a8e1a8d077da5300f14768c505288a95114e87ea9ac15d126f68727437a08a5d3d6c53a370234c29742e951bd88ea268a6d13d32c4994140f73cb889aa3c4ebf41e6bee912af4de9ead843a00432528d73104819b3867caebe23fb0e01afe3ec4b7626ddde242333dcc4724d9daabc5437f7bd883aca1d398924800a5e683d23d9c1e90c6af69c7d26d584fc1a413f0f11e2efa4793ff710c086c6d374a551b27d941bf79040a2c4995d1c8d07ba81af4500ee487f748341cdda9832418f656daeb4c859e5e5b96271038f3feb170633c69c698acb51a12d811fc01f7b6378517cbded428a04bb22942e2e9a355380ad6a04365027d78dedfe0339a4c6e0d55686466900e7755f87854e561b2fe91fca260b380e27b8da0fadf6071fa0a2b5d50869428c026aa39a78116021bb7a23af243729f35208d10bb17739b7b034d2fe8dcd523c760417264f8658550456e55231373e133de9b8c0b9eb66313026362ca1f98e7487e13bdbed154ccb5f1b15e25b7923c4431f2664f1c44f2c1746c57a782e72e915052d680519505d06ecdab291c655f5008b3aaedc699240c6195a52dbc961fbdbc9a8bcaee16e354ff07d5e2f0873f96e423a21b8b94360306c0147bf8088bad8081b81457355caec8b8b569e5ae896398e21093aaa6d82076f20defd51b653fa0f5b1ddc312fa89797cb3715156d9b3ee9b328db092c6adbc37aa2e5d4fdc828a33d2f541e0ef9a4bce4194ad7a9193ca0985af3820e0b22192fdad6b63cd6692c4e4c4ae5875177a411a7b164591a756582ed13f529d590726b46cb574b0ce5439df58d7c0035118b2922c4409442892e793df3c90c85b4f40b8e33da07b5ee90e9a90822b16c59bbbc477a29e32935e5f4aa445f89836be978524eae1c93e88f489a9286e027bab9ae6c4cb5613783564624a5bea3fa9954ac1c984faf68a44d742487200a967318a7ce6324e31481577766dfaaf06fe532dcc9d556e5521d917616e52a06e00becc1383e7d08c284f641a5a6c67db43229af65188767538cd60b47debea787c3467f31c1ecf53092f21f1ca4a304a34de84948cc300cfddce0ad4c85f89633245d73c0a2d31d7d3dace40a0aec504f89092993cd13308ffff6020a5e83c2f922284df5773f4108270a5ad06b0a0403b5f0f58d659ea7e31f3088161c42905f281120d54b02a872e472309bf8c721c616e6e1b0682e417bb7e8b5ff8b49e53c6fd3be32996be92f6ec8a097a00f41510e0e91c5b1bdb6e693d9806dbca58145fe8f999c8978a16f9cb99afa12cc3e915b8db83c399ff1d73b9b7c96abfd14a8517fa7dd54d662ec515c0e2e10ee523bbda94549c7f2996bf6bd33647b2c754f8afa153742f81b297143f567db34561e27d0673967b1671ec8b25f47bef72384a10ddb402c6e7d67dec684e8b171ff6da11e995bfb22e7d0f93aaecefe13d85493cb4779513f2a7a4017026505c959c7a026a533402a8ef585582e297e5fb63ddb1560c7edb6aa6a1d21ff3db4cb05c96943074a462e923c17832836019ab29c9b80270ba2d239e5ccd259642048ac6b22a3b305aa48cbd11522a284b907c0c582fa002c8712477e1c4f42a982995507569eae94e9d641525bbd14ea7c2861b9f51fb642290ad82b4b16c79363e67a12b76ad565f4d48586b339af287712024f1c85af7c7dcee17b06b5d86f60b783c89c5c0edab85b8c507d3a061650c15aabf779f1c072ab1bce50ea6877c405afe139034c64e55f8c04b9bade88eebb5c10d8d63cb4efc8e8ea740fd6040662f1bdd94d2a748fdcd622b553eb0b08bc07738648ecfc80df36692871a18e78ee83bd8770941dd03791470cb62ee78f0caa64b3615ee3b049ed13ecc7fdd4effb13e9668a7a794f540a36402868defb5c52c810e874c8373c5f252f369fcdd9063e0084e5c9f43cafd016c67a1fdf5db77cd1c8966456d9c7c6087df92cac710a5749cfac8dce40b8a147741f5aa02d44937830a39326d42ade685db58d80f5812b16aaebad1be1d1edf75cd42de3d6f345a323d83f21689c4769f8e3d5a7ef98d81836fe3518aabe4a9863bcb463b945f4f29c5b8fa745a18bfb191dd2a626921268ba883ea37d2891afa8d157241c464aae70d39fd6dc87cf29bd54b4f0552d4cb89d90137653e1a02485f1a581011a0a433d802b7e4bf2c9287fc381fbf95af7c51dcb91b4ef194a2c265bd61dbaee3e0eb89ca8d616eb60038b021e091ce62ad2351b9bc5951767b6c54b0fbccb1380b5f742caa7e8cdbce9fdc5101a4ffacaf3e7a94370ea1f0c5860dd049de0b25ad2cbcc5e1a346629112dc8e025a9b67e1cf76dcaa58168bd4c61ac23aa0c2847325e30737b84ea22be68745c0f6c320efdbb37eeda556667f5eb86ec8e1aa81dc796d1f750ee1bb6bacab5384d2b835e6847d6ddea69336d5c8b9b688eafb05d5b13362abd2af23d66", 0x1000}, {&(0x7f00000025c0)="37fd0f4d4b914bf0787e87f3e6b82e084ece874c088870ca68ad5554ddc56f65bb0b97580218453993ab620d82636d7c2b03577c693e4d0c9044355ca6d95d60063985e3a7a04b5ae3dad843466386dad2bc5406ee3e0f8b045f0ae79b178fd39b236acf7711", 0x66}, {&(0x7f0000002640)="35a3ef19bd6a8b0dc579f602a971cf8a8d7d02dcc59c4f161fbdd0590221b65a83bfef713ce8d019d7576e503cd3a6c34f218835ca026b7d8c6370e14260ea2f51c5ae36c85bb06f31531a327e55517aee6e7baa145f8012a62011aebcd9aac3d08e2063e7d152586bbefb1ee530002516b48c962c8b53c69459a9a1ac60c633ffbf317d34ea959604a85427ffab", 0x8e}], 0xa) 05:09:39 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:09:39 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:09:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000}}, 0x1c) 05:09:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000068) 05:09:39 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:09:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x500}}, 0x1c) [ 2299.573320] attempt to access beyond end of device 05:09:39 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x800000000000000) [ 2299.573320] loop5: rw=2049, want=21, limit=15 05:09:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4002}}, 0x1c) [ 2299.665848] attempt to access beyond end of device [ 2299.665848] loop5: rw=2049, want=22, limit=15 [ 2299.667884] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:09:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0x239}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2299.716144] attempt to access beyond end of device [ 2299.716144] loop5: rw=2049, want=23, limit=15 [ 2299.718413] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:09:39 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) 05:09:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x600}}, 0x1c) [ 2299.767909] attempt to access beyond end of device [ 2299.767909] loop5: rw=2049, want=24, limit=15 [ 2299.770371] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:09:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5000}}, 0x1c) [ 2299.823173] attempt to access beyond end of device [ 2299.823173] loop5: rw=2049, want=25, limit=15 [ 2299.825402] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2299.871933] attempt to access beyond end of device [ 2299.871933] loop5: rw=2049, want=26, limit=15 [ 2299.874188] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:09:39 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x12f7, &(0x7f0000000080)={0x0, 0x77e0, 0x2, 0x3, 0x380, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0}, 0xff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2299.910908] attempt to access beyond end of device [ 2299.910908] loop5: rw=2049, want=27, limit=15 [ 2299.913054] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2299.949121] attempt to access beyond end of device [ 2299.949121] loop5: rw=2049, want=28, limit=15 [ 2299.951037] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2299.957811] attempt to access beyond end of device [ 2299.957811] loop5: rw=2049, want=148, limit=15 [ 2300.131434] attempt to access beyond end of device [ 2300.131434] loop5: rw=1, want=2044, limit=15 05:09:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:09:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8982, &(0x7f0000000180)={0x8, 'veth1_vlan\x00', {'veth0_to_bridge\x00'}, 0x3}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) r6 = accept4$unix(r3, &(0x7f0000000240)=@abs, &(0x7f0000000340)=0x6e, 0x800) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) ioctl$RTC_ALM_SET(r7, 0x40247007, &(0x7f0000000080)={0x16, 0x3, 0xc, 0x1, 0xa, 0x401, 0x6, 0x61, 0x1}) 05:09:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:09:53 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2c2a000000000000) 05:09:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x80fe}}, 0x1c) 05:09:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x800000ef) 05:09:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:09:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x700}}, 0x1c) [ 2313.988309] attempt to access beyond end of device [ 2313.988309] loop5: rw=2049, want=21, limit=15 05:09:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xc0fe}}, 0x1c) 05:09:53 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x3f00000000000000) [ 2314.051143] attempt to access beyond end of device [ 2314.051143] loop5: rw=2049, want=22, limit=15 [ 2314.053157] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2314.081803] attempt to access beyond end of device [ 2314.081803] loop5: rw=2049, want=23, limit=15 [ 2314.083880] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:09:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe00}}, 0x1c) [ 2314.126193] attempt to access beyond end of device [ 2314.126193] loop5: rw=2049, want=24, limit=15 [ 2314.128126] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2314.135150] attempt to access beyond end of device [ 2314.135150] loop5: rw=2049, want=25, limit=15 [ 2314.137202] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2314.139090] attempt to access beyond end of device [ 2314.139090] loop5: rw=2049, want=26, limit=15 [ 2314.141102] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2314.153630] attempt to access beyond end of device [ 2314.153630] loop5: rw=2049, want=27, limit=15 [ 2314.155904] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2314.166626] attempt to access beyond end of device [ 2314.166626] loop5: rw=2049, want=28, limit=15 [ 2314.168684] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:09:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)="72f3ff8f17b95d6f781c63d614cad60a06b9b2b78ea94ba9185d7b4d0d9e3076227710497805900cc11ac6ccf179b0569f1b6c426b4c22decb90b06f5135f4c39ba5ac2a6d36212364084662b566dd51f3de1a7200018e48ab8234349b1000df466801da1372d25864c9822ae4e77c075ba744ce31e8a214dd1e7696c7a4298c060f2be54e41bf6e211e79d8b2b580088ab94c802e284e87e3b2743a205728e2bca63f1a46a6dffaf07b67401bba466509361c26590c1f77742984fea009a97217d4b1bc7ea8e6ec408036a94a177ec2b903841a71df90e7e1dc1535e8", 0xdd}, {&(0x7f0000000080)}], 0x2, &(0x7f0000000440)=[{0xd0, 0x103, 0x6, "9667e1b52e275154dd67daffd9f2c6d44deff2dbce6234f35fba4ba0719074fecfc801da52dc0d0680cc2cbf5c4d8ad0d47f9331fc7fe4d9146a1e4ecde40a2bacb2f0c4ba4123e55c510efe2fcd03281d5a5db9ce1146f4bc9c4cd568c984ef9efe27ae42c4a7621c0c5570191e04722ce463522b7e7a687eb7250bf79f2b5fe7682a8a33ed1a2e05f28234991dbbab90f1476bc0f2ea72d9725c20c31ec6bd69d76cd10ec7ea20d8648b82a7652202968e58cf565cb8def156aae1b09141"}, {0xb0, 0x10f, 0x1, "d25969c54b2772e074bd8f171997fdf1327b447a97dc04a623f738dd2e318d0cf44337a54912162ceab7dbbbe2fbf9bfbc51e60d5a95c13ca5872e213ea0603b9bbf9f316efbc6f6295e88e4b2b15d9ceefe80cd8609200ed138dcab4ff81862969f436541a7d0ebf412320bcf3c10ded2122803bee5748b501282d8ef81205c4f5d230b9ff2b8cd45b550ddb724346308f0da2d720233e9b0"}, {0x90, 0x0, 0x80000000, "057eb17c711badd2dc61bf8b8471d4f032cf4937eb1d04e30c23b328cf828745acca905e8aa19a7c661fbf11b39dfb660f345be69163d7025e3695b83decd13370fbb12c72127d39342141fcc893c80a1a89dfe78136e9c95cb96d3a022d16e52c51080083624e0115d8bcf23722ebef2f0fefe8d065d3e64a809f050f"}, {0x78, 0x104, 0x3, "c27c724d7b1562b07efbc797347470273b10244747a0035a487aece91e612d6d3b84473f358b3a07718ab60d5b3294a50b0bbe7d14622805cc2712ca81e90c8e67cda1fe4ed71f7a0f8cbe4faead15b726401ba1c6b3ef3e38a604de8cfd6b11b33e17"}, {0x1010, 0x10d, 0x4, "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"}, {0xb8, 0x10a, 0x3, "6c2f7b896afa8174f76fbc2542a38934e207f75c365d3b1795125397173da08c7c0845e53c76c7bcf4cb5ba2741f522843b4665b3ad17fffbb7d2ec30ba49f623343c9117b2a2ab172b784b1f1d6dfa07bf29dc6395e02ed2b4067bfb70da4cab2ba0be52df28009620a6aa2db1b3ea2efc28089a64a6ca1f9e3d7647627a159579ca285ae38ac888ab6c5643c97fbd6a45abc36da6f527763cf2d1b797d83d93b0e23dc77cb"}, {0xb8, 0x102, 0x4, "2e3f567bb5594fbf4ff2cb09985ef3aa6dc0345d34b83232d710e130a77b1f1beefacc9564747ad0c416238fa196d65f245226dace9bbbee5e0570e3d094674594c7f933b1eff1571c07e4d919191718a9abbfb45458801bb2bfae65349430ffd04b479e438e84cae36f4ec0f4a07fa3138a5489c0d893c65e0b9e6cc39c47621cb2842b4fe35bf003125d9d06756b205806b87b05121a252b0cfb03be87d2691b0d"}, {0x110, 0x119, 0x1, "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"}, {0xa8, 0x119, 0xffff, "5d063540ef7c9f3b309f6bf95db0c18b8bfc597e367f453265befb2bce8760821d4962e2125e9a0af9c135590ce29e94c8e50e174c0f0da9f6b2b8940275a2b4a94b9cb964734962de5f14dc4104f3c6520ce7cf1c4c9efe896f0cae401a5eee98f330932d92efab42829054efa8ddee5283e813016721d49c500ff62c634718617fcc24afb1ea8369dfac5f909e499c756e0981317c"}], 0x15c0}, 0x0, 0x4}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080), 0x4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc4}}) [ 2314.180159] attempt to access beyond end of device [ 2314.180159] loop5: rw=2049, want=148, limit=15 05:09:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe803}}, 0x1c) [ 2314.275170] attempt to access beyond end of device [ 2314.275170] loop5: rw=1, want=2044, limit=15 05:09:54 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000300) 05:09:54 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000000000000000) 05:09:54 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1802}}, 0x1c) [ 2314.627077] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2314.628912] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2314.639115] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:10:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf401}}, 0x1c) 05:10:08 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000395) 05:10:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:10:08 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:10:08 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4000010, r3, 0x8000000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r8 = accept(r3, &(0x7f0000000080)=@ieee802154={0x24, @short}, &(0x7f0000000100)=0x80) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r9, r10+60000000}, 0x1, 0x1, 0x1, {0x0, r11}}, 0x40) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r8, 0x0, &(0x7f0000000180)="0551ed03b2599136bfc5a877e13c2f29e8c29bacc0b2d7063fd892", 0x1b, 0x40022000, 0x0, {0x0, r11}}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:10:08 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xc40c000000000000) 05:10:08 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2002}}, 0x1c) 05:10:08 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2329.181647] handle_bad_sector: 10 callbacks suppressed [ 2329.181664] attempt to access beyond end of device [ 2329.181664] loop5: rw=2049, want=21, limit=15 05:10:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc00}}, 0x1c) 05:10:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000}}, 0x1c) [ 2329.266754] attempt to access beyond end of device [ 2329.266754] loop5: rw=2049, want=22, limit=15 [ 2329.269020] buffer_io_error: 4 callbacks suppressed [ 2329.269033] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2329.287701] attempt to access beyond end of device [ 2329.287701] loop5: rw=2049, want=23, limit=15 [ 2329.290009] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:10:09 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe4ffffff00000000) [ 2329.313872] attempt to access beyond end of device [ 2329.313872] loop5: rw=2049, want=24, limit=15 [ 2329.316174] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2329.351046] attempt to access beyond end of device [ 2329.351046] loop5: rw=2049, want=25, limit=15 [ 2329.353052] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:10:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfe80}}, 0x1c) [ 2329.400534] attempt to access beyond end of device [ 2329.400534] loop5: rw=2049, want=26, limit=15 [ 2329.402851] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:10:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4002}}, 0x1c) 05:10:09 executing program 7: r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r0, &(0x7f0000000240)=""/95, 0x5f) r1 = add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc1}, &(0x7f0000000640)={0x0, "7e1f646f26396238b9af4cced27805631117c919008de6e24b34af64b409de55c796227a6d4e560936a1f31bf5ec81c535d98f1ba5573461d0c0b9dbb6d47b96", 0x28}, 0x48, 0x0) keyctl$reject(0x13, r0, 0x3, 0x9, r1) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x10000}}, './file0\x00'}) syz_io_uring_submit(r6, r4, &(0x7f0000000580)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, r9, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/250, 0xfa}, {&(0x7f0000000440)=""/204, 0xcc}, {&(0x7f0000000180)=""/82, 0x52}], 0x3, &(0x7f0000000280)=""/19, 0x13}, 0x0, 0x1}, 0x16b) [ 2329.435921] attempt to access beyond end of device [ 2329.435921] loop5: rw=2049, want=27, limit=15 [ 2329.437903] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2329.462194] attempt to access beyond end of device [ 2329.462194] loop5: rw=2049, want=28, limit=15 [ 2329.464416] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2329.525791] attempt to access beyond end of device [ 2329.525791] loop5: rw=2049, want=148, limit=15 [ 2329.830731] attempt to access beyond end of device [ 2329.830731] loop5: rw=1, want=2044, limit=15 05:10:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:10:23 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0xd3, 0x400000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000201010000fbff00000380040002800000000000000000"], 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r4, r5+60000000}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0xce, &(0x7f00000000c0)=[r3, 0xffffffffffffffff], 0x2, 0x0, 0x0, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:10:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:10:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5000}}, 0x1c) 05:10:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xe702000000000000) 05:10:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0}}, 0x1c) 05:10:23 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000396) 05:10:23 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2343.502302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2343.514127] attempt to access beyond end of device [ 2343.514127] loop5: rw=2049, want=21, limit=15 05:10:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) 05:10:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x80fe}}, 0x1c) 05:10:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00}}, 0x1c) [ 2343.563305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2343.618677] attempt to access beyond end of device [ 2343.618677] loop5: rw=2049, want=22, limit=15 [ 2343.620068] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2343.648824] attempt to access beyond end of device [ 2343.648824] loop5: rw=2049, want=23, limit=15 [ 2343.650256] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2343.674076] attempt to access beyond end of device [ 2343.674076] loop5: rw=2049, want=24, limit=15 [ 2343.675188] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2343.678296] attempt to access beyond end of device [ 2343.678296] loop5: rw=2049, want=25, limit=15 [ 2343.679378] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2343.680279] attempt to access beyond end of device [ 2343.680279] loop5: rw=2049, want=26, limit=15 [ 2343.681349] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2343.698875] attempt to access beyond end of device [ 2343.698875] loop5: rw=2049, want=27, limit=15 [ 2343.699987] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:10:23 executing program 7: sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x198, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc9c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffd2fd}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xff}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'netdevsim0\x00'}}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7474}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x16}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2f33}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x66}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40010}, 0x40000) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x35, 0x1, @thr={&(0x7f0000000080)="4368495be353b1352b2fe1840f369e5fc1cffc309fc27fc47cab3da15067f3ebbbff4e6ea64b113009aa19793f0700da9999ea0ca42c46a2b7", &(0x7f0000000340)="0cca5ab65eab0e612bbf277aad72bf08a3b9cfa2847fefa0436c8918a5ce78e904cf63efd2120bb7ae294a8dfb5d2d42a5ab9c5a141963209aa28e45be6163736817209a764672e10e19f8d7454954e1fc6be10fd6cc1fe53bed0115b7cd4eda4e0aaf6d5045a9a08c18fdd754445bc3192d4b816e8c5c4cd6d7b6cbe2e3db039ef811c20e9cb05e9786bf8e4d128c45b0598876532413f0329337379e8cc97a75d4421eb5"}}, &(0x7f0000000100)) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0x290, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x4e}}}}, [@NL80211_ATTR_IE={0x10c, 0x2a, [@chsw_timing={0x68, 0x4, {0x401, 0xd663}}, @preq={0x82, 0x41, @ext={{0x0, 0x1, 0x1}, 0x9, 0x8, 0x6, @device_b, 0x10001, @device_a, 0x3f, 0x9, 0x3, [{{0x1, 0x0, 0x1}, @device_b, 0x7f}, {{0x1, 0x0, 0x1}, @broadcast, 0x3f}, {{}, @device_b, 0x5}]}}, @dsss={0x3, 0x1, 0x24}, @tim={0x5, 0x69, {0x2e, 0x49, 0x1f, "f9819555a5e622663431ef8d41c2d5480b37eeaf940082a2fefac46dcd1f00cef07a2fbd687f6242d35954da1443b97b8903ab5d05b1ae63f55cedc10776a8c014c8fcd32b63f5ea38c242a951a567eebe1b07fa1e6fb129bd8378133a3e257e83c502b4125f"}}, @ht={0x2d, 0x1a, {0x40, 0x2, 0x0, 0x0, {0x0, 0xff, 0x0, 0x3f, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x9f}}, @gcr_ga={0xbd, 0x6, @device_b}, @prep={0x83, 0x25, @ext={{}, 0xff, 0x3, @broadcast, 0x2, @broadcast, 0x8000, 0x80, @device_a, 0x5f}}, @peer_mgmt={0x75, 0x4, {0x3, 0x1f, @void, @void, @void}}]}, @NL80211_ATTR_IE={0x66, 0x2a, [@prep={0x83, 0x1f, @not_ext={{}, 0x5, 0x8, @device_b, 0x7, "", 0x4, 0x2, @device_a, 0x20}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @cf={0x4, 0x6, {0x6, 0x1f, 0x4, 0x9}}, @link_id={0x65, 0x12, {@initial, @broadcast, @device_b}}, @chsw_timing={0x68, 0x4, {0x81, 0x7284}}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x7, 0x0, {0x8708, 0x20, 0x0, 0x3e0, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x400, 0x1, 0x3f}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "cd"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_RRK={0x4c, 0xfc, "4fe0e30ec7936834a75c32c0d5ccc7b8e147f11cddfe8fed0f2a0a46ebc52fc9052dad53e89792cd1ff7cc7421a75b8a69028358d9c1256e2565450619ed59b1bcf314b19d103d9a"}, @NL80211_ATTR_FILS_ERP_REALM={0x8a, 0xfa, "2dfa331b5b738d69eec77c81cd94c63a9b391f814ae9305923c063e2363a4481c489befa3c5ff71743b4a17bb61e040e767abbb887023738d5438780c8ca175cfc5d9387fa4fa260e17e38ed478f43ad65835dcae17f5e521ddbc423e675c9eefcdb98d5f6b18bc4f11af9166509f1e426d43f9fff2eb3445aeea90a505c87707f11c6d799d1"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "58567ef2af9866d2cee204661492"}]]}, 0x290}, 0x1, 0x0, 0x0, 0x40800}, 0x20008111) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000001dc0)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000001d80)=""/26, 0x1a, 0xd}, 0xffff7fff) r2 = syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x100000001, 0x5, &(0x7f0000000c80)=[{&(0x7f0000000880)="30425b8254efc33c69cb6216d8f14fc241ff9304c1f135e5530459402e716e0960fa05ad7387a101cc8323227e7355d457645a6ebe35bd1c7cc38254925f1d711bc887163615ec1f174d6b61f8cbdf9a2b9e6265605836bad81660c5bc9de7f4788cdee29282056615a6fe88d626289ca28ab5de277f602eb578cbf63c611fef34", 0x81, 0x7}, {&(0x7f0000000940)="5f50fdf130522abaa294a1879a225d5f8534816958f0371150e513ede31e80fc3a153067f228d1c6ad4c33f9b51733266545dfd74faf479ec1cc927522f20e7d0e34b0e8f0b2ada24a98e5a33f35ce3dc2fd88177ae4dbd4d0af7655a05df9977041cc31e1e406dfc3e3963128a14fac72fb032bd6d19a8dd1107bbbdf329376569626d28250dfd7b7a7dbbeebea6e539810ce7c26b6eb690a1fd825dff1c7979228e0abb0fb7def65be28e122afd4ce6b203a6c725f56649bebcc8f151b687df2488b3b36d951394e195774256020320bdc7d356726793283c2302f845824aadb7f71", 0xe3, 0xce}, {&(0x7f0000000a40)="07f8c80c7f02ffb045c93bd93ab2c74ffbabb902f33ca5c52a58bc927c9d8ab0c07d9450aa9aec3710b29c14eafcb761eb7c5898a407f90b28522c97086729c88e5fd59f00488baa23aaafd3fe", 0x4d, 0x10001}, {&(0x7f0000000ac0)="423d6ad7aa964121ae11ad103a9ec1bc9a3445ba932c019cb6c168631c4307b1f963af4fda8d5f94a0904eb6c203895467a07081e43593083e84da33f1ab33e37b15f2ae6b6cf7b8a3b8af1c74ebccd589d66be822adb9bc0def5112e76c46368a2ae911a92a3dcd87b46218254fa9a4f218ebe2d0ff1982311fbb6a1785f1bfacb5f76c92deda503d50cab7960aeff0d1d56b2b5a827baa9bac64e99d89fe6df35526b7e8ba3216c7f221ba3d77af34c0a05d9dc8813bd3e725d4a9f9948fa225", 0xc1, 0xcdf}, {&(0x7f0000000bc0)="b9c835c57690372548c9d85b04b4c0c6ac9cab9d16fce403f04cc8b24c6118ba213630ae05ccb6a80f47a523e74abc4a93c5ea45ffd161d04b47515db3c449f5e164957608b87e9e89c6de322b64aad86af49aeebeaeca86707536c0a32450e3c5c2a278881a5153e6602a73738284afcfb3fc18b9bc59c842489181c601f49c0d5957f0", 0x84}], 0xf1002, &(0x7f0000000d00)={[{@nodots}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x1000}}, {@fat=@check_strict}]}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000d40)={0x0, 0x1000, "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"}) 05:10:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff0f}}, 0x1c) 05:10:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2343.711340] attempt to access beyond end of device [ 2343.711340] loop5: rw=2049, want=28, limit=15 [ 2343.712748] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:10:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xc0fe}}, 0x1c) [ 2343.739210] attempt to access beyond end of device [ 2343.739210] loop5: rw=2049, want=148, limit=15 05:10:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x30000}}, 0x1c) [ 2343.925849] attempt to access beyond end of device [ 2343.925849] loop5: rw=1, want=2044, limit=15 05:10:37 executing program 7: r0 = syz_io_uring_setup(0x99, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xc1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) dup2(r4, r5) 05:10:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x50000}}, 0x1c) 05:10:37 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x1011, r0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:10:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc00}}, 0x1c) 05:10:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:10:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0x0, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:10:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000398) 05:10:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:10:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x60000}}, 0x1c) 05:10:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfe80}}, 0x1c) [ 2358.060211] attempt to access beyond end of device [ 2358.060211] loop5: rw=2049, want=21, limit=15 05:10:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:10:37 executing program 7: r0 = syz_io_uring_setup(0x1157, &(0x7f00000002c0)={0x0, 0xddfe, 0x1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x309a02, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x8010, r3, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd=r0, 0x7, 0x0, 0x3f}, 0x7fff) syz_io_uring_setup(0x686a, &(0x7f00000000c0)={0x0, 0x1553, 0x1, 0x1, 0x376}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 05:10:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0}}, 0x1c) [ 2358.164239] attempt to access beyond end of device [ 2358.164239] loop5: rw=2049, want=22, limit=15 [ 2358.166200] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:10:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x70000}}, 0x1c) 05:10:37 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x20d0, 0x0, 0x0, 0xfffffffb}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4000, @fd_index=0xa, 0x1, 0x9, 0x0, 0x10, 0x1, {0x3}}, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2358.197771] attempt to access beyond end of device [ 2358.197771] loop5: rw=2049, want=23, limit=15 [ 2358.199942] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2358.238120] attempt to access beyond end of device [ 2358.238120] loop5: rw=2049, want=24, limit=15 [ 2358.240395] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:10:38 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r0, 0x7, 0x0, 0x1, 0x7, 0x1}, 0x9) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2000, @fd=r3, 0x8, 0x8, 0x0, 0xb}, 0x4) 05:10:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe0000}}, 0x1c) [ 2358.274148] attempt to access beyond end of device [ 2358.274148] loop5: rw=2049, want=25, limit=15 [ 2358.276345] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:10:38 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = accept$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x9}}, './file0\x00'}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:10:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00}}, 0x1c) [ 2358.320548] attempt to access beyond end of device [ 2358.320548] loop5: rw=2049, want=26, limit=15 [ 2358.322506] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:10:38 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2358.347065] attempt to access beyond end of device [ 2358.347065] loop5: rw=2049, want=27, limit=15 [ 2358.348254] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2358.349436] attempt to access beyond end of device [ 2358.349436] loop5: rw=2049, want=28, limit=15 [ 2358.350449] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:10:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x400000}}, 0x1c) [ 2358.365055] attempt to access beyond end of device [ 2358.365055] loop5: rw=2049, want=148, limit=15 [ 2358.536637] perf: interrupt took too long (6297 > 6267), lowering kernel.perf_event_max_sample_rate to 31000 [ 2358.601723] perf: interrupt took too long (7884 > 7871), lowering kernel.perf_event_max_sample_rate to 25000 [ 2358.679454] attempt to access beyond end of device [ 2358.679454] loop5: rw=1, want=2044, limit=15 [ 2358.768000] perf: interrupt took too long (9865 > 9855), lowering kernel.perf_event_max_sample_rate to 20000 05:10:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff0f}}, 0x1c) 05:10:55 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000440)=""/230, 0xe6}], 0x2, &(0x7f0000000540)=""/4096, 0x1000}, 0x0, 0x40000000, 0x0, {0x1}}, 0x36ea) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:10:55 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:10:55 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:10:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x500000}}, 0x1c) 05:10:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000500) 05:10:55 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:10:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0x1010, r3, 0x0) close(r0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000340)=""/167, 0xa7}], 0x1) 05:10:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfcffff}}, 0x1c) [ 2375.709107] attempt to access beyond end of device [ 2375.709107] loop5: rw=2049, want=21, limit=15 05:10:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r3, 0x2fae, 0x367d, 0x0, &(0x7f0000000180), 0x8) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r9 = dup(0xffffffffffffffff) syz_io_uring_submit(r6, r2, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x5, 0x4000, @fd=r9, 0x9, &(0x7f0000000080)=""/6, 0x6, 0x4}, 0x401) 05:10:55 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0xe81c, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:10:55 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1000000}}, 0x1c) [ 2375.787633] attempt to access beyond end of device [ 2375.787633] loop5: rw=2049, want=22, limit=15 [ 2375.789797] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2375.794936] attempt to access beyond end of device [ 2375.794936] loop5: rw=2049, want=23, limit=15 [ 2375.796931] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2375.803312] attempt to access beyond end of device [ 2375.803312] loop5: rw=2049, want=24, limit=15 [ 2375.805423] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2375.811724] attempt to access beyond end of device [ 2375.811724] loop5: rw=2049, want=25, limit=15 [ 2375.813755] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2375.832889] attempt to access beyond end of device [ 2375.832889] loop5: rw=2049, want=26, limit=15 [ 2375.835105] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2375.862842] attempt to access beyond end of device [ 2375.862842] loop5: rw=2049, want=27, limit=15 [ 2375.864708] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:10:55 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r4, 0x125e, 0x8d86, 0x3, &(0x7f0000000080)={[0x7]}, 0x8) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2375.906588] attempt to access beyond end of device [ 2375.906588] loop5: rw=2049, want=28, limit=15 [ 2375.908509] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:10:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffff}}, 0x1c) [ 2375.928496] attempt to access beyond end of device [ 2375.928496] loop5: rw=2049, want=148, limit=15 [ 2376.202896] attempt to access beyond end of device [ 2376.202896] loop5: rw=1, want=2044, limit=15 05:11:14 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x6ab1, &(0x7f0000000080)={0x0, 0x6cb2, 0x2, 0x1, 0x49}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r6, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x64}, 0xffffffff) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:11:14 executing program 7: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00'}) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000440)={0x0, r5, 0x6, 0xffffffffffffffff, 0x6, 0x8}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1205005}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x40090) 05:11:14 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:11:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:11:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1000000}}, 0x1c) 05:11:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:11:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000600) 05:11:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2000000}}, 0x1c) 05:11:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2000000}}, 0x1c) [ 2394.647610] attempt to access beyond end of device [ 2394.647610] loop5: rw=2049, want=21, limit=15 [ 2394.701704] attempt to access beyond end of device [ 2394.701704] loop5: rw=2049, want=22, limit=15 [ 2394.703724] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2394.734443] attempt to access beyond end of device [ 2394.734443] loop5: rw=2049, want=23, limit=15 [ 2394.736481] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:11:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3000000}}, 0x1c) [ 2394.802047] attempt to access beyond end of device [ 2394.802047] loop5: rw=2049, want=24, limit=15 [ 2394.804019] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:11:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3000000}}, 0x1c) 05:11:14 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000000080)=0x4) [ 2394.834105] attempt to access beyond end of device [ 2394.834105] loop5: rw=2049, want=25, limit=15 [ 2394.836067] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:11:14 executing program 2: r0 = syz_io_uring_setup(0x38ec, &(0x7f00000002c0)={0x0, 0x0, 0x26, 0x2200000, 0x87}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x51df, &(0x7f00000000c0)={0x0, 0x6d57, 0x20, 0x3, 0x46, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r3, 0x0, &(0x7f0000001340)="a69b924e389ab62c91ff3837ac98dfd97908595e912d8bfe3d73ad20b9940a1d91a9ef789267d1dbc5add49a5c8bf6135eff7feabab8d59fc6bedb1eca27e994e817e2f4d0fdd5f2bd0a3e0509e6ed95f42336ae49bed43cf5aaaf7f4b4a3fbe9edaca16c29d9af4215a88cdc67a1050385936c0b1c48cf13fc675cc0e457438afdca2f7b2ef22f834fcd11597a23e7cd1665fe0f3103180426afe012a338d3e023c3a0a1dfb332fb0f07da7910c49f85f38aba9234fd6a87f3297c331b82fb95ba4875c8119f13c65a5e52b148edb9bb132a5364d8998717b7da47c6ec5e8e4f79d78fb", 0xe4, 0x10000}, 0x1f) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x50, r3, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'nr0\x00'}) syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd_index=0x9, 0x7, 0xfffffffffffffffd, 0x7, 0x0, 0x1, {0x0, r6}}, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "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", "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"}) [ 2394.868707] attempt to access beyond end of device [ 2394.868707] loop5: rw=2049, want=26, limit=15 [ 2394.870744] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2394.896883] attempt to access beyond end of device [ 2394.896883] loop5: rw=2049, want=27, limit=15 [ 2394.899034] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2394.930712] attempt to access beyond end of device [ 2394.930712] loop5: rw=2049, want=28, limit=15 [ 2394.932705] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2394.986854] attempt to access beyond end of device [ 2394.986854] loop5: rw=2049, want=148, limit=15 05:11:14 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000000}}, 0x1c) 05:11:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000000}}, 0x1c) 05:11:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2395.217308] attempt to access beyond end of device [ 2395.217308] loop5: rw=1, want=2044, limit=15 05:11:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:11:31 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r4, 0x6aef, 0x6118, 0x3, &(0x7f0000000080)={[0xa3be]}, 0x8) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:11:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5000000}}, 0x1c) 05:11:31 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000180)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x4, 0x0, r3, &(0x7f00000000c0)={0x20000012}, r7, 0x3, 0x0, 0x1}, 0xbc) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:11:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5000000}}, 0x1c) 05:11:31 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000700) 05:11:31 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:11:31 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2412.091399] attempt to access beyond end of device [ 2412.091399] loop5: rw=2049, want=21, limit=15 05:11:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6000000}}, 0x1c) [ 2412.169257] attempt to access beyond end of device [ 2412.169257] loop5: rw=2049, want=22, limit=15 [ 2412.170942] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:11:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6000000}}, 0x1c) [ 2412.214085] attempt to access beyond end of device [ 2412.214085] loop5: rw=2049, want=23, limit=15 [ 2412.215881] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:11:32 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x8010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000000c0)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10, 0x1}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4007, @fd_index=0x9, 0x2, 0xfff, 0x401, 0x8, 0x1, {0x1}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2412.239586] attempt to access beyond end of device [ 2412.239586] loop5: rw=2049, want=24, limit=15 [ 2412.241448] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:11:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x7000000}}, 0x1c) [ 2412.268712] attempt to access beyond end of device [ 2412.268712] loop5: rw=2049, want=25, limit=15 [ 2412.270348] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:11:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x7000000}}, 0x1c) 05:11:32 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x4ab5, &(0x7f0000000080)={0x0, 0xc141, 0x4, 0x1, 0x19d}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x468d}}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2412.295216] attempt to access beyond end of device [ 2412.295216] loop5: rw=2049, want=26, limit=15 [ 2412.296832] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2412.321132] attempt to access beyond end of device [ 2412.321132] loop5: rw=2049, want=27, limit=15 [ 2412.322855] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2412.346858] attempt to access beyond end of device [ 2412.346858] loop5: rw=2049, want=28, limit=15 [ 2412.349021] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:11:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8000000}}, 0x1c) [ 2412.397943] attempt to access beyond end of device [ 2412.397943] loop5: rw=2049, want=148, limit=15 05:11:32 executing program 7: ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000080)) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002, 0x50, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x10000000) r5 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7fff, 0x464c00) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x6000, @fd=r5, 0x1f, 0x0, 0x0, 0x2, 0x1, {0x1}}, 0x5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) syz_io_uring_setup(0xb33, &(0x7f0000000180)={0x0, 0x7e00, 0x2, 0x1, 0x286, 0x0, r7}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) r8 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2412.657815] attempt to access beyond end of device [ 2412.657815] loop5: rw=1, want=2044, limit=15 05:11:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x110, r3, 0x8000000) 05:11:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x8000000}}, 0x1c) 05:11:50 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:11:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:11:50 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:11:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d0e91732e66617400020101000470008000f801", 0x17}, {&(0x7f0000010500)="53595a4b414c4c45522020080000ea80325132510000ea80325100000000000041660069006c00650030000f00fc0000ffffffffffffffffffff0000ffffffff46494c45302020202020201000b9ea70325132510000ea70325103000000000041660069006c00650031000f00100000ffffffffffffffffffff0000ffffffff46494c4531", 0x85, 0xa00}, {0x0, 0x0, 0x1a00}], 0x0, &(0x7f0000010f00)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x3, {0x7, './file1'}}, 0x10) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in={0x2, 0x4e22, @remote}}, 0x0) socket$packet(0x11, 0x0, 0x300) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f00000005c0)={@loopback, 0x4e}) r9 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x40, 0x4) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000fedbdf2501000000080009000300000008000400ac141437d9d19692ed759fa3967e4aeafae1da1ac3f3c72f0617bbdfbad72cb2d6cf08b6f76de29e42aa3fa728ce5b26a2ec2a73f12d9aeeff5b1c6df0a49318172f62de4dbb78275202600a532cac55199c5d7bd8941855aafaf8cca696f123a08a8cf8b01e7f4d5441178dc9cfdbd0d9d28305a2dcbe3ba615340088a183e4b2c340"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4008080) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000530388b5010002000000000000000900000400038004000280d867e69d6ed53e10a313fbec0afb5ff0ffa0054900"/70], 0x1c}}, 0x0) getsockopt$sock_buf(r8, 0x1, 0x3b, &(0x7f0000000440)=""/230, &(0x7f0000000180)=0xe6) 05:11:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000900) 05:11:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe000000}}, 0x1c) [ 2430.521155] attempt to access beyond end of device [ 2430.521155] loop5: rw=2049, want=21, limit=15 [ 2430.586494] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 2430.588549] FAT-fs (loop7): Filesystem has been set read-only 05:11:50 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xccd}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x50}}, 0x24008001) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2430.611673] attempt to access beyond end of device [ 2430.611673] loop5: rw=2049, want=22, limit=15 [ 2430.613814] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2430.614378] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 2430.615659] attempt to access beyond end of device [ 2430.615659] loop5: rw=2049, want=23, limit=15 [ 2430.619046] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2430.621640] attempt to access beyond end of device [ 2430.621640] loop5: rw=2049, want=24, limit=15 [ 2430.623870] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2430.625743] attempt to access beyond end of device [ 2430.625743] loop5: rw=2049, want=25, limit=15 [ 2430.628609] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2430.634213] attempt to access beyond end of device [ 2430.634213] loop5: rw=2049, want=26, limit=15 [ 2430.636521] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2430.638490] attempt to access beyond end of device [ 2430.638490] loop5: rw=2049, want=27, limit=15 [ 2430.641019] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2430.642878] attempt to access beyond end of device 05:11:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe000000}}, 0x1c) [ 2430.642878] loop5: rw=2049, want=28, limit=15 [ 2430.645035] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2430.647220] attempt to access beyond end of device [ 2430.647220] loop5: rw=2049, want=148, limit=15 [ 2430.659696] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0) 05:11:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x10000120}}, 0x1c) 05:11:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x18020000}}, 0x1c) 05:11:50 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r5 = syz_mount_image$nfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x4, 0x1, &(0x7f0000000280)=[{&(0x7f0000000240)="b582bb7d88f5c5fe3321fe66c71bf247", 0x10, 0xffffffffffffffa9}], 0xa10800, &(0x7f0000000340)={[{}], [{@fsname={'fsname', 0x3d, '/dev/full\x00'}}, {@fsname}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x14}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '\xaa'}}, {@uid_eq}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@dont_appraise}]}) dup2(r4, r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x9) 05:11:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x18020000}}, 0x1c) 05:11:50 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x8}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2430.869475] attempt to access beyond end of device [ 2430.869475] loop5: rw=1, want=2044, limit=15 05:11:50 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000a00) 05:11:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x28b703b7}}, 0x1c) [ 2430.908149] nfs: Unknown parameter 'fsname' 05:11:50 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2430.944110] nfs: Unknown parameter 'fsname' [ 2431.101930] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2431.103777] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2431.115551] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:12:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x20010010}}, 0x1c) 05:12:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3f8cc2e3}}, 0x1c) 05:12:06 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, r3, 0x0, &(0x7f0000000100)='./file0\x00', 0x4, 0x0, 0x468ac}, 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x10000000) r6 = eventfd2(0x1, 0x801) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000740)={r4, 0x3f}) syz_io_uring_submit(r1, r5, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0x3b57) 05:12:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:12:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:12:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000b00) 05:12:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2446.584845] handle_bad_sector: 10 callbacks suppressed [ 2446.584863] attempt to access beyond end of device [ 2446.584863] loop5: rw=2049, want=21, limit=15 05:12:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x20020000}}, 0x1c) [ 2446.638938] attempt to access beyond end of device [ 2446.638938] loop5: rw=2049, want=22, limit=15 [ 2446.641047] buffer_io_error: 4 callbacks suppressed [ 2446.641060] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:12:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x40000000}}, 0x1c) 05:12:06 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r4, r5+60000000}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x45b2) clock_getres(0x5, &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x2, 0x0, @fd_index=0x7, 0x7, &(0x7f0000000100)=[{&(0x7f0000000080)="b8e2c8215d7f75870abce3a56058800ed39d", 0x12}, {&(0x7f0000000340)="6a0ee6847efcf1dd90a0673795296e5a2052f8ffdb50b9ed3f94556212bfefd207af93fcb28bba428bfc723705f90098f194bd179ed011ed0ee20cc23db21f2193dfb99d4db58c482915fc5d4925014a0a2b1a993314fd5da601e1022baabd2fbd7b6d12ba2405549dd50b9f231345fcd5c3b6a933bbaf0db28fdbd5cc6ffec7d3ae903d42da5a41656e138d204452e2e2c017eaecdeeced3c0f5a77ba620813027d2737e658b6d8c6d365ab8678a9f1854e86bcb1adf570c64f4bba30327165ee1c8d781e97aa11f50c1a64a3dbd352657910cee61a3fb701c243496934f71dbbda40f97a8bc4645cd13577", 0xec}, {&(0x7f00000000c0)="89ab1316da3629d9e589ae76238857", 0xf}], 0x3, 0x4, 0x1, {0x3, r6}}, 0xeed) r7 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r8, r9, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x20cc, &(0x7f0000000440)={0x0, 0xaca0, 0x31, 0x0, 0x3c4, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000004c0)=0x0) io_cancel(0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x3, 0x400, r7, &(0x7f00000005c0)="22bfd31b58570cac8b980c97eb0dc3bbe8ac12deb8b1a6666d856255a577cc2e6b009e5ff7bd6076d0b7e2dba0158893189f12ba41a9ce3df9f7200beb51b32bca6d6f3089f22121eafe6e010afe9fdbd70004da5b1ea7e86cd3e4ebe0599d99f5a016fe8fd6dc02a89ca6282e7394a11764e4a6a934b9f82cb4af2edd3bbee8f23b06579b500829a65a142beb2d1129038b3493bafb8864d3696ce459abda677847b75ddbd85574f0eeb22de222730caee2a302d317c0cf011d62c888c1b4eb7c08d659eda5162e09b6793ee624acb139f6ef7391cfac2a7d481e5b8a", 0xdd, 0x100000001, 0x0, 0x0, r3}, &(0x7f00000006c0)) syz_io_uring_submit(r8, r11, &(0x7f0000000500)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4000, @fd=r0, 0x80000001, 0xfffffffffffffff9, 0x10000, 0x6, 0x0, {0x3, r6}}, 0x234) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:12:06 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="00fc00000000000000000000000000000000000000000000000000000000000000000000000000000000001f00"/88], 0x9) ioctl$BTRFS_IOC_SUBVOL_CREATE(r3, 0x5000940e, &(0x7f00000003c0)={{r0}, "0fb8d6900dc41017303829893bd0e58606cbbabe46a438ffb3b7dd92868254159b00edc1750e5f1b4392f3206d3802dfc712f9c714e95c2d512abaa00db763f69e57562905a2b1feebcdc4d61d148792ac3d09c305a5cd84c3b0dd5a9d09bcaa5943b1b320fb7dbd0fdca817871592ab0dd6b889f28e4f41f9255cafb4c9300b9ee86dcc668c7a373662e8ae1c1d7141c011d185e0cebbecd2d3ee78470e81dee23bcc2d85e22cb0120e68d8418be8d3e2d4598cb7e456f73c636bab3bf0f7b546a6c5893c7efb4d3cc0ce801cc59ffde075bd8375f29ecd2a0dc28d3d6912242b756a6793cdae9da4941db39b1656789f8906d4a25885d37e220ce1ffdda5132d7f6a0bad59cc85b8328f08322ab3f787b921629f662ad4c90219d80a26374f8bfe3ab76a66e5dc36527ee845c1a851aef2155fc231532557697c585ab741936209a7bf8f7fff189fbe46fdd04f05693ace2b311281c485ede31fe2f12e66e77ffc7713ece8dd2d43235874a0f79aac222ee09eeed0613487b4a011eb48e9d42f36ec38e0058c94c1434adb46ad4f31d3ec481d4b5975d96175131c7df0c8690abacfd691486f0887b15a0c0f88162a0907e7e12c4c677ca836f4eb43f91869fe06805bc7102d3cc0e7a2aa09513ebc39b51a7d905bdcb2a563ad981c13a24237e1906f5121b82af50e9c8effdbd2c05310c717e3a4cae97991765ab48c6fea01755a14018d3ad1924db8c5b1c2030f6316e42c31a905a2a078465cae552b9eb0760b8532055ff2551db593078ebb58149a3e5d6f0fcde83400ebb1d013aaa269810d712b7c5ec7b7aded49b965669c6e6cfca363f2e127a7bbc887ee4dbf1521115f39f62399f5bd166c5ab3d7b56cb339bbbeb724e790e421b5def7f50d36ac0fef56ad4deca5c77bd50d4aee27b0e728fe00213d33debe7be45793a9a3ee892a154dbffc5861a6264c3030048374a7137dd57c5ecd33b9650bf715cc336f6dbbba08dda9097658504d7b01d5a4253fb69072ea175127621c9757733a5cdca4a682810a0a9212148d11cab68d5563540866713d0d0e8bfde386e49c80b9b4fc203d4cfa1055dcf8e16ab7e59c5f51bf5a0211f957857634fdf8f4b6a9774ab628a020ab2cf641636ef963224e520b146efa8177d1d289ff18abf3fc1ab3e6ce7f02d12a1dac727c51b487c8268b4a2c7055b0cab050dde9c38fec265f78931bd977a9fc30779a5a36c4fab2a24446ce4373fea020f862f7d7ee7681eb26406aeef125249d001ee26209fba09f46bc29c16fb2870073430e44d430c58b8289b98ee88d802155d29c0479b4a79912debcb55c28cf84824544c5093d5e96ec02711f276abd598c115611daacefb078569d4e59a8d83ede912bf96239c3eaaad45c2bef707876ab136bacf8dd04c36c2fc9edc4ceda7fe3f38728aa8fba7ef75f1d23dff8baac16963c57ef956db3abc3bbe4026a99618dfd13eccdadb0fd055e583fb6c9222794455ed7a80245f465b1ffd1a6307b87de9ca511071576c49089eda4dd4ba330fbc7979ca7aacfcedb07f79596e576f5072604f3ac681338118cbf8684563e0482e22aa18940ae2a6edbaaff06a95201d21812a1937350dd40f5bddac8a503ff134d80ad6bf6053c433bdaa84b6134f286351fce14da0f4b41af3d37339b2fe6c72af1fb8d8d952b28f1f5b6314b7f6148fd8e648c680166ae34ef1bee524c687a405cb120bc141403a03c2cdddf8ea5e970320bf0d1a1fce724668da406f6c4e4a60c0106ac27ea9a91fd5a2c10adab54698e4f048b87a8b1f55adf3b83ca32e08a1ad358da933df39e739bf85b5788dfcffb474f0561a122187e75ecdf14a3d8e64e6068ce8355234515e8b2a0e1744ef762f52e1b3da1d00a578252b03b0d99f329b6dbbda2cc27e59253161a58b1bbf9ab1d81432b8983d72734e290f6cbd2ff076eaa9105738ad1e7c1977eaec37bb7e0229640e9267425044a20b1d6494336860c04b5c1a2e95463b75b4076d68812662ca06710b92312badd7a767fe1640387d355dd019b956d1f92e7fd4c7fc4b1ee80e8b4ec0dbf43cb6d5f2d7cf7fba333535f3e0b46ad7c77621a8e7244cb71174b28a1a73b546e8e2e51017c8fc3cbd23c079071e7b810e6d6402c076907f3eae131cb38a9745420e5e7ac32037ef16e0804ac2599866eaab6070a084d7824502311b771804064bd9b05b6b4e39935e0d6f33eb6d9f7c067d71ec51ef33403dfb09a2bb82d297f7004592a178c87baa45ad233dfa9d19af71b502c301f01201bd446963c9a2c4508714cd0c76f47f7519ab3eff6d64c3ebc299f7cf283c9e5ecd51b5b8f0ad2e2109e8bbaa54309d98e8825db344fd774f6aa7b9b38b5e5e8478e217b7a522cd6f94103fe70729d20af0dd77036ecc01aa851c2f16b870768f6333c6915122755f3a4e92602cf61ee5377c096de5be96a43d116b22f4f0f0e44c7c6af1b4b3c6a5640081e8e86914c1f82412edeeb762f17d98f85f403c5e29ae71616dbb397f6471a716f13cf93f9ef786ec6f7609b6a0a5130670d7a000d55fb700613d3ce768999085473828dd4d670e026cc74207d909b7a945b9e53cc41d0a7943b9dfe5d4e0cde148902994105e55dc11653bf26da9c1506d66cf61609a9e65adb909e2b79329f1b5f10a91cf474aedad42f389fe101cda358a63e433ea0a0159019efcab4a808b31fca69184654a39fb1b24fe7cbc23f6c2ef43a6bcebda4627c055a2ff7485bb6a9d1a80f9f224bc447a237be2a0f5b5cb02b6c493e315102f9b9c4e84f8be2b9bd3d860fd7a0c541dc9fe30f178b2297e97d864111e9b8aabd5380edb46382edfc7385961a497c885104a09f22b2807ef41798f879c0ea52e701fe300c91500f6759064cb6efc418b27120b6882f18beeed7808179d72c5bd4b7a466d76a7fac5f091e3460b4397b4cc15046d8a4277b983ef4a51ffe12886120e2afabe29df7231f6a26094961187cf3ade5338e39e67e91f6832237b1956b8aa7df0bc2494709545d651e0d560bf462fe48e2813da768d735f93f052c1f5a1494f63ae7b78186f2dc1f1931df56ee87da57a2d26e26a653ce49c8e0805cccda32c0ec24ec56f9b5aedfc6a1f0830b4e9f524a48758bd5abf2c4e3e6b8885e73e73f3076e022cbf822bde4f22047d945f88011ee07d43c862273e4f3fc544caf82f4aea345c8daf25715ca37c4ecf994c777982fffbaa2e15ccc243cc4f6da7ddb9ae025b1f1f1923748055030203ea81ca681cf83bb966ec2fc80f358d92bd9c6145a71551a8d4fc6d4f9396e0bb6bd21e737ee1caefc6e1762fb276355c7892ca786e1c2b501298b1328612cf074d74ff9883b6891fae902040d1f603dcb13e9f5ffa5fd4cb5118ae5fb90fda9f506f5b1303c2a56c20962b2608f1469dfc2d888e1ead5b02af6ab0b6a202bf8947b922591b57b1320d9bf1eefc1c61af3ede5286381e7f8294094d32f26a296af8b010d5d022ac3c2efcbb888adfbcb13aa7a1984ea63d49c7fc7e73992c08db79713c941fd1939c9093b615e8407b161c910ac291aa2269ea69e69c88792ad079c974db7ed1073bc155e26d26e9941f254c3bfbff4e6a88c4af1fcef70000b98113c05aa3c82611d5ddb7679565329da02906b31638840f91d7d999d453535780ee9dda07d093e981391d7beb1e42b5e37aad64bb9db1922810532ab77afb55a68284e5a0760b6cd9a2204d312b313f272075c8bd94acfea0035b8f3d13712aeecc972241763eb24369204bc28ecd161996ccd1cafe98960e03ec2679a0b612a3008b12c09666def1e9bcb097ca88c19772a3d072fad9f328a00c86751da420ea1d219b69d6765891fc3b60ae1bb0d21566b0dd0a64934171f54eac6deb8ef2d12f35c9ac292ccabd17806ec65b21aa24c8e4eb0f97fa02ca62855933edbf6383b21b27f9741497a6def674948e45f88395d8372a44309296af524c7c3f1a59092a60e07357fbc537f0fd5e2a8f85f7f80516c7c8b5f4d59401bbf689a9e2c6ed282a15a3938c5c71b90628c999981e4fb039781e545e431ef295b0e829edebf26ae43054a747efa7e4e2a6e706e8a33360309740bf8514804e327540333f2bb0e19892b0e94e13eacfcb6ac4cab62ec750124e47932f03bea0b8c3e2a33a38f8281a3bb385ee5f8774339eacbf0d3ea56d78f92efbf67977a31c32d356d1c636971b37970c0a888358e0de8c78ea555f896d2beb3e91d771404bf47088ab01416089b4afafd0c3e79d2b579da4898b2069bd5477072bcc257dce227185e4796347120032c0d9f7aecc418165958cfe31e638433678f6a890f411f8debde93ea8947ba869d6705f8f5227dd1c38e05500aab2bf86a091b3b1a664867a235b0f6924a936996c4295695a17a446f4bfff67e7fabbcfd5fd66b668558ea1f46a11e7b49ba84915901f99015fbc9a8c4903283e56e37ecf201c9ec7b3d9a6f7b079c6f3cad46f66d16af247b5d7da82c0ef54b7a4bedb44f8dfebc459afbe1812371d653a1a2edb8ca04ccc1c93d225692da3a59cc5d97518067feaaefb19a804b3c13a53296f2a58c02b97f04d5e1495f8f6bc5fd8cc43faaa8beed82df20da3d921f6abaea229f0d530a19c1e733daeb4a80e3254b34845dec7c3c394f853b73c8bbb7c7dfaddd62da5d23e65fcfa477bec072794fb1cb40297ab42b69f09c6670b6381a229bcd188a4dc64b0049f900ea55971761d0d17f254ddfe85c8ab3bc18436746ed8b37b5edb32153ae19bdd7fc85e0fa8ce836f1cf7fea34b81f65843b1731ff43fd46d9445bcdcea1ce7ecedb7bffbb5ec89a836ceeb5ddbfbb4d5522d892eca4b7a84580d8c15de693cffb88eedcb839a543c756cae3e3f71cd49be178edd584257916a98f1ed2339563661f756dd487e7d1e9ba2e28d04bdb0016b9897d5f16d1154cffb528195f2024b3813f1c1a3d8f44ee91e5e0d40709d3046ea8f5f00c21a57e57a5749ace8a83c6b294434e331c13daf85e9657ec1bd6696ecb249f5daa1a7cd530b62604405825caa04a4ab79e1475dd0b21501cccec08e13074ebe90f595475b8889cf3f896f15e0789f6ce0bb8442d8e0d0d548afa0d16f3f1e2115edc10f8f70259c3a52366c2b318aeb66047fa0dca96486b0d60530b6ea5e4269988b0dd9397008e10ee49a39e9c6567d268d0e9857b5bba7f62695822358558c6ce93788f6c86a14dc09d5fce038b57aed3e460e72128001b43c58ed281454efece9a5df8452853421bcb196024a9d2e4fce57c2ee808f27a3681e16830f265e1e9cb79d02af278106c32999ff8b54b09d2df397af3c288da28c123bded6310aba5f3130c425e7c3417c850e9f4e2a55baea33a9d3f707b50aef59c0635e63cebe718a7b927d37942aeb1a4c7988137af2b817a7f1f68c1858b94386fd2e13d5c2b162e5c10f631652c7b74a62d00af29ba0113623a67bdcd362810c9c273196d190c4e4650f5412f76448dfa183d1696bcc98d353152defe18ec217a7bf75b94c2215831b0f61810851f137de7f495f2d9b12a92bf01f02a775fffdbb9be0034ebf21eafd17ba5b3804cbff03997552a45f3e15778c911540ad9e1c615f0168f64c098813acf42bdf3404a6fcd0e2e85ef9e1a472dfd47b8c756e34b6067a619be40404afd89d6704911fde1238fbb006456ba2eaee9adc6658f0b2c8c9c6df44e53b7fad8d95557d6b0afff7526095473fcbef7f0397a51cff8413dbe78071e725832587073"}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = accept4$bt_l2cap(r3, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x80000) r5 = accept$inet(r3, 0x0, &(0x7f0000000240)) ioctl$BTRFS_IOC_SEND(r4, 0x40489426, &(0x7f0000000340)={{r5}, 0x2, &(0x7f0000000280)=[0x0, 0x81], 0x26, 0x7, [0x4, 0xc0cb, 0x7d]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000000100)={0x4}) [ 2446.673092] attempt to access beyond end of device [ 2446.673092] loop5: rw=2049, want=23, limit=15 [ 2446.675224] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:12:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2446.728312] attempt to access beyond end of device [ 2446.728312] loop5: rw=2049, want=24, limit=15 [ 2446.729519] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2446.747345] attempt to access beyond end of device [ 2446.747345] loop5: rw=2049, want=25, limit=15 [ 2446.748608] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2446.766253] attempt to access beyond end of device [ 2446.766253] loop5: rw=2049, want=26, limit=15 [ 2446.767453] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2446.789591] attempt to access beyond end of device [ 2446.789591] loop5: rw=2049, want=27, limit=15 [ 2446.790883] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2446.808678] attempt to access beyond end of device [ 2446.808678] loop5: rw=2049, want=28, limit=15 [ 2446.809867] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2446.823734] attempt to access beyond end of device [ 2446.823734] loop5: rw=2049, want=148, limit=15 05:12:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x40020000}}, 0x1c) 05:12:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x40000000}}, 0x1c) 05:12:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2446.927546] attempt to access beyond end of device [ 2446.927546] loop5: rw=1, want=2044, limit=15 05:12:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x40020000}}, 0x1c) 05:12:21 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:12:21 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r5, r6+60000000}, 0x1, 0x1, 0x1, {0x0, r7}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd=r4, 0x7, 0x9, 0x3f, 0x8, 0x1, {0x1, r7}}, 0x8) 05:12:21 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:12:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r4, r5+60000000}, 0x1, 0x1, 0x1, {0x0, r6}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, &(0x7f0000000340)="9e95cad4c48eb4671093cf4785e7410358a4c279256daf18fafc54c6051478c37af0736fc8b57ba4eb847ca5c64fac1583b089a519aa48a7b03e576c77f624478bf852be93d578486c652c0f4b827eb00ce57fe9c7804824553d8f8c6c30cca7bd7cb406ba3ea5cd0597ece1cd85e156791a569e11169e205ad571b695d3fb787aacc1f03ebca78cec2618f39acdf291f8679dfbc161a173e9c01023a57dbef33667b7350ba2a6e7613e075160a5ad5555d18838c9ee5ea8943318e6a0b0375fb0aaf679aca429040d43859673e6117c5151729c612fef7208b23778ad", 0x5, 0x0, 0x0, {0x1, r6}}, 0x81) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:12:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x50000000}}, 0x1c) 05:12:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:12:21 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000c00) 05:12:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x50000000}}, 0x1c) [ 2461.811720] attempt to access beyond end of device 05:12:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2461.811720] loop5: rw=2049, want=21, limit=15 05:12:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x91ffffff}}, 0x1c) [ 2461.890229] attempt to access beyond end of device 05:12:21 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2461.890229] loop5: rw=2049, want=22, limit=15 [ 2461.892396] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:12:21 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x70, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x639}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x18}, {0x6, 0x1}, {0x60}, {0xb, 0x1}, {0x9}, {0xc}, {}, {0x60, 0x1}, {0x60, 0x1}, {0xb}, {0x6c, 0x1}, {0x48, 0x1}, {0x4d688ff66f97349d, 0x1}, {0x3}, {0x9}, {0xb}, {0x5f, 0x1}, {0x12}, {0x48}, {0x12, 0x1}, {0x18}, {0xc}, {0x2, 0x1}, {0x18, 0x1}, {0xb}, {0x24}, {0x18}, {0x12, 0x1}, {0x1b}, {0x32, 0x1}, {0xb}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x70}, 0x1, 0x0, 0x0, 0x8871}, 0x20000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2461.916480] attempt to access beyond end of device [ 2461.916480] loop5: rw=2049, want=23, limit=15 [ 2461.918489] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:12:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x91ffffff}}, 0x1c) [ 2461.947605] attempt to access beyond end of device 05:12:21 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'btrfs.', '/dev/full\x00'}, &(0x7f0000000100)='+\x00', 0x2, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2461.947605] loop5: rw=2049, want=24, limit=15 [ 2461.949964] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2461.985124] attempt to access beyond end of device [ 2461.985124] loop5: rw=2049, want=25, limit=15 [ 2461.987104] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2462.016405] attempt to access beyond end of device [ 2462.016405] loop5: rw=2049, want=26, limit=15 [ 2462.018462] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:12:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xb703b728}}, 0x1c) [ 2462.041871] attempt to access beyond end of device [ 2462.041871] loop5: rw=2049, want=27, limit=15 [ 2462.043844] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2462.077158] attempt to access beyond end of device [ 2462.077158] loop5: rw=2049, want=28, limit=15 [ 2462.079347] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2462.116117] attempt to access beyond end of device [ 2462.116117] loop5: rw=2049, want=148, limit=15 [ 2462.319588] attempt to access beyond end of device [ 2462.319588] loop5: rw=1, want=2044, limit=15 05:12:35 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:12:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:12:35 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:12:35 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) io_uring_enter(r4, 0x435b, 0x546, 0x1, &(0x7f00000000c0)={[0x5]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:12:35 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_BUFFERS(r4, 0x1, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:12:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x9aad79c1}}, 0x1c) 05:12:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe3c28c3f}}, 0x1c) 05:12:35 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000d00) 05:12:35 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2476.167191] attempt to access beyond end of device [ 2476.167191] loop5: rw=2049, want=21, limit=15 05:12:36 executing program 2: syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) flock(r3, 0x2) 05:12:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xc179ad9a}}, 0x1c) 05:12:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe8030000}}, 0x1c) [ 2476.259641] attempt to access beyond end of device [ 2476.259641] loop5: rw=2049, want=22, limit=15 [ 2476.261735] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:12:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2476.310122] attempt to access beyond end of device [ 2476.310122] loop5: rw=2049, want=23, limit=15 [ 2476.312147] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2476.334244] attempt to access beyond end of device [ 2476.334244] loop5: rw=2049, want=24, limit=15 [ 2476.336341] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:12:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf5ffffff}}, 0x1c) [ 2476.369291] attempt to access beyond end of device [ 2476.369291] loop5: rw=2049, want=25, limit=15 [ 2476.371289] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2476.393216] attempt to access beyond end of device [ 2476.393216] loop5: rw=2049, want=26, limit=15 [ 2476.395209] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2476.429303] attempt to access beyond end of device [ 2476.429303] loop5: rw=2049, want=27, limit=15 [ 2476.431270] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2476.456201] attempt to access beyond end of device [ 2476.456201] loop5: rw=2049, want=28, limit=15 [ 2476.458175] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2476.482435] attempt to access beyond end of device [ 2476.482435] loop5: rw=2049, want=148, limit=15 [ 2476.641895] attempt to access beyond end of device [ 2476.641895] loop5: rw=1, want=2044, limit=15 05:12:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf4010000}}, 0x1c) 05:12:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(0xffffffffffffffff, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:12:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) ioctl$KDGKBMETA(r5, 0x4b62, &(0x7f0000000340)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000201010000000000000000000000000480040002800e2075e85a7f6fcb24c37f8da4a630e0cfbff15b00028372cd9b6ef21bb2f4ebd0abb02c1444587c66eb19fe12b6aa3894fbcffc374448165c4136e306c309dbd05828ad3a0000"], 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r10, r11+60000000}, 0x1, 0x1, 0x1, {0x0, r12}}, 0x40) syz_io_uring_submit(r6, 0x0, &(0x7f0000000280)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}, 0x32) r13 = accept4(r5, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f00000000c0)=0x80, 0x800) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:12:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:12:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:12:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc000000}}, 0x1c) [ 2494.074586] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 05:12:53 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x0, {0x8000}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:12:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000e00) [ 2494.102809] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 05:12:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf5ffffff}}, 0x1c) 05:12:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2494.156267] attempt to access beyond end of device [ 2494.156267] loop5: rw=2049, want=21, limit=15 05:12:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfe800000}}, 0x1c) 05:12:53 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x100000001, 0x5, &(0x7f0000000180)=[{&(0x7f0000000340)="d144c070b3d21a0abfcb934a2fd8a93bf07a63a5f726291b3830805fe3785229de05b4378b5712519ab328d16ffa8aba6644e08cb1eae0e1e27be187e1d33dcc2dacdc26c75eb3ab468231b029456193abe427666a6268072b637713e251970c1b8be69d314626d4e56a325498a039a37efd3cf254d5189135fc1a01f85b7685e95ca9a4d367014d2153b00d01929a9d8e4ed99fb096711e3a868cb541d2b3efedbf15018c29c603f7acc6520df3522a639dce69f818057ae258d660ed5252220b04bc99c4ebc194dc8ff5a31244e02af74201b35f79700b", 0xd8, 0x2}, {&(0x7f0000000440)="c9aa25e2c667b233199fde270c4718f913e3751f8fbd0238576337bf213852c38845ad53e5ea3c1aea329a3e4bc3ca4bb49a6308a08038efca12ca4089d09fe7898311af0eed5d6752fe8a01a1d8fe8ffaab6e35a297242855186701ad285bca3d9fb998fae150796164496bb2e524e894f9720861fa1b56a309fe3349c865ba99ab013ae225bdd70f44a72ff29ed91c312e897b673982babf7367cf20f06394a33e2af09072a14bd9c66ffa27ee25b6bad660cf0fd3a20d47344c490bc2ec4d2303abcc958869bf502ea1d7caac044075ed220bb7acc5a0ec5294b8e8abc0090be31f820fabbf97343087b7d81b2f466bee8e42033cfe2d320cb061600a238470c968e9247616eec9de0f413905b2958f5666cc8c4d29d3f2845d0e3bb54722ba0660c7afc16cd4d5d229dd7e4df3e01a0cb028487bc5bda47b14545034036fe05452e3c950f09154371a07b51554318c631810f2278cb84fe498163d62924a6b6e1cb47ecd80786eef643d109594b958c134530f10e8393b31d86c3bd564fdb9d8bae2bc341425166e9c48632171a0aa130fa631084fd8103fc407126bf103fa37e3c106be4cd355729b393f1a7b1dfae71eb7a27a53822d55a7f7dbfa2bf1e467b386976d864d53ca66fd72502480f9082a1236f7f071ebb3a6b5ba1b44115c00d3c03cfdd299855784e85188e46388092011d7e5c350cd304a88b03392b42fc89733166b3e4c4e86bdbd62f3a4c013bfa2089abae73429506ac4820cb9a2824e6b6859b6142dcb9e4bb01c2f07718657d5c9c0c7c6e7b72ea88acad1a015eb1ec849ed343d599a3371b86694152d672255064342c1fb902e073d4fe1461ddcb245df78a45aa6582e0ba55e555ba62de08eab728005d7dba6ae857562581cfe0515193d4c2bd36bd5702330052018981de15a63f423df38e0af26190208fb24bbc21d938f70a1d79b4065df11faecaf686c86582be7a1ecbd7449619be5b8bdb3801898f2f4b4e777c159dc00e3bfeb566f1481b3c42a5651fdafc5d80bbe2bfa420d37f3cfffb592e398539337763fe67b3af9bfb8920ded26a5d9b51d87a1b2f9b08478319d163c2b7276d5e94d8b9097a706b87885819bd0c9804e40c8c3be8b3790047a3762cb273471874c2e8fa55922141e56007f5f57335cdd381255a5dae5747f5ffa183ee581a6fa170b047a61cb85eb626f664a94d2c2891885f7cf0c797c59318ad9a07041430176d674437ed22ca1784c2bb63d475aa57816ac8ea83e6dde55dbaa05832cd369437329af2e5e950209d04f7f29c0583375016cea00aaab5386771752e8643b6d34955e3dccb5442048c08670b17ec7725b665bcb1deb54d9a3569050fb84def6543d7af2078f29812c2fe5bfe4fc2f40fe9c98a5392b4896d9da99f39a60d03778b6d13ba0741687cce03f7999f603459732ad23a782f945920e04a92666bf54d2176fc0699c2bd7fb5ff3be33066da2c6cdb43f172f148d06cb4fe798421aa5cf39d0eed0c12f807665eb0880e250b698a92e63659620e7b8dc580448a8bc4040c01c76b7b1ca38d02d2b63c695b438af47d39cad7737c337b1f62407f7c567492c449ad7a734638d5bda4365f34dfca4f924dfabd78840ce44eb76665a766217ff6d8157680534c60c09538f4efe737f2e92f1f81b93d25ba303c03790546d61dd24c2f143ed6c4e17a61f8f3745828b1147a41c44599fc6a0ef911510d423198947ea768f6b59b17ffc3fd671e6371353438f0c44dc5554980555e31402505996ba79009c206c7511bb4819b362d9329d71945834048629a47b80df7807fe32469b1aa900ade1e77fcb78f28802a50d90cbefd9028e1f8be2d7b51810075062b124245398e2d8b75d1c4c965e1a2563fb3313fb08b5ff802bf8cea1d475882cd88faa9e5f55d979c5c97ea9225ed9c8e27316263b29fcd6e66956d53d6a9e863ad86b43b330af49b84dc6ed8846052f0debd0d268acaf9bf0260278d67a9a2a349e7e02c0f6de414ea343aac237ae756da44866cce8652edf4aeed43548167e83a8f3bd7e07f542c2ee9892fa1a6df358ac303b6d9d1ff727b71660d339bc58ff54c67649e5d2ecf1562cd870b64d39c617ef28e46dc0355b84806ca9da2aaa3c0272eea147e625a4182e153b487851c681bb24acf0a6e48d63a4ac5521966e91db3d499d544c46af142dfea7eb62648d11b805fed9513878cfc7fdd17e56e38882d27f0383bb4f71a1bbb2475105edfb575e509c2fbbb35150b7ad669593db3536d488118f81dfbfa592c4a51a0dbadafc362d98a5e8e77e6ef0e5697630f137a3ddb25213245bcaa59d5d43e0316c3a79ef9a5841367b989fe509072d153f00fbbc9101e9221586f9a7e5c98d13435997041522a8aeba9952ecec6703786f91e35bf93105b8925a421184896ef85d521f556bf4413fa738e6f5905761649938f284d870d12a7ad26b1c0aadd0ddb57ddf009efe8ab416d768bd874ed3cd4ca7486e582d1834cc3fae14ce6a1c5a583c2efb8e8173a28a296450be6aa9a955758872ff11183fbd8aacf3dbf2d8ada7b635f881a33d1bec35402a3dd2ca04ebab77884770588ad035b7a638e40991aa27178e175c58d85354c785cfb598ab9ca77458fa7009a5cc6e996a6a103fc7314dca8f088c98b8265b3f850bcba34c5355f4a636db7a8c67b3f76078e70e84c1bd277cdf40729e07327fbdae649342e3915fcd887c30f99498e53643232c90107314f7c44601694e0d559a7b5b51baebd20436636afc21748418fc0e4a41cb5ae3a70a97232ddb9ffbb0184eee28f43236be63099ba48bf7f4fed37ed65d90718508c5ec841f6c1ba0d5e4f38447fb1153fce1c094ddcb02ba1b1380befd483af0efaf3a40924713172d834917809bde0130ec799577b56578c1f74ad9d89c0102a6c4e09c30106675a10cc615ae31adfc7cab416775290d4362199bf41f04ca029b9f6cb5318de555b52450130eb3cdac99052f5e427d7c6b83ddc1172de9711e629804eb17ed322f1246bf8ca6ae590c8b132d5dd8de683a883e2cf62e08d9650df9a4102cb205377af432f63ef10c448fa77f62fbc110a9ed3104ff6a813e3aefaf6ab738e44ae44f929cd9b708c647479c0954c8e129f39f193f95680c94e70931ce0852e3a0e275fe65857b3303fec0595caa4889a644990e5c2e1f952fac2659bb4bd21f2397d908dbabeb9d916d4199c6d5a635f31447baad80988a54a95711046943986555a7077a83376dd91e4be9e040f825a15628b20cb80fdeeefe579be1bad41eee4b6e514fab3d71d5f4867f35b2c7aae2d291abba96f264ae8cfc1aaacb1b8c017601ea686ec16bac1271f3cd84e9fecc9469838e6c6d67f0fca72887a301cca7e0bb42476ac0835ffa9161aa1d2ad577de23ee3998394e648e050db76a78c514a965c610f6fa1ab451ed556afc9afde7bdddb2d83b88e91824d2a703d83a4f16d72ebde69caa0728b293ea1f735d0453e44ebaa2dca1e95590d65029a10dee3c6978aae5e3e2bb61888d3f0c4995ba969743ede5740a3cf02b7a9f9acf494fbc25014773ef7102268e7aaed5ec4466b709cd1d2b073cfc10a56505e0c83ff44248afc315fe3a835d59dfbb7b008ab71c7d51b651bc4f91508128e30d0e1c9821526f77a034ac4214ac6161378545cc12ed1eec28ad3caff6ddb97303551ee24bb8b68530029104b8ab6ebdae87971e461c8981a866b6fc5b9bc1ac3360ccfd15fa17b39b0f084b6821e821befe59664568d8061b1f07c28506bf71feda2d914a19ebea03e8c9e74be03a46742d94860977c200ba2ffbc51d4ff15a0a9b8980529de12dc6e6ef5595b22a02054656b6bb99b4efd514861c258b4b98d537618f34662a0e46498bfaf6e1a404ae01807529c5a7a4a113ecbc206f81315039fb9bf1118b76e42465178080d2fa02969159f9aa570647de71af3d153de5660ed08f4b069c6af6e310024458426e5aa9a969e8e262ef597d0bcf6b668baec3cee42a9a917bb63cccef529011da858d5597c2dcba60cba6c0c9dbef3b051cac0aa46964ecf5f997144ace1c38778048aa8a12f793726406c88de6ae10bc7326f21ffc73ed240405dfd3901aa785a2ec2c856d533eac246babedf74ac0bdc9dc931c47b1b3ba28b25891dcb70c85f423c5851063dcc4a681f64c787448fbe41290ba95fc0a612b6f7c9aa7d78e42bedff4995615bc21709a344de0523ddab1a60612fd9777dbfc5a9697e616b7edf5b5000cd86e585463a68098ef89fbee5c6e27c7951e8f8bb89b9c2ea00d0ec5ec2eeb36e358cfc463b16c0d7e3b5327d6d33de5a73027673da2f1e59a62d0005d59c313237399c03f4797cc65931ba96b106797e5d2618d48d33b396c57f9a698f759897bc1de7f612a4609e07d0bb17454d6a553e7dd02d3bb18c3f06a69e9db09f0715c7232092101d4115b73813d5748889ecd5ba6568863414cea3f8dcb3874b1a93c7ac4a375c054712411428a92b008c4a6bfc2b54d5818ed02a3ab21f54e225f2e34d0a0e3d5ef0788b9717f894942a7d1c81a61f5a912fa0423e305a96caaaf00b2858c0a912578f643993b761eabf1af502d70bc7fa380b6013a5e98b0ff6c5766707df61b61591dedd528ebd0e39156f15a42584c6f68e4d0c342638a03add00ce18f46e797614bf0fe69cf87b76b89803afc8a4aa0c1a33166562c1c29f4a041e5173c52290e0b25ad69d694ba53488a9ea80789d292c346381f576c90ddc1aa7a062f5cbff75adcd92bf6d1f3f47a8c4d546385905d89605006b30ae5309efd3fe349b22cc80105a74e50ead97fbc630f9c000412d755b3b5f09800f2f187b0be96b0066e10b751ca3c8f0758dc43cdf57be042afa60236ecc818e848caa161208e5b0e22f3dc3da9c8cdfff38bc31a29ca37f720bd24c031f2c833d3559f643b7e68bd36f9a914df562c9b8ba723eed68a91ea65b6929ec93b27a3a41945edfd51dc676c9aca77be043b2ccc461d0b20982f4fad3e112972ca4cb155f4f533b600c34e98e7dc2ccba855f44499aadb6d0cffc2823f39d933bc48c4210e8146a1aa97be988014e10c17fc322f268c171de171d2e91024c213a31ed6a192c2a0de014e8821c21bbe35958e7e3426fc503632a2cb8a5f0569a1c559e108d74d4950b005cf920f99dd8827d9f1f08d61c6657d863a97c62ad20605a714fdfdf356234ee498d1776a705d2000ff98d7c4e83e0669eb40db67b1f76234e890d39e224c56a6264b8f240de7611cef8d9cb27e63f44974d2125e462785d1be714ffef5244acc0b087b31a5fe883b50d2a1b045bbc4e2a909213937df18cadd45c721e7924c4ae55c89c8d5295bec30684ad908a34baaf4546f3e7598b3525d8bfb7beeab046e1f5636f882a9fb138e5926bd1095aba9d6499d0bbf317514ffa3444b3068789e253b7982d314a9dbf4b6d05faeb65e293b3e4f824e40a4c7fb9f878cfc9513fdd32c07fdfaebfe730268f8841ce2374dbef00692de01981f912b0532dee07c1a392dd55003d2714d114d92588746dbfba6913540ff33b44403e590ce46dda2cfb048a3ebd83bdc9a6268458791ff2bd7b72a94bea390b48d91dd5a813eee6d6228e39ab741dced3427dd0a60eb76b0dc3684d5f075139a6b021f2c9af162aca6753cd3180594776fab3e2eb20d92244fdee25e2fe69696892d4259516edc6bcb50b9c17204736f1f22ba89951763728efa8c5ebfb49d414334fb09abf996fe5acce831ace73e", 0x1000, 0x6}, {&(0x7f0000001440)="b8e3fb8edc7af62975712ee7e4f88bf98ffd69e0cff2b1eb165e109fa7c63322baf96203dbcd184c0e3c4d7f0dfbbe5cff93c596d508c640527bd19442bd93ad95c563ab123d3170c437b0c8f65d2b3b1da585e6a6cd325e87568c632ad6e1a0eadf3f9d7866ae83c01b356f1fced8fa32de9a9326a5174c1730e7742971a8eb284f75b9c06d66ff7b5ab33bf42ae566934db3f9794553f4381e32c1b7d9aab8719038ec88", 0xa5, 0x1}, {&(0x7f0000000100)="ff2b54b09c7b7f6e461eb3789dec8b5c8f80f2ff6fe9e73e3b67a51e0b3c8c6ca83185d65c77bd21564dcf8c079696220506428f7445570b2b21726a", 0x3c, 0x6}, {&(0x7f0000001500)="e26d0999da89b06ba715ba30d1d0ae880feedf732cdf4677d36d0f252596e74539ef85ef04090d20f5b2b1c20188943e46bd71a6720209299103e03b5667c8aec66f04dfbe8da3a341a7fb6cb5cae70461a8a9871a05137e5ff4a5d85c8fbeab3eb103e4bae10abfda6bd8c609efb36dc0e7c77cce83b18c64d39b5630a87606491889047a16fb39c32d9c0feb407e7c8f585c19d8e3a9f357f1df2c87fbb66e3dff2523a1c0be6851fdee", 0xab}], 0x4, &(0x7f0000000240)={[{@utf8no}, {@shortname_mixed}, {@utf8}, {@shortname_win95}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fowner_gt={'fowner>', 0xee01}}]}) openat(r4, &(0x7f00000015c0)='./file0\x00', 0x200000, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) 05:12:54 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x5520, 0x4, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x26f9, &(0x7f0000000080)={0x0, 0x246, 0x20, 0x3, 0x1ec, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r6 = syz_open_pts(r3, 0x2e4080) r7 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000340)={0x80000001, 0x0, &(0x7f0000000280)=[r3, r5, r3, r6, r7, r0]}, 0x6) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd=r0, 0x6, 0xfffffffffffffffe, 0x0, 0x17, 0x0, {0x3}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:12:54 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2494.252654] attempt to access beyond end of device [ 2494.252654] loop5: rw=2049, want=22, limit=15 [ 2494.254890] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2494.285736] attempt to access beyond end of device [ 2494.285736] loop5: rw=2049, want=23, limit=15 [ 2494.287728] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:12:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc000000}}, 0x1c) 05:12:54 executing program 7: r0 = syz_io_uring_setup(0x1040, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2494.329395] attempt to access beyond end of device [ 2494.329395] loop5: rw=2049, want=24, limit=15 [ 2494.331417] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2494.366705] attempt to access beyond end of device [ 2494.366705] loop5: rw=2049, want=25, limit=15 [ 2494.368116] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2494.370109] attempt to access beyond end of device [ 2494.370109] loop5: rw=2049, want=26, limit=15 [ 2494.371397] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2494.374639] attempt to access beyond end of device [ 2494.374639] loop5: rw=2049, want=27, limit=15 [ 2494.375869] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2494.380497] attempt to access beyond end of device [ 2494.380497] loop5: rw=2049, want=28, limit=15 [ 2494.381746] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2494.396787] attempt to access beyond end of device [ 2494.396787] loop5: rw=2049, want=148, limit=15 [ 2494.457575] attempt to access beyond end of device [ 2494.457575] loop5: rw=1, want=2044, limit=15 05:13:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80001100) 05:13:09 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec00000}}, 0x1c) 05:13:09 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(0xffffffffffffffff, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:09 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x0, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:13:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfe800000}}, 0x1c) 05:13:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)={0x8c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc4b2bdd8b662391b}, 0x4845) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, &(0x7f0000000880)={{'\x00', 0x1}, {0x80000001}, 0x28, 0x0, 0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)="1e979656d2b62ca82d09082a7e7357de4e273fb7c135c3f623a93d6a8527d8cf610e07e09d11b9863c62f2c36acddd4cd0ef6a0fd3a3d39016a5165748d7496396d920514f1b60b92031c5fb4d225ee40b9c6978600993ed81a5de754559d1f94e8ade4d1bd2d8881c87f46efcb4bc00164785cf7bd32e55b7c38568ccebcd82a8f2df52e911b19bce55cde6e60f9b483f3fc16a6e65c2a955ebc79f83fe3aa2c6a5a108c423391983eb70ef446d30e604ec608325aa39f8026009deecaa1f032df0ce1606e61cb13f9ecc9a054fb7a707e71f9c2beaf24b63fe953d47014a63523bf1a22b6fed3f3f0634884900eb03e56736ab4292ff0ef2a912c415439c51d050d3481443b7b818069924aa98c9140d655f3437de5a2cb5525d95812ed21ec806b273438c9a84cf0f7f08bfcc44a72614a99377bf225d0c5a4920a45a3fca", 0x140, 0x0, &(0x7f0000000740)={0x2, 0x102, {0x1, 0xc, 0xd3, "b5b7568712fde7ccfb93595d22857e0316ce119005907497da6b50cd664fce4439d1e4f43610148f8b5091ac71975bf08802430636efb904b96cb6324164d0832e4d03d0d145864f21cc9dca3d924ce413d4c20c5922c514f622425a74f330c5f61e6388c8c286f41a9fa5b7da06c38f5566dc2df4da74d5ef5ce587c1869c1b86abfd1dcf86d86bcba89054f0c398a7518973d31834c4f9b822b4e4deecd236b38000a0582283ff413febfb351cb84f356e864e3403651ed302c0e459c93581e1b8dcf0e5878ab3e0e13454d5abe57896a946", 0x22, "d262eb4373c2c9cd57fe90cb5d1ffe09af3d0a07c652a91de76ccf66f52abd700883"}, 0x2f, "4f79f922b9a308d719df906135fa732260f386e02345c771fcde11c2c0de7bea922aaf30d9b127301fd73b0e79e753"}, 0x13d}) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66476c657d9a"]) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000009c0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000b40)={0x248, 0x13, 0x300, 0x70bd29, 0x25dfdbff, {0xa, 0x3, 0x6, 0x1, {0x4e20, 0x4e24, [0xc, 0x10000, 0x28, 0xfffffffa], [0x605, 0x8000, 0x5, 0x101], 0x0, [0x101, 0x1f]}, 0xffff898e, 0xe}, [@INET_DIAG_REQ_BYTECODE={0x63, 0x1, "a8961f1b6b5d0212ac3b2dd8b7397859d4ac07ce0424d315db65407761ccdc033f4d49e24a579592a1d0b6066e92333c83531650f50a8951f739adc97273ae79622a99bfca88bd62aab1d422df90ae400644a5a8ef1ae126d0b3c552ccc117"}, @INET_DIAG_REQ_BYTECODE={0xbc, 0x1, "00610943bbc9bb3bb87c15001d53cc97fbc16a8787a8e5fffe5092372634f2ef5ef2bc5a15be90714f2b52c1f6a748ac739dadb87e58a01e8faa66089a22056d3494e5d0d38feb80c4e71d052da5698561f968b0ecd7e996bcfb82029adc146a54c71f2da5d95ce5e3f88e80ebf3fb7fd0d0bcd87af14b69d3a1b8555186c0284a624ce83e076520ef2db4288145d3b845f0db668e224e90215e5155c5e9af28a34f66fef004ff960c37aa92fea9f73bac45f63a141b4f20"}, @INET_DIAG_REQ_BYTECODE={0xab, 0x1, "2ab1bbe732ec70a261fc1b49413c49d0dd19c533134bb994eff2402c17f90ca3f476e225dfe41f81aadc91690727358cb8a1478b429eb195e190a846abb7d70460a4db0924f7a3dffac2669cdd5be81478810c6994e73fdb417bf32555fe02e701b684fcde6e1912014d17a69a87b80b26a71248855b53a696af514c46257a17fd846b4cfd6114f73592997bc42eab8e0670ae1bd52567a637e51b4c300b2cb2150a410e87b946"}, @INET_DIAG_REQ_BYTECODE={0x2e, 0x1, "6866839b700e6f528849cb10443c5ab49a1753d09d3e135d22e6511137b6844b18ebd441d179350b639e"}]}, 0x248}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer, 0x0) r5 = syz_io_uring_setup(0x6c9c, &(0x7f0000000080)={0x0, 0xc204, 0x4, 0x3, 0x20a, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32, @ANYBLOB='0\x00']) syz_io_uring_submit(r2, r6, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd_index=0x5, 0x6, 0x0, 0x0, 0x6, 0x1}, 0xffffff0f) r7 = accept(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000340)=0x80) getsockopt$sock_buf(r7, 0x1, 0x1f, &(0x7f0000000380)=""/170, &(0x7f0000000440)=0xaa) r8 = accept(0xffffffffffffffff, &(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000540)=0x80) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000dc0), 0x581000, 0x0) r10 = accept4$packet(r8, &(0x7f0000000e00), &(0x7f0000000e40)=0x14, 0x80000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f0000000e80)={{0x1, 0x1, 0x18, r10, {r5}}, './file0\x00'}) syz_io_uring_submit(r2, r3, &(0x7f0000000f80)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x2007, @fd_index=0x7, 0x5, &(0x7f0000000ec0)=""/174, 0xae, 0x8, 0x1}, 0x9cf) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:13:09 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) io_uring_enter(r0, 0x2dcf, 0xc3f4, 0x1, &(0x7f0000000080), 0x8) 05:13:09 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff000000}}, 0x1c) [ 2510.131210] attempt to access beyond end of device [ 2510.131210] loop5: rw=2049, want=21, limit=15 05:13:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec00000}}, 0x1c) [ 2510.204011] attempt to access beyond end of device [ 2510.204011] loop5: rw=2049, want=22, limit=15 [ 2510.206009] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2510.246218] attempt to access beyond end of device [ 2510.246218] loop5: rw=2049, want=23, limit=15 [ 2510.248194] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:13:10 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2510.292925] attempt to access beyond end of device [ 2510.292925] loop5: rw=2049, want=24, limit=15 [ 2510.295037] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:13:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff0f0000}}, 0x1c) 05:13:10 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="01000100000000002e2f66696c653000"]) syz_io_uring_setup(0x1727, &(0x7f00000000c0)={0x0, 0xf865, 0x20, 0x1, 0xa4, 0x0, r3}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) write$binfmt_script(r8, &(0x7f00000050c0)={'#! ', './file0', [{0x20, '/dev/full\x00'}, {0x20, '\x00'}, {0x20, '/'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '/dev/full\x00'}, {0x20, '-+*#,)%'}], 0xa, "3884cad28a017ddf9309563b5282569d738a867ed241052b59c96696c3b37e08c80af07877c7bc67c54079aebb610404ce780615b68a7cabf16d"}, 0x7d) recvmmsg$unix(r6, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/214, 0xd6}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000002780)=[{&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000014c0)=""/130, 0x82}, {&(0x7f0000001580)=""/34, 0x22}, {&(0x7f00000015c0)=""/91, 0x5b}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/45, 0x2d}, {&(0x7f0000002680)=""/233, 0xe9}], 0x7}}, {{&(0x7f0000002800), 0x6e, &(0x7f0000003b40)=[{&(0x7f0000002880)=""/198, 0xc6}, {&(0x7f0000002980)=""/45, 0x2d}, {&(0x7f00000029c0)=""/35, 0x23}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/35, 0x23}, {&(0x7f0000003a40)=""/210, 0xd2}], 0x6, &(0x7f0000003bc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x138}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000003d00)=""/69, 0x45}, {&(0x7f0000003d80)=""/189, 0xbd}, {&(0x7f0000003e40)=""/4096, 0x1000}, {&(0x7f0000004e40)=""/35, 0x23}], 0x4, &(0x7f00000051c0)=ANY=[@ANYBLOB="00020400008505ff3943f611673da222e1e16dad997ee009eeafcf421d706878585886496d0c5791719e0e468b311bf42d69f482b0f845ada26957c711590be25bb115a8b794d06be6be4edefab704bd0e6ab6485c11b7edfb53649320a41b714743a7e5f7d995fd44ec596f352796d77343cb3f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000010000000100"/20, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x90}}], 0x4, 0x40000022, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005140)=ANY=[@ANYBLOB="1c0000000002010100000000000000000000000004000380040002800ad0876b3e66e247d5999734d7a569b83546ca6a8b790eaf76edb4ea8dee796b611c9afce92c00a205dd41d95c2d3afea67ec3ae59a110"], 0x1c}}, 0x0) fcntl$dupfd(r9, 0x406, r12) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r10, r11, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r13, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r10, r4, &(0x7f0000005080)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2510.354840] attempt to access beyond end of device [ 2510.354840] loop5: rw=2049, want=25, limit=15 [ 2510.356911] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:13:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff000000}}, 0x1c) [ 2510.395141] attempt to access beyond end of device [ 2510.395141] loop5: rw=2049, want=26, limit=15 [ 2510.397160] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:13:10 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x2) [ 2510.443122] attempt to access beyond end of device [ 2510.443122] loop5: rw=2049, want=27, limit=15 [ 2510.445212] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2510.478915] attempt to access beyond end of device [ 2510.478915] loop5: rw=2049, want=28, limit=15 [ 2510.480864] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:13:10 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2510.523681] attempt to access beyond end of device [ 2510.523681] loop5: rw=2049, want=148, limit=15 [ 2510.754417] attempt to access beyond end of device [ 2510.754417] loop5: rw=1, want=2044, limit=15 05:13:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff0f0000}}, 0x1c) 05:13:26 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80004000) 05:13:26 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4ed2, &(0x7f0000000080)={0x0, 0x9339, 0x4, 0x3, 0x28d, 0x0, r0}, &(0x7f0000ff0000/0xf000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd=r0, 0x6c38, 0x0, 0x0, 0x10, 0x1, {0x2}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x200, 0x102) 05:13:26 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(0xffffffffffffffff, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffff91}}, 0x1c) 05:13:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r4, 0xd0009412, &(0x7f0000000340)={0x0, 0x1}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:13:26 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:26 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2526.889897] attempt to access beyond end of device [ 2526.889897] loop5: rw=2049, want=21, limit=15 05:13:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x6a41, 0x0, 0x0, 0x0, 0x0) [ 2526.959101] attempt to access beyond end of device [ 2526.959101] loop5: rw=2049, want=22, limit=15 [ 2526.961543] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:13:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfffffff5}}, 0x1c) 05:13:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfffffc00}}, 0x1c) [ 2527.001876] attempt to access beyond end of device [ 2527.001876] loop5: rw=2049, want=23, limit=15 [ 2527.003873] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2527.010720] attempt to access beyond end of device [ 2527.010720] loop5: rw=2049, want=24, limit=15 [ 2527.012651] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2527.018799] attempt to access beyond end of device [ 2527.018799] loop5: rw=2049, want=25, limit=15 [ 2527.020731] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2527.027617] attempt to access beyond end of device [ 2527.027617] loop5: rw=2049, want=26, limit=15 [ 2527.029692] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:13:26 executing program 7: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0xfffffffffffffffc) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x15, 0x1, {0x0, r3}}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2527.049146] attempt to access beyond end of device [ 2527.049146] loop5: rw=2049, want=27, limit=15 [ 2527.051169] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:13:26 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffff00}}, 0x1c) [ 2527.088140] attempt to access beyond end of device [ 2527.088140] loop5: rw=2049, want=28, limit=15 [ 2527.091910] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:13:26 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) syz_io_uring_setup(0x1352, &(0x7f0000000080)={0x0, 0xf1e7, 0x1, 0x0, 0x266, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000180)) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f0000000280)=""/35, 0x23}, {&(0x7f0000000c80)=""/52, 0x34}, {&(0x7f0000000440)=""/31, 0x1f}, {&(0x7f0000000480)=""/78, 0x4e}, {&(0x7f0000000500)=""/71, 0x47}, {&(0x7f0000000580)=""/149, 0x95}, {&(0x7f0000000640)=""/210, 0xd2}, {&(0x7f0000000740)=""/63, 0x3f}, {&(0x7f0000000780)=""/98, 0x62}], 0xa, 0x3, 0x20) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, &(0x7f0000000900)={0x5, 0xff, 0x3, 0x2, 0x9}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x2, 0x2007, @fd_index=0x6, 0x5, &(0x7f0000000bc0)=[{&(0x7f00000008c0)="f1f19b2360b2800faae78f3b93ffb5678e5177878a3edd56a55112", 0x1b}, {&(0x7f0000000c40)="b61bb3b051bcc36e41a06de85d5e05ac8495e9f15481eeb00818c92a3b743a1ee34f38c9eb7d", 0x26}, {&(0x7f0000000940)="f6b29cd1c70055a0729a33d06184ec2120bf14caf8e335a3395388f9775e1c127d5f20e441838c05052129dd9bef82854cd7427f94f1d7b7663e412da2f4f5f77f390d9481e1edc71343a30ca2a5bad5d76b9ac8463530d08ffa5323fa0f372c8119dac6cabe885ba505fb36d930e88a4117c515d019350ab43d1ed72965060767dfb17915e374c00f08a9e8d6c0d49d8cdfc06641b69e8e6b7e0d63c1834c35f227c78cda3beb512b", 0xa9}, {&(0x7f0000000a00)="9d320647287ed76a7fd2e23c7d22925a39208c9679d9b4809e42d627de797cb8da6a56c8080e5628622e25cbe8bce502cdfe65d4f23504be294f060413847355adaa65468d0b5b7c9c258c0e17123f87c2b827365d56823a6bc8a48e6a7d439d8a8e717cba9fbc1e982962282e266b6339bb917f8765c52dfd01444c6036581f1eebfde12cdadcbf1c462a57efff28c860de58b7d5e3c79f32baf8249d0bd439b7274a85e1a0a88be38f9945a1ecf45ef93d3105d21c81ddef74c8ced8c1c619295cc3a4ae4be5", 0xc7}, {&(0x7f0000000b00)="0e3fb2dded67b02eba198bbcb24d14fd3d4596adeae0fdb78bb0c7779403d03944bd173522a38999af312727fc03c41c94ff14789de225cb059d156045e918066a62804bb281169a934d766914e18f52b3b27cbc96f5bb2ffda088fa0a24ddf81eae466165b078d6aaae44aeef0349ce2c821d093d70e8e502b7eab11a210e7b7e", 0x81}], 0x5, 0x9, 0x0, {0x0, r5}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:13:26 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x100000000000000}}, 0x1c) [ 2527.131317] attempt to access beyond end of device [ 2527.131317] loop5: rw=2049, want=148, limit=15 [ 2527.340642] attempt to access beyond end of device [ 2527.340642] loop5: rw=1, want=2044, limit=15 05:13:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffff91}}, 0x1c) 05:13:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:41 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x25c6, &(0x7f0000000080)={0x0, 0xb355, 0x20, 0x0, 0x2cf}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ddc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0x3, 0x200, {0x0, r5}, 0x7fff, 0x9, 0x0, {0x0, 0x0, r3}}, 0xfffffff9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:13:41 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:13:41 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x200000000000000}}, 0x1c) 05:13:41 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x12, r1, 0x10000000) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x80010, 0xffffffffffffffff, 0x10000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xa, 0x1010, r1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, &(0x7f0000000400)="9dec878d220029f0a3e434acc8ab9b9e1c35819fe64985f8e9659f9f5fe06843ac2ae7e9caf547a7c8a0ae02b85f00239963d25228fe0ab7d7bec191af807ee23f813055246aab9a957296e2c345e84e37d37b1269919bc61825190f2af29d765a290184f25bd954c05d2239b21a731e0db042484e08513fc617d89d745ac7568e1c1460fa890c9d05ee03b7de5b22f926e207f9de25dce56e09015231cc4fef", 0x889, 0x0, 0x1, {0x2, r5}}, 0x4000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:13:41 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80004100) [ 2541.723803] attempt to access beyond end of device [ 2541.723803] loop5: rw=2049, want=21, limit=15 05:13:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfffffff5}}, 0x1c) 05:13:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x300000000000000}}, 0x1c) 05:13:41 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(r0, 0x674d, 0x1cde, 0x3, &(0x7f0000000240)={[0x4]}, 0x8) syz_io_uring_setup(0x31c9, &(0x7f0000000080)={0x0, 0x99ce, 0x0, 0x2, 0x292, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r3, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x1}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2541.828724] attempt to access beyond end of device [ 2541.828724] loop5: rw=2049, want=22, limit=15 05:13:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2541.830862] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2541.870791] attempt to access beyond end of device [ 2541.870791] loop5: rw=2049, want=23, limit=15 [ 2541.872933] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:13:41 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x3, 0x0, '\x00', [{0x6, 0xf97, 0x3ff, 0x2, 0x8, 0x8}, {0x6b87, 0x401, 0x9a46, 0x6, 0x4, 0x1}], ['\x00', '\x00', '\x00']}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2541.910228] attempt to access beyond end of device [ 2541.910228] loop5: rw=2049, want=24, limit=15 [ 2541.912301] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2541.949570] attempt to access beyond end of device [ 2541.949570] loop5: rw=2049, want=25, limit=15 [ 2541.951665] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:13:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x3000000000000}}, 0x1c) 05:13:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x400000000000000}}, 0x1c) [ 2541.987911] attempt to access beyond end of device [ 2541.987911] loop5: rw=2049, want=26, limit=15 [ 2541.990019] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:13:41 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000001980)={{0xa, 0x4e23, 0x80000000, @loopback, 0x2}, {0xa, 0x0, 0xc613, @mcast2, 0x6c}, 0x9361, [0x7, 0x7, 0x5, 0x2dff, 0x3f, 0x1, 0x3, 0x9]}, 0x5c) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = creat(&(0x7f00000018c0)='./file0\x00', 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000001900), &(0x7f0000001940)=0x30) epoll_wait(0xffffffffffffffff, &(0x7f0000001a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x9) syz_io_uring_setup(0x2f8a, &(0x7f0000000080)={0x0, 0x930f, 0x8, 0x0, 0xcd}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x5a2c, &(0x7f0000000240)={0x0, 0x2de8, 0x10, 0x3, 0x26, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x6000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001880)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r7, 0x0, &(0x7f0000001840)={&(0x7f0000000380)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/221, 0xdd}, {&(0x7f0000000600)=""/94, 0x5e}, {&(0x7f0000000680)=""/130, 0x82}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/124, 0x7c}], 0x6}, 0x0, 0x2, 0x0, {0x2, r8}}, 0xbd) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000001a40)) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r10, 0x400c6615, &(0x7f0000001a00)={0x0, @adiantum}) [ 2542.017068] attempt to access beyond end of device [ 2542.017068] loop5: rw=2049, want=27, limit=15 [ 2542.019231] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:13:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2542.047910] attempt to access beyond end of device [ 2542.047910] loop5: rw=2049, want=28, limit=15 [ 2542.050180] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2542.087868] attempt to access beyond end of device [ 2542.087868] loop5: rw=2049, want=148, limit=15 05:13:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x500000000000000}}, 0x1c) [ 2542.375602] attempt to access beyond end of device [ 2542.375602] loop5: rw=1, want=2044, limit=15 05:13:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5000000000000}}, 0x1c) 05:13:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:13:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x600000000000000}}, 0x1c) 05:13:56 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:13:56 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000080)={{r0}, 0x7, 0x25e, 0x7}) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000007, 0x100010, r4, 0x10000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r10 = socket(0x11, 0x3, 0x9) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r10, &(0x7f0000000080)={0x11, 0x0, r12}, 0x14) syz_io_uring_submit(0x0, r8, &(0x7f0000000280)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, r9, 0x80, &(0x7f0000000340)=@can={0x1d, r12}}, 0x7ff) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r13, r14+60000000}, 0x1, 0x1, 0x1, {0x0, r15}}, 0x40) syz_io_uring_submit(r1, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r15}}, 0x2) 05:13:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80008100) 05:13:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2556.330146] attempt to access beyond end of device [ 2556.330146] loop5: rw=2049, want=21, limit=15 05:13:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x700000000000000}}, 0x1c) 05:13:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x6000000000000}}, 0x1c) 05:13:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) close(0xffffffffffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:13:56 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2556.413528] attempt to access beyond end of device [ 2556.413528] loop5: rw=2049, want=22, limit=15 [ 2556.415637] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2556.419340] attempt to access beyond end of device [ 2556.419340] loop5: rw=2049, want=23, limit=15 [ 2556.421312] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2556.428837] attempt to access beyond end of device [ 2556.428837] loop5: rw=2049, want=24, limit=15 [ 2556.430833] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2556.438390] attempt to access beyond end of device [ 2556.438390] loop5: rw=2049, want=25, limit=15 [ 2556.440384] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2556.448671] attempt to access beyond end of device [ 2556.448671] loop5: rw=2049, want=26, limit=15 [ 2556.450689] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:13:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x7000000000000}}, 0x1c) [ 2556.482171] attempt to access beyond end of device [ 2556.482171] loop5: rw=2049, want=27, limit=15 [ 2556.484278] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2556.500890] attempt to access beyond end of device [ 2556.500890] loop5: rw=2049, want=28, limit=15 [ 2556.503016] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:13:56 executing program 2: r0 = syz_io_uring_setup(0x1a56, &(0x7f00000002c0)={0x0, 0xc0b0, 0x0, 0x3, 0x4c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000000c0)={0x1, 0xfffffffffffffffd, 0x9, &(0x7f0000000080)=""/9}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2556.525720] attempt to access beyond end of device [ 2556.525720] loop5: rw=2049, want=148, limit=15 05:13:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x800000000000000}}, 0x1c) 05:13:56 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r0}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000000c0)={0x3, 0x28, [0x8, 0x9, 0x7f, 0x20], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0]}) [ 2556.836039] attempt to access beyond end of device [ 2556.836039] loop5: rw=1, want=2044, limit=15 05:14:17 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:14:17 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:14:17 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:14:17 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) dup2(r3, r4) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:14:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe000000000000}}, 0x1c) 05:14:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe00000000000000}}, 0x1c) 05:14:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x5) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r4, 0x2769, 0x0, 0x3, 0x0, 0xfffffffffffffe51) 05:14:17 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) fchmodat(r2, &(0x7f0000000000)='./file0\x00', 0x190) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:14:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1802000000000000}}, 0x1c) [ 2577.502892] attempt to access beyond end of device [ 2577.502892] loop5: rw=2049, want=21, limit=15 05:14:17 executing program 7: r0 = syz_io_uring_setup(0x13b1, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x8, 0x3, &(0x7f0000000340)="7adadd508ea5adaf6b63f6ca0adbb43980b057084e0963d4bba677e9870652b8dd79036dec82dfbff55648e2648e9098c5a2277693a875089a464f7ec927238a1e9f463e509a3641647f8b91b4086825274fea430b1916bda9452822a9f5a59ee2b8c73de210c191525e263c2b46853d2f656a5e82779ba3c3ffc956da31db1508a6d235bb396c21030396e481f4a40efba128bcc0cbb6289bad5aeb9f2556845332e604fb8e17d9857e5e313d6d5a33c00bc9569d59f995d27ca69007bf080f816738e002c94aa501792669c88a1853e9e703c0f7c2af0bd6c6e6", 0x3, 0x0, 0x0, {0x1}}, 0x3f) 05:14:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x40000000000000}}, 0x1c) [ 2577.603513] attempt to access beyond end of device [ 2577.603513] loop5: rw=2049, want=22, limit=15 [ 2577.605498] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2577.610401] attempt to access beyond end of device [ 2577.610401] loop5: rw=2049, want=23, limit=15 [ 2577.612392] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2577.621448] attempt to access beyond end of device [ 2577.621448] loop5: rw=2049, want=24, limit=15 [ 2577.623446] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2577.632800] attempt to access beyond end of device [ 2577.632800] loop5: rw=2049, want=25, limit=15 [ 2577.634838] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2577.671151] attempt to access beyond end of device [ 2577.671151] loop5: rw=2049, want=26, limit=15 [ 2577.673498] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:14:17 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x8000000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x2, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x1, {0x0, r8}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2577.714827] attempt to access beyond end of device [ 2577.714827] loop5: rw=2049, want=27, limit=15 [ 2577.717299] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:14:17 executing program 7: r0 = syz_io_uring_setup(0x5c80, &(0x7f00000002c0)={0x0, 0x0, 0x2, 0xfffffffd, 0x2e4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}, 0x101) 05:14:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2001001000000000}}, 0x1c) [ 2577.757191] attempt to access beyond end of device [ 2577.757191] loop5: rw=2049, want=28, limit=15 [ 2577.759800] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2577.792203] attempt to access beyond end of device [ 2577.792203] loop5: rw=2049, want=148, limit=15 05:14:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x50000000000000}}, 0x1c) [ 2578.102013] attempt to access beyond end of device [ 2578.102013] loop5: rw=1, want=2044, limit=15 05:14:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:14:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:14:33 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = getpgrp(0x0) tgkill(r4, r4, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x9, 0x7, 0x3, 0x7f, 0x0, 0x100, 0x40, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x40a80, 0xfffffffffffff800, 0x5, 0x5, 0x5, 0x7, 0x3f, 0x0, 0x1, 0x0, 0x8}, r4, 0xe, r3, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:14:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfcffff00000000}}, 0x1c) 05:14:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x2002000000000000}}, 0x1c) 05:14:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) setxattr$incfs_id(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:14:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x0, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2593.574924] attempt to access beyond end of device [ 2593.574924] loop5: rw=2049, want=21, limit=15 05:14:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffff00000000}}, 0x1c) 05:14:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000000000000000}}, 0x1c) 05:14:33 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1800000, 0x1010, r0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/firmware/memmap', 0x1, 0x10) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r5, 0x1b54, 0xc3bf, 0x1, &(0x7f0000000080)={[0xe6f3]}, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) sync_file_range(0xffffffffffffffff, 0xae, 0x511fd1b6, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000340)=ANY=[@ANYBLOB="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"/4168], 0x1048) r6 = eventfd(0x42) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r8 = pidfd_open(0xffffffffffffffff, 0x0) poll(&(0x7f00000000c0)=[{r6, 0x7}, {r1, 0x10}, {r7, 0xc125}, {r8, 0x2000}], 0x4, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2593.693956] attempt to access beyond end of device [ 2593.693956] loop5: rw=2049, want=22, limit=15 [ 2593.696014] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:14:33 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup(0x65d3, &(0x7f0000000080)={0x0, 0xa64a, 0x8, 0x1, 0x2fc, 0x0, r0}) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2593.725191] attempt to access beyond end of device [ 2593.725191] loop5: rw=2049, want=23, limit=15 [ 2593.727496] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2593.752425] attempt to access beyond end of device [ 2593.752425] loop5: rw=2049, want=24, limit=15 [ 2593.754742] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:14:33 executing program 2: r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000180)=""/98, 0x62}], 0x2, 0xc1, 0x4) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r4, 0x0, 0x0, 0x401, 0x1}, 0x59) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2593.803922] attempt to access beyond end of device [ 2593.803922] loop5: rw=2049, want=25, limit=15 [ 2593.806071] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:14:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x100000000000000}}, 0x1c) 05:14:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4002000000000000}}, 0x1c) [ 2593.860844] attempt to access beyond end of device [ 2593.860844] loop5: rw=2049, want=26, limit=15 [ 2593.863059] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2593.909499] attempt to access beyond end of device [ 2593.909499] loop5: rw=2049, want=27, limit=15 [ 2593.911740] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:14:33 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2004, @fd_index=0x4, 0x2, 0x0, 0x0, 0xa, 0x1, {0x3}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2593.946448] attempt to access beyond end of device [ 2593.946448] loop5: rw=2049, want=28, limit=15 [ 2593.948483] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2593.986617] attempt to access beyond end of device [ 2593.986617] loop5: rw=2049, want=148, limit=15 [ 2594.273214] attempt to access beyond end of device [ 2594.273214] loop5: rw=1, want=2044, limit=15 05:14:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x200000000000000}}, 0x1c) 05:14:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, 0xffffffffffffffff, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:14:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x0, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:14:48 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x8010, r0, 0x8000000) r5 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r6, r7, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0x7ff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:14:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5000000000000000}}, 0x1c) 05:14:48 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = accept$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) tee(r4, r5, 0x100000001, 0x4) 05:14:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x408401, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0x1) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:14:48 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:14:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x91ffffff00000000}}, 0x1c) [ 2608.922479] attempt to access beyond end of device [ 2608.922479] loop5: rw=2049, want=21, limit=15 05:14:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x300000000000000}}, 0x1c) 05:14:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x9aad79c100000000}}, 0x1c) 05:14:48 executing program 7: r0 = syz_io_uring_setup(0x4d50, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:14:48 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x501003, 0xc0) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x22602, 0x0) pwritev(r5, &(0x7f00000001c0)=[{&(0x7f00000000c0)="6f5a076f0e26c60afeea192e2496a318004387f5ebc74efc2353e0fe5b8d883f2e3e11b3323103e984d6a691510348b2fa8a6da43c596ba92184038bb2a63b4bca0df55859d8631d7885df5756ad840d31cd2e11fa43fc25121986eadd52b501f3bbc4d925a121a8a9da", 0x6a}, {&(0x7f0000000340)="e0484b4651f0596c2af70c1e7f03c329d8e82c2142e20a5abba74228856a79c8ce03a7d97ab9020c52399154fd5b820f143a84f671504e4fd922e6343bb0cfa024b1a2f8da3d34ee2989955b74dce3ccfc408e57e669d7feac309dcbb3d42b2abfd2b2104570f6d02d1d59afa07ad1215cf5cc230ceff24fed65b2161000c0ac9492d059d47ab21b2a4ff2", 0x8b}, {&(0x7f0000000180)="053f56af712bff85001d242e26a7f71d5e5ef44723f828ffb725008ff9de3de350e8e3ef6d37a5a48ccc75a5b8a97fea1fa047075b80fe18be5a", 0x3a}, {&(0x7f0000000400)="940b7597931d4b9132cd5fe1b852de9038035d2326995632875071b4cc7da15b40b0f3faf60174e67cac8c5975865637a249fc14ca10c0b17e6a2f15f119a30cbc56e4e75a4ccb8d457b1f05ff653b86d6e5c52583c6672fa5b36e5a8e895d337946fd067d246c3498f1901ed0ecef77b2a17cb89d9398e29ca3e30468ed504dc9d640dd40a24063ac29883473951f9bd13d82a3d9d9d12853", 0x99}], 0x4, 0x5, 0x9) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/191, 0xbf}], 0x1, 0xfffffeff, 0x948) [ 2608.985226] attempt to access beyond end of device [ 2608.985226] loop5: rw=2049, want=22, limit=15 [ 2608.987246] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2608.994528] attempt to access beyond end of device [ 2608.994528] loop5: rw=2049, want=23, limit=15 [ 2608.996554] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2609.006563] attempt to access beyond end of device [ 2609.006563] loop5: rw=2049, want=24, limit=15 [ 2609.008512] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2609.037048] attempt to access beyond end of device [ 2609.037048] loop5: rw=2049, want=25, limit=15 [ 2609.039011] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2609.068099] attempt to access beyond end of device [ 2609.068099] loop5: rw=2049, want=26, limit=15 [ 2609.070082] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:14:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x400000000000000}}, 0x1c) [ 2609.100298] attempt to access beyond end of device [ 2609.100298] loop5: rw=2049, want=27, limit=15 [ 2609.102250] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2609.133820] attempt to access beyond end of device [ 2609.133820] loop5: rw=2049, want=28, limit=15 [ 2609.135736] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2609.163906] attempt to access beyond end of device [ 2609.163906] loop5: rw=2049, want=148, limit=15 05:14:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf5ffffff00000000}}, 0x1c) [ 2609.442284] attempt to access beyond end of device [ 2609.442284] loop5: rw=1, want=2044, limit=15 05:15:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x500000000000000}}, 0x1c) 05:15:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:15:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:15:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc00000000000000}}, 0x1c) 05:15:06 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:15:06 executing program 7: r0 = syz_io_uring_setup(0x4d52, &(0x7f0000001bc0)={0x0, 0x8, 0x4, 0x0, 0xfffffffd}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000001b80)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0xfffffffd, 0x8, 0x0, 0xa7, 0x0, 0x0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r5, 0x89fb, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x1, 0x40, @local, @loopback, 0x10, 0x20, 0x6, 0x1}}) syz_io_uring_submit(r3, r4, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001a40)=0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0xfff, 0xa, &(0x7f0000001940)=[{&(0x7f00000003c0)="e60faf2bf8fe8bae71789a59e9f0e42ffeecea9184cf06410b28f564abf50c0f20644af2e6ea4a2122ad80ee61076989a2a4bb40bce714101f0f5555858a85bae10e02703b8ee75e1df52429722238dbfe5d734d03dda99222", 0x59, 0x3f}, {&(0x7f0000000440)="54eee327fd15f183492409b097c083085e9cfa48853ecb3dfb80fb70a884f598de84d17ccf05dc59cfd93a5a1d8ef0e011aba7c9c368a0b37fe6c683d51b5b7c9a0c4a9d382515b6cfac2a36d556b2d34574359ced150a266f7aa59d7050d3a321b0a960", 0x64, 0x1000}, {&(0x7f00000004c0)="53da9994514381dc1394930ec88220ca596cad596a5e4bc035717c57c3941c7cdc0a2b4ef0d57df97b6f5a23356824a99ba0edc662c51720bf2fec17e943e0a4732ebade487fc6fe87913ffc84de1db757a0d0054d3fa28723e9aff3dbe0", 0x5e, 0x9}, {&(0x7f00000005c0)="0834e56d46accbac0d5f631116baacfc09463a3bcefd2f08d8d892b391f7bdb4fe65c78d83e57c6c5c0381379c1dbb7213dd8a37184240a75c2d34df1011adbe29c8f479f6fbcab8b9c93f55e29a375ebaf8e33593ad4f96540df784ec1c16d77909f3bed159b5f924e56a4734b9c451a24b66fde2b31ebee3c6fe49653c9c5ec36ddc92e0e46cd3a9992fba313cf3e0394f0577bbd1b9e413", 0x99, 0x200}, {&(0x7f0000000540)="0c7a07008dfda23993c42f6fe87794448bab651c2f1264e5cb17ebeb54fe3c4c0da7cf40baae3dd60ba4f3cfab83b279", 0x30, 0x7}, {&(0x7f0000000680)="a93f6e4bafb232217de260648b2d17e2b3d385ebd4d8fe5e68b2d8fcc65442f13c8d03559f56b48617754cb2efa07202c0956aa63b126b25f44a7b26518bdb5910f7dbb4465a78ad8270febc7d363e787f3278c24122b6b3891339061e3e655d41327f2486af3f411a1e95600ea6ec9c683d55435a0393a973e9162776e92bc02352e2f99ddbf345ce090345e803d420dac8d892ef8c5265606711b3f682281c5cc168a5a807c82f4bdd8889616c3bd2c50cc6aeb92a8086c083ce1529097684415ab3c38fd9ed28be8ed0b5b751b455bc88642d751646d03236e8d3d7d9c858c0c8", 0xe2, 0x8}, {&(0x7f0000000780)="ac2b5fe402f5963900279386f89f9b7471225d9fede4e4132dbe773943e020a08e730ed83bed7353fa13116d5f5b92e9ac22b542ccb2b44107ae1f7f251c803b7c476b0a8fd663bc96fab1af0ab5ff464de7c80ab2358f", 0x57, 0x1000}, {&(0x7f0000000800)="6fb9d54a87f3ff02ac97c97ba91f90ce419febd367791f1df36033a18aa27c", 0x1f, 0x400}, {&(0x7f0000000840)="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", 0x1000, 0x1}, {&(0x7f0000001840)="2d8e7642fafa58ff62f4664bb267aa8ef282ac99d7c512bc512f689803b8900ca54137c931d064e5988b6402b47458505ebbb0a904ecda29d323b6b796000f637f498f402f39b6152fde42fc12d112b231914da7e756a0a1ab060eb22e6b3d0b79d9e3f68c404d3ebc3e357d7e8bfb86bc2f1e62bb54637dea762cc80aa27b4c34ebde824b33870eb090b17653c0f840384ead1993efa59eb381c3931e62f43583dd57fa19a497cf2da2884c3c5f8bbc6a2f462ad2dde6abd00350fdc3b180831d", 0xc1}], 0x1000, &(0x7f0000001c40)=ANY=[@ANYBLOB="6e6f61636c2c666f776e65723d3fa78f3c5a04883bc389940d7416b2232dce0ac0d2428d3b6d5fb558364af866c29df67db654fc2d56f0c9e3e279ba04dc4b8d6221f5ae897531edd4a8facca266d11023f9e4038b6553d29ab3352a8f0c1f8f0212ec7bd91ca660eecaf859b4d3aed7fb87ee0b4c09e30fb26ac86b8a5b6a4aad7c61153e97cbd54bb81a6724a7f5ab37945dbebfacc47313d2d6b484ae5dac55115a1ad8ba7860bf5d30c8726fd4ec6f61dee6c969f02e", @ANYRESDEC=r6, @ANYBLOB=',fsmagic=0x0000000042da485f,fowner=', @ANYRESDEC=0xee01, @ANYBLOB="2c736d61636b6673666c6f6f723d2f6465762f66756c6c002c7063723d30303030303030303030303030303030303035342c6f626a5f747970653d73797a746e6c30002c66736d616769633d3078303030303030303030303030303030302c736d61636b6673666c6f6f723d2de6262a5ec0292d212c7375626a5f757365723d73797a746e6c30002c00"]) syz_io_uring_submit(r1, r4, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)={0xa4202, 0x1, 0x1}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x75) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:15:06 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x525242, 0x8d) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="2b000017000000002e2f0100000030"], 0x10) syz_open_dev$vcsa(&(0x7f0000000180), 0xabcd, 0x8000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ftruncate(r1, 0x4001f) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80000001) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendfile(r0, r4, &(0x7f0000000280)=0x80000000, 0x1) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 05:15:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x0, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:15:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfe80000000000000}}, 0x1c) 05:15:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x600000000000000}}, 0x1c) 05:15:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0000000000000}}, 0x1c) 05:15:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1947, &(0x7f0000000080)={0x0, 0x183b, 0x20, 0x2, 0x96}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) syz_io_uring_setup(0x1243, &(0x7f0000000240)={0x0, 0xc6fe, 0x0, 0x1, 0x279}, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x4) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:15:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xfffffffffffffdf9, 0x17, 0x2, {0x7, './file2'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000180), &(0x7f00000001c0)={'U+', 0x1}, 0x16, 0x2) 05:15:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 05:15:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x700000000000000}}, 0x1c) 05:15:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000000c0)={0xfffffffffffffffb, 0x10, '\x00', 0x0, &(0x7f0000000080)=[0x0, 0x0]}) 05:15:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff0f000000000000}}, 0x1c) [ 2628.382494] FAT-fs (loop5): Unrecognized mount option "./file2" or missing value 05:15:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffffff00000000}}, 0x1c) 05:15:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x800000000000000}}, 0x1c) 05:15:25 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:15:25 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) stat(&(0x7f00000001c0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x2e, 0xff, 0x9, 0x8, 0x0, 0x2, 0xc4020, 0xa, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_config_ext={0x32c, 0x1000}, 0x80, 0xc1, 0x4, 0x3, 0x7fff, 0x9, 0x8, 0x0, 0x2a, 0x0, 0x1}, 0xffffffffffffffff, 0x101, 0xffffffffffffffff, 0x3) setresuid(0xffffffffffffffff, r3, 0x0) keyctl$join(0x1, 0x0) keyctl$read(0x12, 0x0, 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in=@loopback, 0x4e21, 0x4, 0x4e24, 0x400, 0xa, 0x80, 0x80, 0x62, r5, r3}, {0x4a, 0x0, 0x2, 0x7, 0x200, 0x8, 0x100, 0x7}, {0x7ff, 0x2, 0x3, 0x6}, 0x4f9, 0x6e6bbc, 0x0, 0x1, 0x1, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0xff}, 0x2, @in=@private=0xa010100, 0x0, 0x4, 0x1, 0x2c, 0x2, 0x2, 0xfffffff9}}, 0xe8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:15:25 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:15:25 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:15:25 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r2, r3+60000000}, 0x1, 0x1, 0x1, {0x0, r4}}, 0x40) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000004, 0x80010, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2, r6}}, 0x20) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:15:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) mount$9p_tcp(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1200002, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d30b668dd5b50fe4ae45bdb6f8fe7452d3778303030303030303030303030346532342c6163636573733d636c69656e742c6c6f6f73652c63616368653d6c6f6f73652c616669643d3078303030303030303038303030303030302c76657273696f6e3d3970323030302e752c6c6f6f73652c6163636573733d636c69656e742c76657273696f6e3d3970323030302e752c6d"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/class/mac80211_hwsim', 0x0, 0x111) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) openat(r3, &(0x7f0000000240)='./file0\x00', 0x200, 0x20) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa6, 0x600000000000000) openat(r2, &(0x7f00000001c0)='./file1\x00', 0x248801, 0x20) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000540)=ANY=[@ANYBLOB="080000000065e24e9ea45019e839eba600"/27]) write$P9_RREADLINK(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="100000d917000007002e6766696c65308f9950a7ede7b3ba810000001ce7ab86140318beef2bbd76949826817caf9d91092d1b"], 0x10) ftruncate(r1, 0x1000003) r4 = getpgrp(0x0) tgkill(r4, r4, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) perf_event_open(&(0x7f0000000300)={0x4, 0x80, 0x3, 0x20, 0x80, 0x5, 0x0, 0x3f, 0xa413e, 0x10, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x203f, 0x4, @perf_config_ext={0x1, 0x103}, 0x1000, 0x6f, 0x6, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x31c, 0x0, 0x9b}, r4, 0xb, r5, 0x792473ac172c9cf1) sendfile(r0, r1, 0x0, 0x80000001) [ 2645.641241] attempt to access beyond end of device [ 2645.641241] loop5: rw=2049, want=21, limit=15 05:15:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c) 05:15:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe00000000000000}}, 0x1c) [ 2645.701026] attempt to access beyond end of device [ 2645.701026] loop5: rw=2049, want=22, limit=15 [ 2645.702791] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2645.716084] attempt to access beyond end of device [ 2645.716084] loop5: rw=2049, want=23, limit=15 [ 2645.718003] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2645.757474] attempt to access beyond end of device 05:15:25 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat2(r3, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x200, 0x44, 0x8}, 0x18) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x29, 0xf9, 0x2, 0x4, 0x56, @loopback, @loopback, 0x1, 0x700, 0x80000000, 0x400}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="00012bbd7000fcdbdf25040000008000018008000300010000000800030000000000140002006970766c616e31000000000000000000140002006970766c616e3100000000000000000008000100dc70de4c6c1d312bcd4f1add3cb5cd56d5d5640d87f23607217638981fb1e28bb131d97c13be76778891a6", @ANYRES32=r6, @ANYBLOB="140002006e657470636930000000000000000000140002006e7230000000000000000000000000001400020069703665727370616e30000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2645.757474] loop5: rw=2049, want=24, limit=15 [ 2645.759548] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2645.778486] attempt to access beyond end of device [ 2645.778486] loop5: rw=2049, want=25, limit=15 [ 2645.780543] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2645.790212] attempt to access beyond end of device [ 2645.790212] loop5: rw=2049, want=26, limit=15 [ 2645.792283] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2645.824419] attempt to access beyond end of device [ 2645.824419] loop5: rw=2049, want=27, limit=15 [ 2645.826651] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:15:25 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/iommu', 0x101040, 0x111) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) io_uring_enter(r8, 0x2149, 0x0, 0x2, 0x0, 0x1e) [ 2645.848094] attempt to access beyond end of device [ 2645.848094] loop5: rw=2049, want=28, limit=15 [ 2645.850307] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2645.864747] attempt to access beyond end of device [ 2645.864747] loop5: rw=2049, want=148, limit=15 [ 2645.893261] 9pnet: p9_fd_create_tcp (14321): problem connecting socket to 127.0.0.1 05:15:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x1802000000000000}}, 0x1c) 05:15:25 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1d54, &(0x7f0000000080)={0x0, 0xd799, 0x0, 0x2, 0x295, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000001c0)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd_index=0xa, 0x0, 0x7fff, 0x3, 0x5, 0x1, {0x1, r5}}, 0x6) renameat2(r3, &(0x7f0000000240)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00', 0x9) 05:15:25 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2645.974407] attempt to access beyond end of device [ 2645.974407] loop5: rw=1, want=2044, limit=15 05:15:25 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000000240)='./file1\x00', 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000180)="ac6b90ff7ace6779761c54af2ffa4167bd6aeb13e3aca5a1a7da88ff2e3643cfee053e5ce0e257496f38cd9d3fdc3762c0ffd55e7ca60771f97b82eb614a04f184f9fe2a7f220bedbffc4a47146f37bf9343a466bc9e8e85cb7f1c09b6db7e") 05:15:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x28b703b700000000}}, 0x1c) 05:15:25 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2646.267883] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2646.269672] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2646.277464] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:15:43 executing program 7: r0 = syz_io_uring_setup(0x10004d4f, &(0x7f00000002c0)={0x0, 0xbca7}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x3ffc, 0x0, 0x0, 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x50000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x2000}) 05:15:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x3}}, 0x1c) 05:15:43 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x401203, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x36) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000174b11476c6530"], 0x10) sendfile(r0, r1, 0x0, 0x80000001) 05:15:43 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:15:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4000000000000000}}, 0x1c) 05:15:43 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000e, 0x40010, r0, 0x0) syz_io_uring_submit(r3, r1, &(0x7f00000000c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x40}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x10000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r7, r8+60000000}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x40) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r6, 0x7fffffff, {0x0, r0}, 0x7f, 0x8, 0x1, {0x0, r9, r0}}, 0x101) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r10, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r10, 0x798e, 0x74d7, 0x1, &(0x7f0000000080)={[0x73]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:15:43 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:15:43 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0x0, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:15:43 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0xaaaaaaaaaaaac2d, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r2, 0x1000003) sendfile(r1, r2, 0x0, 0x80000001) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000300)={0x0, 0x0, "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", "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"}) 05:15:43 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x8000000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r7, r8+60000000}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x40) syz_io_uring_submit(r3, r5, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r9}}, 0x0) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r10}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:15:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x4002000000000000}}, 0x1c) 05:15:44 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x4010, r0, 0x10000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd_index=0x5, 0x2, 0x0, 0x101, 0x5, 0x0, {0x0, r6}}, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:15:44 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) readahead(r0, 0xff, 0xb65) syz_io_uring_setup(0x21, &(0x7f0000000340)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x1}, 0x6) syz_io_uring_setup(0x4e0a, &(0x7f0000000180)={0x0, 0x3d83, 0x28, 0x1, 0x197}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f00000000c0), &(0x7f0000000280)) 05:15:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x5000000000000000}}, 0x1c) [ 2681.391810] netlink: 'syz-executor.7': attribute type 16 has an invalid length. 05:16:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) 05:16:01 executing program 2: r0 = syz_io_uring_setup(0x5adf, &(0x7f00000002c0)={0x0, 0x0, 0x4, 0x0, 0x28f}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000001500)="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") syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x1, 0xfffffffffffff987, &(0x7f0000000180)=[{&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000001440)=""/150, 0x96}], 0x5, 0x1e, 0x1, {0x0, r3}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:01 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x4}}, 0x1c) 05:16:01 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(0xffffffffffffffff, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:16:01 executing program 7: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x406e2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000010000000000000000000000000005000000000000000c00008008001000", @ANYRES32=r1, @ANYBLOB="5dc07f5882428b8bd1bf4c5d06f04fe9295d791481adc131040127d140d0e99c9353d6f4044c4f9ed3f18bfe7dc5bab1eb8b715681cda47f106ff7b46f944c9c612bf95996681ee5dfd08d38775905f2f2ac589c2242eaf951bb"], 0x28}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1001, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', r3, 0x4, 0x85, 0x52, 0x0, 0x24, @empty, @mcast2, 0x1, 0x80, 0x402, 0xa273}}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x2, 0x0, 0x1004, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x91ffffff00000000}}, 0x1c) 05:16:01 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:16:01 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2681.439759] handle_bad_sector: 10 callbacks suppressed [ 2681.439779] attempt to access beyond end of device [ 2681.439779] loop5: rw=2049, want=21, limit=15 05:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe3c28c3f00000000}}, 0x1c) [ 2681.498680] netlink: 'syz-executor.7': attribute type 16 has an invalid length. [ 2681.526375] attempt to access beyond end of device [ 2681.526375] loop5: rw=2049, want=22, limit=15 [ 2681.527610] buffer_io_error: 4 callbacks suppressed [ 2681.527619] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2681.562147] attempt to access beyond end of device [ 2681.562147] loop5: rw=2049, want=485, limit=15 [ 2681.563904] attempt to access beyond end of device [ 2681.563904] loop5: rw=2049, want=23, limit=15 [ 2681.565368] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2681.585738] attempt to access beyond end of device [ 2681.585738] loop5: rw=2049, want=24, limit=15 [ 2681.586913] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:16:01 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r6, r7+60000000}, 0x1, 0x1, 0x1, {0x0, r8}}, 0x40) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r9, 0x0, r10, 0x0, 0xa1, 0x600000000000000) syz_io_uring_setup(0x5307, &(0x7f0000000600)={0x0, 0xa72b, 0x20, 0x2, 0x16, 0x0, r10}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000240), &(0x7f0000000580)) syz_io_uring_setup(0x6de8, &(0x7f0000000340)={0x0, 0x800d, 0x8, 0x0, 0x1d, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000280)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r1, r12, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000400)='./file0\x00', 0x75, 0x100, 0x12345, {0x0, r8}}, 0xb4df) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5, 0x4000, @fd=r3, 0x5, 0x0, 0x0, 0x0, 0x1, {0x3, r8}}, 0x10000) syz_io_uring_setup(0x3fa1, &(0x7f0000000480)={0x0, 0xae0e, 0x8, 0x2, 0xc3, 0x0, r3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000500), &(0x7f0000000540)=0x0) syz_io_uring_submit(r11, r13, &(0x7f00000005c0)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfe) 05:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xe803000000000000}}, 0x1c) [ 2681.613815] attempt to access beyond end of device [ 2681.613815] loop5: rw=2049, want=25, limit=15 [ 2681.615866] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2681.642458] attempt to access beyond end of device [ 2681.642458] loop5: rw=2049, want=26, limit=15 [ 2681.644557] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:16:01 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0xff, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x93, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r5, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000008, 0x20010, r4, 0x0) [ 2681.678428] attempt to access beyond end of device [ 2681.678428] loop5: rw=2049, want=27, limit=15 [ 2681.680614] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf401000000000000}}, 0x1c) [ 2681.710431] attempt to access beyond end of device [ 2681.710431] loop5: rw=2049, want=28, limit=15 [ 2681.712527] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:16:01 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x1, "c51fa3cc6083d174ce5df5c2a97586ca83d3b34ea2ac312349eb5fa22313912e78336dc05368c58d1cbf20701453eb7788be4ab0c7d1b4908043de8822eda51b1457c74f7ecfea7462710a0ba24309cfe954aede858bede90676bcae497a93143f9a103fcc3b8d256d44e5729429216c2fd59409dd99b3739efce5f22d93"}, 0x80) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2681.753720] attempt to access beyond end of device [ 2681.753720] loop5: rw=2049, want=148, limit=15 05:16:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xf5ffffff00000000}}, 0x1c) 05:16:17 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x5}}, 0x1c) 05:16:17 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001800), 0x200082, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x4}, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='memory.swap.max\x00', 0x2, 0x0) r5 = timerfd_create(0x2, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0xb, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) eventfd2(0xffffffff, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001400)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000002080)={{}, r6, 0x2, @inherit={0x50, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x0, {0x22, 0xc66, 0x7fffffff, 0x7f, 0x6}, [0x9]}}, @devid=r10}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r4, 0x50009418, &(0x7f0000000400)={{r0}, r6, 0x2, @inherit={0x90, &(0x7f0000000340)={0x0, 0x9, 0x2, 0x1ff, {0x30, 0x2, 0xa3, 0x5}, [0x10000, 0x8, 0x7fffffff, 0xed, 0x1, 0x6, 0x3, 0x5, 0x6]}}, @subvolid=0x800}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e24, 0x1, @loopback, 0x20}, 0x1c) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xffff, 0x2, &(0x7f0000000340)="a2c1db7c51d95fb94dfb675886171fd7b72feee2ff9ca359e4ccb8011fdf81d6466ca6c380ec155a30fbf348a2154b57af222ccd9ac0df0737cda8985b1692e7b2db756f250521272cfc6c5420aae909fed162f380d643d34cca111cac3ad7f5e087701b418de051b7b53c5258292c668efcb1e128819c89db5fc7d7fa9e130ba2ca72a923c13584f3618fe1f3e5438ac6d2bd08f4f0493bfc13c6d2f9ed069ba389530eabbbab3d68adf4ab5d5ea7bfba724e53c043cb59e0f718e157fcdb0dbdc669a06680b1174928bb79ab2ed12c5b72297fc1305739ad24b38f8768713bd27ecdd2502122cb924302c06f8128", 0x4, 0x0, 0x1, {0x3, r8}}, 0x83fe) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0xffffff01, 0x2, &(0x7f0000000440)="fa9c849218dd5bfdbb0afb1de282307ec65d1826d880ab774fe543747b2d40e2c1594eada481846b3b4e623171ae5babba23867238d5512e065927e2a866ea942c87cee7b01d36d7a83fcbd4c5c583ace2b82401aa1ec7eb57874eb334ffdffb90ae7a1d92ef3bdbd9ac9d08c8a06a4782a7a9aa260089fe69db13b3e8728bb7c8da00356f2471e66e864a1aa37ec1860c26dfda7c3141bcbcb41352ea9a5aed9a3720bb0d60e2e64f2557ad7ed5480f512bfa35f934847fc6d8d8307f1d30b27fa45e5abac75523fe43161297c6efbad61cf5fbd956f7b5a40d6c9fb0e97051c71314a0fbdd0efe12302b87bedc01440c94f6bdc4", 0x0, 0x0, 0x1, {0x0, r8}}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfc00000000000000}}, 0x1c) 05:16:17 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470000000f8018a063273719c6df0e031b93fe2317159a52573b71f26fdcb3720f4db78619d9b94840d6457dd2d1fde9b51f3690009f7ba4a82e0606642e7df0d1946e122a7a7b197dd6906175d", 0x5e}, {0x0, 0x0, 0xf21}], 0x820002, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4050, r0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x77359400}, 0x1, 0x1, 0x0, {0x0, r4}}, 0x3) ftruncate(r2, 0x1000003) sendfile(r1, r2, 0x0, 0x80000001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x6) 05:16:17 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:16:17 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(0xffffffffffffffff, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:16:17 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080), 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2697.351561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14554 comm=syz-executor.2 [ 2697.386833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14554 comm=syz-executor.2 05:16:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfe80000000000000}}, 0x1c) 05:16:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x1b8f, 0x0, 0xfffffffc, 0x29c}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x218041, 0x0) ioctl$SCSI_IOCTL_SYNC(r4, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:17 executing program 2: prctl$PR_GET_NAME(0x10, &(0x7f0000000340)=""/142) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0xe4b3367c461d4210, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f00000000c0)) readahead(r4, 0xfffffffffffff336, 0x3f) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xfec0000000000000}}, 0x1c) 05:16:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c) 05:16:17 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x417d, &(0x7f0000000080)={0x0, 0x8379, 0x2, 0x2, 0x237, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000180)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r3, 0x0, &(0x7f0000000340)="fec8d0828334e21de813062f4a1302feea0202a1c62aedfec91592806b947fbe3a2e10feb0377298cbbd45a42e391541ca23aa4fb1d5a8fd5a57de35df94240a36a89726fb7cfafca0716b4ec3775721e8175f36f40c9bbc662c98e88398337a02ff73593e8aa589a7c50dceb28e365d1d2260cd67ef82a3d29abd6a829350ee125d470b3eb0e0f59bcd119edb0588d61ee2706c3c55d86f4e17710b8d6f026624d1a25a4c80fdf96314932bee4eb4933f3cc2ed8a2d2e88813483296a168797e134e26d00897f955fbb6b31f161d62b461997c2e62abaf868cdb41f398b144106f320326b365ad3f3c15c0fa1f3cf58", 0xf0, 0x2048001, 0x0, {0x0, r5}}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff0f000000000000}}, 0x1c) 05:16:17 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r5, r6, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r7, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x6e2, &(0x7f0000000400)={0x0, 0x2e6f, 0x20, 0x2, 0x39b, 0x0, r4}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000000340), &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r8, &(0x7f00000003c0)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x15, 0x1}, 0x1) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r9, 0x0, r10, 0x0, 0xa1, 0x600000000000000) openat(r9, &(0x7f00000001c0)='./file0\x00', 0x107000, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="01040b04", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf25040000000a000900aaaaaaaaaaaa000008003b00070000000500300000000000050035005c0000000800310000000000"], 0x40}, 0x1, 0x0, 0x0, 0x24044800}, 0x20008010) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:36 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x6}}, 0x1c) 05:16:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xffffffff00000000}}, 0x1c) 05:16:36 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(0xffffffffffffffff, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:16:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080), 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:16:36 executing program 2: r0 = syz_io_uring_setup(0x4d4e, &(0x7f00000002c0)={0x0, 0xaf83}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r0, 0x1509, 0xb48f, 0x1, &(0x7f0000000080)={[0x6]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x210600, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:16:36 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000017000007122e2f66696c6530"], 0x10) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x81}}, './file0\x00'}) openat(r2, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) ftruncate(r1, 0x1000003) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1010430, 0x0) sendfile(r0, r1, 0x0, 0x80000001) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) write$P9_RREADLINK(r4, &(0x7f0000000580)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 05:16:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x2}}, 0x1c) [ 2716.614397] handle_bad_sector: 2 callbacks suppressed [ 2716.614414] attempt to access beyond end of device [ 2716.614414] loop5: rw=2049, want=21, limit=15 05:16:36 executing program 2: r0 = syz_io_uring_setup(0xec6, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000280)={r7, r8+60000000}, 0x1, 0x0, 0x1}, 0x7fffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r9 = syz_io_uring_complete(r1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r10, r11+60000000}, 0x1, 0x1, 0x1, {0x0, r12}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r9, 0x80, &(0x7f0000000080)=@xdp={0x2c, 0x8, 0x0, 0x3b}, 0x0, 0x0, 0x1, {0x0, r12}}, 0x1000) [ 2716.689082] attempt to access beyond end of device [ 2716.689082] loop5: rw=2049, want=22, limit=15 [ 2716.691249] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2716.694942] attempt to access beyond end of device [ 2716.694942] loop5: rw=2049, want=23, limit=15 [ 2716.696957] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2716.699842] attempt to access beyond end of device [ 2716.699842] loop5: rw=2049, want=24, limit=15 [ 2716.702034] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2716.711550] attempt to access beyond end of device [ 2716.711550] loop5: rw=2049, want=25, limit=15 [ 2716.713587] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2716.717770] attempt to access beyond end of device [ 2716.717770] loop5: rw=2049, want=26, limit=15 [ 2716.719785] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2716.728842] attempt to access beyond end of device [ 2716.728842] loop5: rw=2049, want=27, limit=15 [ 2716.730940] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:16:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r7, 0xaf5e, {}, 0x5, 0x0, 0x0, {0x0, 0x0, r8}}, 0x6d5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2716.755685] attempt to access beyond end of device [ 2716.755685] loop5: rw=2049, want=28, limit=15 [ 2716.757734] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2716.793644] attempt to access beyond end of device [ 2716.793644] loop5: rw=2049, want=148, limit=15 05:16:36 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x8}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x85e4}, {0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x4, [0x5e, 0x5, 0x7fffffff, 0xedf, 0x101, 0xff, 0x9, 0x7]}, 0x5c) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000080)={0x20800, 0x100}, &(0x7f00000000c0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r10}}, 0xc9d) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:36 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000080)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10120, 0x1, {0x2}}, 0x8001) sendmsg(r3, &(0x7f0000000280)={&(0x7f00000000c0)=@phonet={0x23, 0x1f, 0x7f, 0x6}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="bb32f2779ffb19542614f1ba0a7d6cac8d389cafeef9c86b7ea16fd00199ee784b4c125d897f2130c3b1345c6a8e3f8d8fd45ed64b754d9f42a325ab4874adbd384bc8b44f90d367d03a3aec2073230adaede8809ca14b44a05c36b503086d0d483947593417abd9571bb1ae90b29e3a95ccdba938213de0e380386539", 0x7d}], 0x1, &(0x7f0000000340)=[{0x40, 0x84, 0x6, "b09ef71154639317bc72b186d03724b8282aeffec139235e173cee0de0639d17c3c2ca22a8589186245a"}, {0xa0, 0x101, 0x7, "a78aa8f4e76da7747aae323e629927f2e1c8b007775970eda2faf753e1dd57a8ed266f5332788d5873a8544537162d99b60f63f8d929db5221151959ab8b32920f126a4ee7d2ab42d8939e3e5b2a56e10dd7a134fc1b3b45ae971586308bf6436fe99c47acedf53ff1478b8ebb37b4bc81257af23a58e7c49eb60300dd9bf504a200205f451524f5c6"}], 0xe0}, 0x6bf7fafa6e6f228a) 05:16:36 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000005, 0x4010, r3, 0x8000000) syz_io_uring_setup(0x4f3, &(0x7f0000000240)={0x0, 0xf05b, 0x2, 0x3, 0x26a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) r6 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x6) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x2000, @fd=r6, 0x0, 0x8, 0x0, 0x10, 0x1, {0x3}}, 0x0) r7 = openat$cgroup_ro(r3, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = syz_open_pts(r3, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f0000000100)={0x7fffffff, 0x0, &(0x7f00000000c0)=[r0, r0, r3, r8, r9, r0]}, 0x6) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 05:16:36 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup(0x65d3, &(0x7f0000000080)={0x0, 0xa64a, 0x8, 0x1, 0x2fc, 0x0, r0}) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2717.201588] attempt to access beyond end of device [ 2717.201588] loop5: rw=1, want=2044, limit=15 05:16:53 executing program 2: ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, &(0x7f00000000c0)="1cfa8aab173072b6b8c47e181f8f38cb545addf1a3a82963b32b33e5759e4a3a986146091fa184ffec949ae3e1d5ad734d3b23ed7f7361e9de0db1bff39ba916434b95fde78b3fbacf94c42531beeb9c110bdc2c1df51fbc31a34ad428c04d5d72160f7b784d862574400837d2f3060cc4ad11e2") r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x329}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x65041, 0x0) ioctl$TIOCSBRK(r3, 0x5427) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:53 executing program 7: syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x4, 0x0, 0xfffffffe, 0x1ae}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58a7, 0x0, 0x0, 0x0, 0x0) 05:16:53 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:16:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file1'}}, 0x10) ftruncate(r0, 0x1000003) 05:16:53 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:16:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x3}}, 0x1c) 05:16:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) 05:16:53 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080), 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:16:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f0000000280)={'vcan0\x00', {0x2, 0x0, @private}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xa005302}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r5, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x53}}}}, [@NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ibss_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x16, 0x7e, @random="a099547c04fcfc312fc84b1eadbcfc327e71"}]}, 0x70}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) 05:16:53 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x7b2f, &(0x7f0000000080)={0x0, 0x7c69, 0x10, 0x1, 0xd7, 0x0, r3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r7, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x3, 0x2004, @fd_index, 0x47, &(0x7f00000001c0)="b3ddde8af2955c1e26d31361c57fbe6e694f4075980947f98b8a3963a1b1", 0x1e, 0x6, 0x1}, 0x10001) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x61d0, &(0x7f0000000080)={0x0, 0x809f, 0x8, 0x1, 0x165, 0x0, r3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r7, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x3}, 0x101) 05:16:53 executing program 4: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000395) 05:16:53 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x61, 0x0) openat(r2, &(0x7f0000000500)='./file2\x00', 0x307001, 0x30) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000008000201010000000000fbffced2ac89b56300000000000004"], 0x1c}}, 0x0) r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000540)='./file0\x00', r5, r6) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x2801409, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_user}, {@version_u}, {@mmap}, {@cache_loose}, {@cache_mmap}, {@dfltgid={'dfltgid', 0x3d, r6}}, {@privport}, {@posixacl}], [{@euid_gt={'euid>', r7}}, {@euid_gt={'euid>', 0xffffffffffffffff}}]}}) 05:16:53 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r3, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x1c4, &(0x7f0000000080)=0x7ff, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:16:53 executing program 2: r0 = syz_io_uring_setup(0x4d4e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffe, 0x80}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x164, 0x37, 0x300, 0x3f, 0x25dfdbfe, {0x1c}, [@typed={0xa2, 0x6b, 0x0, 0x0, @binary="2ad4d40a929bfd2c4028f5a20e8bea2c178040abcfe2c2d43194733657a54348c614d91664d80538aac22ca14b98cc1a330d2bb6d4a24c84db0fcb433fb4dd474f9d57198b2fb039f78db4bc9d310b20d69691120832396f7f7f8b0c1a5ce81c7327a05c77062281042428aa582782cc93e76fcef180f76e330ecc942046489ce07178e7379f110f7cb2e7236ec8344675337cfb96d8811221408e7ff219"}, @typed={0x8, 0x7d, 0x0, 0x0, @fd=r0}, @typed={0xe, 0x71, 0x0, 0x0, @str='/dev/full\x00'}, @generic="3041011d1449d1053fbd747bc90f760b2f846284cdc369fb063c8df8f3cba4a82d732d925e9cd4c8358be1ec4191bcaf1ca40a90e66eeb5432ed744c64ffe7bdf7a6250672ae648a6b9933d0297d2fb787a29ff649c000d2c64a1d9d0b420b30cf6b22073935d970b7262a7f9654420bf0726b250d2cc59c182538834cf6a87936579e61f735395f50c8e40d41a7227addbdd0"]}, 0x164}, 0x1, 0x0, 0x0, 0x20000000}, 0x48014) [ 2733.912527] attempt to access beyond end of device [ 2733.912527] loop4: rw=2049, want=21, limit=15 [ 2733.946287] attempt to access beyond end of device [ 2733.946287] loop5: rw=2049, want=21, limit=15 [ 2733.991577] attempt to access beyond end of device [ 2733.991577] loop4: rw=2049, want=22, limit=15 [ 2733.993708] Buffer I/O error on dev loop4, logical block 21, lost async page write [ 2734.002962] attempt to access beyond end of device [ 2734.002962] loop5: rw=2049, want=22, limit=15 [ 2734.005187] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2734.031350] attempt to access beyond end of device [ 2734.031350] loop5: rw=2049, want=23, limit=15 [ 2734.033502] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2734.058700] attempt to access beyond end of device [ 2734.058700] loop4: rw=2049, want=23, limit=15 [ 2734.060760] Buffer I/O error on dev loop4, logical block 22, lost async page write [ 2734.083306] attempt to access beyond end of device [ 2734.083306] loop5: rw=2049, want=24, limit=15 [ 2734.085327] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2734.093496] attempt to access beyond end of device [ 2734.093496] loop4: rw=2049, want=24, limit=15 [ 2734.095613] Buffer I/O error on dev loop4, logical block 23, lost async page write [ 2734.113259] attempt to access beyond end of device [ 2734.113259] loop5: rw=2049, want=25, limit=15 [ 2734.115246] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2734.121740] attempt to access beyond end of device [ 2734.121740] loop4: rw=2049, want=25, limit=15 [ 2734.123737] Buffer I/O error on dev loop4, logical block 24, lost async page write [ 2734.140223] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2734.150779] Buffer I/O error on dev loop4, logical block 25, lost async page write 05:17:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f0000000300)={0x0, 0xfb, 0x65, 0x2, 0x8, "72c0ba0afbd8416c06e24521891b21cc", "6cd5b68b16e4ab38bf43c547f782046915033f77e2fceb6066d4779187f773cbb5d763883b08c9e412ebf55b4b0d682e64de96d8abedd3fc4913116a88f31e2388cfb8c7d2e97cff58aed80057251c53"}, 0x65, 0x0) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:17:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:17:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 05:17:07 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:17:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x4}}, 0x1c) [ 2747.632803] FAULT_INJECTION: forcing a failure. [ 2747.632803] name failslab, interval 1, probability 0, space 0, times 0 [ 2747.634022] CPU: 1 PID: 14773 Comm: syz-executor.4 Not tainted 5.10.167 #1 [ 2747.634719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2747.635550] Call Trace: [ 2747.635826] dump_stack+0x107/0x167 [ 2747.636202] should_fail.cold+0x5/0xa [ 2747.636593] should_failslab+0x5/0x20 [ 2747.636985] kmem_cache_alloc_bulk+0x4b/0x320 [ 2747.637444] io_submit_sqes+0x707f/0x86a0 [ 2747.637880] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2747.638384] __do_sys_io_uring_enter+0xdaa/0x1c00 05:17:07 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:17:07 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2747.638878] ? lock_downgrade+0x6d0/0x6d0 [ 2747.639505] ? find_held_lock+0x2c/0x110 [ 2747.639920] ? io_submit_sqes+0x86a0/0x86a0 [ 2747.640364] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2747.640863] ? wait_for_completion_io+0x270/0x270 [ 2747.641353] ? rcu_read_lock_any_held+0x75/0xa0 [ 2747.641828] ? vfs_write+0x354/0xa30 [ 2747.642208] ? fput_many+0x2f/0x1a0 [ 2747.642577] ? ksys_write+0x1a9/0x260 [ 2747.642967] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2747.643499] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2747.644023] do_syscall_64+0x33/0x40 [ 2747.644401] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2747.644923] RIP: 0033:0x7f0015714b19 [ 2747.645304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2747.647244] RSP: 002b:00007f0012c8a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2747.648032] RAX: ffffffffffffffda RBX: 00007f0015827f60 RCX: 00007f0015714b19 [ 2747.648787] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2747.649532] RBP: 00007f0012c8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2747.650273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2747.651029] R13: 00007ffcec59abff R14: 00007f0012c8a300 R15: 0000000000022000 [ 2747.668825] handle_bad_sector: 10 callbacks suppressed [ 2747.668848] attempt to access beyond end of device [ 2747.668848] loop5: rw=2049, want=21, limit=15 [ 2747.744518] attempt to access beyond end of device [ 2747.744518] loop5: rw=2049, want=22, limit=15 [ 2747.745581] buffer_io_error: 4 callbacks suppressed [ 2747.745589] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2747.774649] attempt to access beyond end of device [ 2747.774649] loop5: rw=2049, want=23, limit=15 [ 2747.776760] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2747.778681] attempt to access beyond end of device [ 2747.778681] loop5: rw=2049, want=24, limit=15 [ 2747.780788] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2747.782628] attempt to access beyond end of device [ 2747.782628] loop5: rw=2049, want=25, limit=15 [ 2747.784621] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2747.786469] attempt to access beyond end of device [ 2747.786469] loop5: rw=2049, want=26, limit=15 [ 2747.788454] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2747.790228] attempt to access beyond end of device [ 2747.790228] loop5: rw=2049, want=27, limit=15 [ 2747.792203] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2747.793894] attempt to access beyond end of device [ 2747.793894] loop5: rw=2049, want=28, limit=15 [ 2747.795836] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2747.797692] attempt to access beyond end of device [ 2747.797692] loop5: rw=2049, want=148, limit=15 05:17:07 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r7, r8+60000000}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x40) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x20) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:07 executing program 2: keyctl$link(0x8, 0x0, 0x0) r0 = syz_io_uring_setup(0x4d50, &(0x7f00000002c0)={0x0, 0x2bfd, 0x10, 0x3, 0xad}, &(0x7f0000bfd000/0x400000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x6000, @fd=r3, 0x4, &(0x7f0000000180)=[{&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000080)=""/189, 0xf0}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, 0x4, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000240)={0xfffffffffffff6d4, 0x7, 0x2, 0x67, 0x1, [{0x400, 0x3, 0x20, '\x00', 0x888}]}) [ 2747.951109] attempt to access beyond end of device [ 2747.951109] loop5: rw=1, want=2044, limit=15 05:17:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101200, 0x102) sendfile(r0, r1, 0x0, 0x80000001) 05:17:07 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2748.016864] FAULT_INJECTION: forcing a failure. [ 2748.016864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2748.018392] CPU: 1 PID: 14809 Comm: syz-executor.4 Not tainted 5.10.167 #1 [ 2748.019285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.020340] Call Trace: [ 2748.020644] dump_stack+0x107/0x167 [ 2748.021127] should_fail.cold+0x5/0xa [ 2748.021621] __alloc_pages_nodemask+0x182/0x680 [ 2748.022224] ? __alloc_pages_slowpath.constprop.0+0x2220/0x2220 [ 2748.023000] alloc_pages_current+0x187/0x280 [ 2748.023568] allocate_slab+0x26f/0x380 [ 2748.024074] ___slab_alloc+0x470/0x700 [ 2748.024578] ? io_submit_sqes+0x707f/0x86a0 [ 2748.025149] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 2748.025755] kmem_cache_alloc_bulk+0x1ec/0x320 [ 2748.026276] io_submit_sqes+0x707f/0x86a0 [ 2748.026827] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2748.027462] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2748.028083] ? lock_downgrade+0x6d0/0x6d0 [ 2748.028617] ? find_held_lock+0x2c/0x110 [ 2748.029155] ? io_submit_sqes+0x86a0/0x86a0 [ 2748.029712] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2748.030332] ? wait_for_completion_io+0x270/0x270 [ 2748.030951] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.031463] ? vfs_write+0x354/0xa30 [ 2748.031951] ? fput_many+0x2f/0x1a0 [ 2748.032428] ? ksys_write+0x1a9/0x260 [ 2748.032936] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.033608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.034284] do_syscall_64+0x33/0x40 [ 2748.034759] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2748.035389] RIP: 0033:0x7f0015714b19 [ 2748.035782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.037690] RSP: 002b:00007f0012c8a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2748.038486] RAX: ffffffffffffffda RBX: 00007f0015827f60 RCX: 00007f0015714b19 [ 2748.039268] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2748.040032] RBP: 00007f0012c8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.040806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.041546] R13: 00007ffcec59abff R14: 00007f0012c8a300 R15: 0000000000022000 05:17:07 executing program 7: pipe2(0x0, 0x0) pipe2(0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000001340)=""/91, 0x5b) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1248}, 0x1, 0x0, 0x0, 0x48804}, 0x20000040) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r0, 0x10, 0x8000, 0x20) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, r5}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e80)=ANY=[@ANYBLOB="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"], 0x10a0}, 0x1, 0x0, 0x0, 0x20000841}, 0x40014) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0xff, 0x7, 0x0) sendmsg$nl_generic(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={0x0, 0x224}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) io_uring_setup(0x5473, &(0x7f00000000c0)={0x0, 0x7ba4, 0x3a, 0x1, 0x1c0, 0x0, r0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x20, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) syz_genetlink_get_family_id$nbd(&(0x7f0000001500), 0xffffffffffffffff) [ 2748.107880] netlink: 4648 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2748.142865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14811 comm=syz-executor.7 05:17:07 executing program 2: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0x40, 0x5, 0x1, @remote, @mcast1, 0x7800, 0x1, 0x3, 0x81}}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000800}, 0x20000010) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = socket(0x1, 0x2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, &(0x7f0000018580)={0x0, 0x989680}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0xb8, 0x0, 0x935, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x21, 0xff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x74, 0x20, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x1f, 0x7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x1e, 0x1}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044841}, 0x4048000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = dup2(r6, r5) accept4$inet6(r7, 0x0, &(0x7f00000002c0), 0x400) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r7, 0xc0189372, &(0x7f0000000440)=ANY=[@ANYBLOB="b8c54309df43146a9cd3ecfba176bf56d9adb20c970b2365e1ebc5e93bad30e6c9693897e48aeecb3c8f2ec6b59153d9db322cf88436ec8842e21d5668c0afd36162c538a4f69c366b2bbfddfc000000000000000000004b56e9e58dd47914cd6efea35048285b6c1f6452e3bde2fe9decd4d40037082387b0f582ad02c651e3332a3b17f2aefa496d95fcb0912484f397ec39bf01005a0c33ef959197137c4fb172e8bc8db081d7bab60e0f845a488e16acc52f885de2eff3f63b6ca8233e2ef6f8d8804a9164ee6aad98d8aa4e5cff2d7c283eeaeedea9f2e8f5a97cba220b7d0a4448a4cf8dd1bbe800c339c329c64ce8c50b55386e7c8946aabc32fc496607d485d6534c50a0f852ace1824181c42167047f949dc59844745f9454ddee795550f02084342fe5a6a967253ef95151bb8c784958fda20d97a8f4d3eaf910641f8d5d30b5b3e60c05fee54ac2fa3b4380784672746cf62b8841654071d5e57a47b7ef7c4c3a39c068c5e413455ced21446cbc33addfaf2ce020490d4b119be6bcc7ecc401eb977544f2a15d4c0fefe20729d54414e0c6f49bff229e", @ANYRESHEX, @ANYRESHEX=r4, @ANYBLOB="dac34ab955b04236b123cc374b4b7d47cf172326a06e19b2b74d21cb3b56139a9a1060d61fdeb8f9941c3b61c7ea9959766da39c4581ac86cfcaa0eb18ab5a79a67108680149f98c0a40f602735695034513d186d3e4bdaf82290738d8f1058eb8cbc44376544fddb3", @ANYRESDEC, @ANYRES64]) r8 = syz_genetlink_get_family_id$batadv(0x0, r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="000427bd010000000800390002000000"], 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x14050880) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r8, 0x1, 0x70bd28, 0x4c, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) flock(r10, 0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2748.249465] netlink: 4648 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2748.253641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14825 comm=syz-executor.7 05:17:08 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:17:08 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:17:08 executing program 2: recvmmsg$unix(0xffffffffffffffff, &(0x7f00000046c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001700)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000180)=""/1, 0x1}, {&(0x7f0000000240)=""/65, 0x41}, {&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000000440)=""/198, 0xc6}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000001540)=""/170, 0xaa}, {&(0x7f0000001600)=""/230, 0xe6}], 0x9, &(0x7f00000017c0)=ANY=[@ANYBLOB="1c0000000000000059258df56fedaa52", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x88}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001900)=""/131, 0x83}], 0x1, &(0x7f0000001a00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001a40), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001ac0)=""/72, 0x48}, {&(0x7f0000001b40)=""/169, 0xa9}, {&(0x7f0000001c00)=""/96, 0x60}, {&(0x7f0000001c80)=""/22, 0x16}, {&(0x7f0000001cc0)=""/205, 0xcd}], 0x5, &(0x7f0000001e40)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50}}, {{&(0x7f0000001ec0), 0x6e, &(0x7f0000002200)=[{&(0x7f0000001f40)=""/107, 0x6b}, {&(0x7f0000001fc0)=""/169, 0xa9}, {&(0x7f0000002080)=""/158, 0x9e}, {&(0x7f0000002140)=""/178, 0xb2}], 0x4, &(0x7f0000002240)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000002340), 0x6e, &(0x7f0000002900)=[{&(0x7f00000023c0)=""/137, 0x89}, {&(0x7f0000002480)=""/225, 0xe1}, {&(0x7f0000002580)=""/175, 0xaf}, {&(0x7f0000002640)=""/63, 0x3f}, {&(0x7f0000002680)=""/30, 0x1e}, {&(0x7f00000026c0)=""/74, 0x4a}, {&(0x7f0000002740)=""/156, 0x9c}, {&(0x7f0000002800)=""/244, 0xf4}], 0x8, &(0x7f0000002980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x138}}, {{&(0x7f0000002ac0)=@abs, 0x6e, &(0x7f0000002d00), 0x0, &(0x7f0000002d40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{0x0, 0x0, &(0x7f0000003440), 0x0, &(0x7f0000003500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f00000035c0), 0x6e, &(0x7f0000003a80)=[{&(0x7f0000003640)=""/142, 0x8e}, {&(0x7f0000003700)=""/172, 0xac}, {&(0x7f00000037c0)=""/36, 0x24}, {&(0x7f0000003800)=""/179, 0xb3}, {&(0x7f00000038c0)=""/99, 0x63}, {&(0x7f0000003940)=""/213, 0xd5}, {&(0x7f0000003a40)=""/38, 0x26}], 0x7, &(0x7f0000003b00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003b80)=""/144, 0x90}, {&(0x7f0000003c40)=""/52, 0x34}, {&(0x7f0000003c80)=""/50, 0x32}, {&(0x7f0000003cc0)=""/169, 0xa9}], 0x4, &(0x7f0000003dc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x1b0}}, {{&(0x7f0000003f80)=@abs, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004000)=""/208, 0xd0}, {&(0x7f0000004100)}, {&(0x7f0000004140)=""/7, 0x7}, {&(0x7f0000004180)=""/129, 0x81}, {&(0x7f0000004240)=""/138, 0x8a}, {&(0x7f0000004300)=""/252, 0xfc}, {&(0x7f0000004400)=""/147, 0x93}, {&(0x7f00000044c0)=""/141, 0x8d}, {&(0x7f0000004580)=""/61, 0x3d}], 0x9, &(0x7f0000004680)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0xa, 0x2022, &(0x7f0000004940)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000004980)=""/252) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5489, &(0x7f0000004a80)={0x0, 0x32df, 0x2, 0x2, 0x2d5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000004100), &(0x7f0000004b00)) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2748.309928] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2748.312596] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2748.315222] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:17:08 executing program 7: pipe2(0x0, 0x0) pipe2(0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000001340)=""/91, 0x5b) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0x1248}, 0x1, 0x0, 0x0, 0x48804}, 0x20000040) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r0, 0x10, 0x8000, 0x20) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, r5}) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002e80)=ANY=[@ANYBLOB="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"], 0x10a0}, 0x1, 0x0, 0x0, 0x20000841}, 0x40014) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0xff, 0x7, 0x0) sendmsg$nl_generic(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={0x0, 0x224}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) io_uring_setup(0x5473, &(0x7f00000000c0)={0x0, 0x7ba4, 0x3a, 0x1, 0x1c0, 0x0, r0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x20, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) syz_genetlink_get_family_id$nbd(&(0x7f0000001500), 0xffffffffffffffff) [ 2748.363168] FAULT_INJECTION: forcing a failure. [ 2748.363168] name failslab, interval 1, probability 0, space 0, times 0 [ 2748.364398] CPU: 1 PID: 14834 Comm: syz-executor.4 Not tainted 5.10.167 #1 [ 2748.365093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2748.365907] Call Trace: [ 2748.366182] dump_stack+0x107/0x167 [ 2748.366553] should_fail.cold+0x5/0xa [ 2748.366937] ? create_object.isra.0+0x3a/0xa20 [ 2748.367396] should_failslab+0x5/0x20 [ 2748.367777] kmem_cache_alloc+0x5b/0x360 [ 2748.368183] ? mark_held_locks+0x9e/0xe0 [ 2748.368588] create_object.isra.0+0x3a/0xa20 [ 2748.369051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2748.369566] kmem_cache_alloc_bulk+0x168/0x320 [ 2748.370031] io_submit_sqes+0x707f/0x86a0 [ 2748.370294] netlink: 4648 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2748.370465] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2748.370475] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2748.370495] ? lock_downgrade+0x6d0/0x6d0 [ 2748.373752] ? find_held_lock+0x2c/0x110 [ 2748.374186] ? io_submit_sqes+0x86a0/0x86a0 [ 2748.374652] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2748.375179] ? wait_for_completion_io+0x270/0x270 [ 2748.375715] ? rcu_read_lock_any_held+0x75/0xa0 [ 2748.376219] ? vfs_write+0x354/0xa30 [ 2748.376629] ? fput_many+0x2f/0x1a0 [ 2748.377036] ? ksys_write+0x1a9/0x260 [ 2748.377475] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2748.378070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2748.378641] do_syscall_64+0x33/0x40 [ 2748.379055] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2748.379628] RIP: 0033:0x7f0015714b19 [ 2748.380041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2748.382091] RSP: 002b:00007f0012c8a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2748.382936] RAX: ffffffffffffffda RBX: 00007f0015827f60 RCX: 00007f0015714b19 [ 2748.383736] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2748.384507] RBP: 00007f0012c8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2748.385301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2748.386073] R13: 00007ffcec59abff R14: 00007f0012c8a300 R15: 0000000000022000 [ 2748.404307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14839 comm=syz-executor.7 05:17:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:17:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) fstatfs(r3, &(0x7f0000000340)=""/4096) sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x80000001) 05:17:22 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x92dd}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) syz_mount_image$nfs4(&(0x7f00000000c0), &(0x7f00000002c0)='./file1\x00', 0x5, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000380)={[{'{%!&,'}], [{@appraise_type}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@subj_type={'subj_type', 0x3d, '-%}-/.\x06!}'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@hash}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept4$unix(r0, &(0x7f0000000140)=@abs, &(0x7f0000000080)=0x6e, 0x800) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000300)) write(r1, &(0x7f0000000240)="01", 0x1) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x10) sendfile(0xffffffffffffffff, r0, 0x0, 0x20d315) 05:17:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x5}}, 0x1c) 05:17:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x9}}, 0x1c) 05:17:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:17:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2763.260745] FAULT_INJECTION: forcing a failure. [ 2763.260745] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.262567] CPU: 0 PID: 14883 Comm: syz-executor.4 Not tainted 5.10.167 #1 [ 2763.263464] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2763.264540] Call Trace: [ 2763.264913] dump_stack+0x107/0x167 [ 2763.265405] should_fail.cold+0x5/0xa [ 2763.265913] ? create_object.isra.0+0x3a/0xa20 [ 2763.266404] FAT-fs (loop5): bogus number of reserved sectors [ 2763.266523] should_failslab+0x5/0x20 [ 2763.267739] FAT-fs (loop5): Can't find a valid FAT filesystem [ 2763.268177] kmem_cache_alloc+0x5b/0x360 [ 2763.268191] ? mark_held_locks+0x9e/0xe0 [ 2763.268207] create_object.isra.0+0x3a/0xa20 [ 2763.268226] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2763.271760] kmem_cache_alloc_bulk+0x168/0x320 [ 2763.272380] io_submit_sqes+0x707f/0x86a0 [ 2763.272965] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2763.273620] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2763.274270] ? lock_downgrade+0x6d0/0x6d0 [ 2763.274828] ? find_held_lock+0x2c/0x110 [ 2763.275377] ? io_submit_sqes+0x86a0/0x86a0 [ 2763.275975] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2763.276635] ? wait_for_completion_io+0x270/0x270 [ 2763.277294] ? rcu_read_lock_any_held+0x75/0xa0 [ 2763.277919] ? vfs_write+0x354/0xa30 [ 2763.278432] ? fput_many+0x2f/0x1a0 [ 2763.278933] ? ksys_write+0x1a9/0x260 [ 2763.279450] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2763.280143] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2763.280835] do_syscall_64+0x33/0x40 [ 2763.281339] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2763.282030] RIP: 0033:0x7f0015714b19 [ 2763.282530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.285063] RSP: 002b:00007f0012c8a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2763.286103] RAX: ffffffffffffffda RBX: 00007f0015827f60 RCX: 00007f0015714b19 [ 2763.287067] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2763.288042] RBP: 00007f0012c8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2763.289016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2763.289979] R13: 00007ffcec59abff R14: 00007f0012c8a300 R15: 0000000000022000 [ 2763.293813] EXT4-fs error (device loop7): ext4_fill_super:4960: inode #2: comm syz-executor.7: iget: root inode unallocated [ 2763.306415] EXT4-fs (loop7): get root inode failed [ 2763.307581] EXT4-fs (loop7): mount failed 05:17:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:23 executing program 7: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000100), 0x4d76, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) sendto$unix(r0, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58eddec84dec8efe1fb2c1df98e1f36291c7c57338ee45921643c9569bc", 0x4995b5922abe4152, 0x840, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = semget$private(0x0, 0x2, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001580)=ANY=[@ANYBLOB="1c000000000201016f51d5a7000000000000000004000380040002807a105302d234f84658d5d4cd3031c329a1a85ecd37a1c306f03ebd44aa2d1a8d055714ec507888d21b9f39be0f1edc08b088e12e2b5fc606ac36286ae0c4ef"], 0x1c}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = getegid() semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f00000002c0)={{0x3, 0xee01, r4, 0xffffffffffffffff, 0xee01, 0xc8}, 0x5, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6}) lchown(&(0x7f0000000200)='./file1\x00', 0x0, r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101142, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r5, 0x89f6, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x2, 0x32, @loopback, @loopback, 0x40, 0x8, 0x4001141, 0x1}}) sendto$unix(r1, &(0x7f0000000480)="d9325a0e15d4c4a0b53dc0332b9d22d050f88932b7a5f90ed244486fb03b9ff71658f0db895fe2ef740419d7cd0e14f48058f63b02e6f05ef8c4801469567176c0c840c37d58ec551d63bf2d499de71277d23824d0bde219eba33a0b0c39422190e3b0436423162bdbe8d99517bbc2d92674f79ab515c9bbb247a031f6cd375b8758b286296d6dc993521461595bbf81ae331c0bcfd40c6a03efa691efc3b90513fa89877e8579c62a6eaf0dfa8c3130d8e6f76bf7e4d4f22212c1de57dcd58eddec84dec8efe1fb2c1df98e1f36291c7c57338ee45921643c9569bc", 0x4995b5922abe4152, 0x840, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, &(0x7f00000000c0)) recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000240)=@hci, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000580)=""/180, 0xb4}, {&(0x7f0000000640)=""/230, 0xe6}, {&(0x7f0000000740)=""/210, 0xd2}, {&(0x7f0000000840)=""/66, 0x42}], 0x5, &(0x7f0000000940)=""/65, 0x41}, 0x9}, {{&(0x7f00000009c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000a40)=""/212, 0xd4}, {&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000bc0)=""/113, 0x71}, {&(0x7f0000000c40)=""/178, 0xb2}, {&(0x7f0000000d00)=""/219, 0xdb}, {&(0x7f0000001e00)=""/4096, 0x1000}], 0x6, &(0x7f0000000e80)=""/161, 0xa1}, 0x4}, {{&(0x7f0000000f40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/172, 0xac}], 0x2}, 0xfffffffc}], 0x3, 0x21, &(0x7f0000001140)) 05:17:23 executing program 2: r0 = syz_io_uring_complete(0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) r3 = syz_io_uring_setup(0x3206, &(0x7f0000000140)={0x0, 0x7354, 0x0, 0xffffbffc, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x303981, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000400)=0x0) syz_open_procfs(r7, &(0x7f0000000440)='net/hci\x00') syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x400, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r11, 0xc0406619, &(0x7f00000003c0)={@desc={0x1, 0x0, @desc1}}) syz_io_uring_submit(r8, r9, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r10, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r0, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000001c0)=""/62, 0x3e}], 0x2, &(0x7f0000000240)=""/157, 0x9d}, 0x0, 0x40000040, 0x0, {0x2}}, 0x7) io_uring_enter(r3, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x5d3c, 0x200) pread64(r4, &(0x7f0000000340)=""/255, 0xff, 0x3ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xd2bd, 0x2, 0x0, 0xfffffffc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2764.092851] FAT-fs (loop5): Unrecognized mount option "" or missing value 05:17:23 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x7a2, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x1, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r7, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x7, 0x3, {0x0, r3}, 0x0, 0x2, 0x1, {0x0, 0x0, r0}}, 0x7) 05:17:23 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:17:23 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x0, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:17:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x6}}, 0x1c) [ 2764.266686] FAULT_INJECTION: forcing a failure. [ 2764.266686] name failslab, interval 1, probability 0, space 0, times 0 [ 2764.269379] CPU: 0 PID: 14948 Comm: syz-executor.4 Not tainted 5.10.167 #1 [ 2764.270834] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2764.272571] Call Trace: [ 2764.273164] dump_stack+0x107/0x167 [ 2764.273945] should_fail.cold+0x5/0xa [ 2764.274762] ? create_object.isra.0+0x3a/0xa20 [ 2764.275733] should_failslab+0x5/0x20 [ 2764.276555] kmem_cache_alloc+0x5b/0x360 [ 2764.277442] ? mark_held_locks+0x9e/0xe0 [ 2764.278317] create_object.isra.0+0x3a/0xa20 [ 2764.279229] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2764.280291] kmem_cache_alloc_bulk+0x168/0x320 [ 2764.281266] io_submit_sqes+0x707f/0x86a0 [ 2764.282163] ? __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2764.283205] __do_sys_io_uring_enter+0xdaa/0x1c00 [ 2764.284222] ? lock_downgrade+0x6d0/0x6d0 [ 2764.285105] ? find_held_lock+0x2c/0x110 [ 2764.285959] ? io_submit_sqes+0x86a0/0x86a0 [ 2764.286868] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2764.287882] ? wait_for_completion_io+0x270/0x270 [ 2764.288886] ? rcu_read_lock_any_held+0x75/0xa0 [ 2764.289864] ? vfs_write+0x354/0xa30 [ 2764.290647] ? fput_many+0x2f/0x1a0 [ 2764.291411] ? ksys_write+0x1a9/0x260 [ 2764.292215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2764.293320] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2764.294407] do_syscall_64+0x33/0x40 [ 2764.295184] entry_SYSCALL_64_after_hwframe+0x61/0xc6 [ 2764.296255] RIP: 0033:0x7f0015714b19 [ 2764.297059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2764.300910] RSP: 002b:00007f0012c8a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2764.302500] RAX: ffffffffffffffda RBX: 00007f0015827f60 RCX: 00007f0015714b19 [ 2764.304003] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 2764.305497] RBP: 00007f0012c8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2764.306994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2764.308489] R13: 00007ffcec59abff R14: 00007f0012c8a300 R15: 0000000000022000 05:17:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x300}}, 0x1c) 05:17:24 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:17:24 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r0, 0x1000003) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0xdc44, 0x7, &(0x7f0000002640)=[{&(0x7f0000000300)="2dbf8c8fcee20d4a96c043f62aa025b1643e68088cce49b91bc5abb6030b5890dc0c95af56ec51b8d32cf4fb443e6e3545905155310116268102605e5d1a2e4705cde32c7b756a538969abb0f8dd53c9b00d6fb8c1a17297866125c81c5cd16d9955818851ade0de618649fbd4044893e5edb938248c962e1a36d02ea460e78c607651c63a6da9ba7ca6cbc9f20219474cf70dc4726ab4b11ddaa7ca59aec3711b3849a09821fe98b2b7b4e16a237dfd4cc7d6c9b6bc808c9f480d344759fae7be1a40834d83b221a51d72ba58815f2071e802adc7336e7f4ee140ebb27ed2012eca2aa9812c99dacd21d11b4cd07534ffb8654e07b1f1e00396a24f6647ddc924766bfc8986184e6008577389e70db6e6e8b4345580fd08a47f3c8c9411283f15d81d2f0cc19aa27cf2184f069676747e794247828f800e806c544beddf593b5d51315b8247cf0e513dca7ac9ec8f6d4cf42ffb7eb898bb71a16e221ba8a7b67ea0738aa7babadd8633f96ec897bffab99215f45f8a60774ac55465d43e8414f471550c2c7dbe8893edc7e018e1115a4d1b814c9f7bd9af9cc1c754e514cfa298b9cdc34f884e5fe9dd1d6c115031c7db313c88187b1deaf8188b2c73f21af0c9019f3951f1c54a70b23402909266621622f8d75bf871861dee318325e0757e44f9b7ba75991deb7fa78f18eb0aa3ef5531f8687ed931e43bf40bf3910d10cc757fef73662f48934f64ca3e44eca0424fbbe0ca6543c33750015463fd21a490488e7ec83ed9f87c7bb39ce4f6b57330c36af1fa5f27d49a065148f2ef93df20d4fbc540bc2c17b69a8b4d238d5ef3c873fd9a31fb66e6d38fcec204cecd5ebc2cd884fede8c032e7bb49799c341590bf4e7a80058f073d6a332e9fd7921279b074f416be0b04234a33ec198a34373c9a446c6870d42a4408bf34b24fa462916273147fdc209cf62194872c03238dd80af08718e64c120d4c10fa63ac9e2becb1d5db98d36f8597f7042145f31bb8500de8239c4c5e720df8041e0d863771fc7d967e9334405b3ed2ce8b823863e28c27551bd2924294a3bc52771e9c7af7bbf279ed291897c71e39bf0d676160e0b5c944b48a52fe7bbe8db5d9912983ed45f5c903e2d4e17646954c3bcace55d4116784a3c45fcad59475dbc9e4e63c9b7a2fbed137327f802a1bbd76c94c365c7ded83a4acdf2ad0d1b4c3ddbb36a6b28173fdef924b714b546dbe6414cebdc8445a4e10cd97fdb95a8aeb8402baaec816fe41216b4c1f393f0c9bc81f094f095a5154996c3fb60bfc2a0f78aae78fc7fd11bd6a149cfdd51f67d566d151089b4750b572dc6b65ac54004876a8e68d9ee5c20239219481f9fa607bb7e6fd188dd785d325118179670a444c4a7e99eb5d07a71338e65428470b3cc4821f8ba74d26ce25bb488ae1eb550aff43d9d3856e0c07b42150db272883418e394833af97756f06426ea0ca7676afc271d496830ffd45d34859997f5312c9a0f5f29a4fea1ea8155689a26bf9d82588547e18d5bdb860f3005b1df1998d9eeedd48a5806b80cd3f456914c59dd3e95c6cafda2d3313c5ec8aeb1fd3a405d7f177c1f9f0bae78d220a95e677b4b05482f4a3f6d8f6cccd322a94bb37857105b4a9d37e01d1c44d9d60c76dc958d9a4211af718373116aa1db8a53f01217594eed1b180d6bc5f2ceb5089db0b6b0e0c4405a3be26e46e04e8f550b52ba8941f59b202dcfc2e4e343c823eb0abcf643d8f1b9f790f924e4c89e9d32c95aca13e3055d4b2c127e74c038bb9ca8e6c5fca7186c1c3fe38af99e295877927d81ce9821b46fd515d790c8edd17acfd2474a44bf1d5d66f8c494b3aaf25ce36626d8ad11874e05ed30dd5697f84b81b8d5b26e7be7c3a1c3c57a526b88ac9fdaacc96b10a9ce20b51d51d8cd5929da29545e0060d69c39d4c5e0aaa685df0ebd3d792f6b3de10cae2fc688a66ede98b9221bba1829145e746a0b09114df776cce4a0c905dc309cafa5e5171068a5f80dbfb5ccfa99000097bf1731ed49346fdf374971aea672d64b51eaa5eca87d00fe2e639729a08584368305d1c8dac0b165fd8cc7068c451866b3ebc25b68d5e7e86237f936c6cb195031c9f55a7de5de9dadc0005ae24de8259e3a2e5e629993891c6a0b6eb4d547ace3994b62828a7afadc4252152d7da6f4599650cbf00fd257be855603af1d48c472f7b35b061a9a6f794e05c22eeee6447121c605c30af3530a6a9c55fa2503d568a211e5fd3ad0f16ca1fb8f73a2377330a7d606f437ca552a5cbea8aee12401769893edda0c9c635e6d4194e41195b12ab644d190918676283aa04cb5a5110b828dfa0d4006d3cae5bd2b1a41ce13005eec6071ab74b6134e3c2610e66a8b7836b5151dc147bf90e6aea2a184f107b9a4930b877e958d4d1dcd103cac49460888afb2539da5b7405bad7a1349409033ae56257a27413bfd6b45bc1245fad58533870e6ca61c4d3ef8bd82976da7e836950b9f02d1597a6c37efd1afcb66c0fa8f4015b9b253acaae36a582686c1410d9fb24f53ff32402adba082ac5010ececd5a825a6d643c95b98b32077307fe02da7b5c0d64710d691b25140bebabee70a2839c064378d64bd66ed70f9a02737814a28dbcc82a62095ed13ba67abb385c26ccfd12f7e86b54b24c27d721884f7fb913e856568aadee3ada22d5ff14b095945de60372e73f7ad4ed54b279aba9242e9d924f358c1bea87d533813dde292d87bb157e91d4b4e63dcba4dd0de061fa9c90e826f469c7114eee70f793ebec6cd994f3991678d52cac64c384d1db8f775ce10562132365eda5c15c6a427a8b4fa3eb76773729d0d1f9e344a9843e2a97b6a4b9877129e290df4c5b81b986e3fa84dc7f8e8374138b2b5a99e7722a2b111e4352dbe36b251da0e7a94f9ab0bf7c413707a2913b1973db6a2a60ff26877a0d897038e7bbe2b2b9392eae7424acf12f69d0f3dbb25ad8451b3ac220ba3e48644569822fdca168028715c24cfe7d31a1b968a5d56fca0fdd83f28e8e552a7df59bd9ac13e50de73d07ac62d90604869f345998c7f02195732b2645b4ed88f7a7b0ce4244121c60218ea2a464c9e90fbe5fabe212d28b32b4a78e3acb51555c28051b84b20e8a078bf9a63fbb1020795415dfb5d7be3ffd081307bf48ad36ff183de20ca22ee037b046699eef22fc47a03c91d972705014498873008723aa813e69f2813e828b05c5cc5443103cf5adf3080685abed12f10bb97673c0d9f28e33c594f777dc48e567fc5e64ac169aa3ac19789cb64eef2ad87898ede3a3c3ea61a38eba16b4eaf028372b5ec09c7eeab28e703aaaac9fd24e9152a588e2b80641d95a0e0963692e57323637888cb9d74c75a104a76a975f9eb8198e2e610f572cd6be98a8f97277b9e5aec79f8d13e7c887e63710508ab7727f1f2f7ad708ef01fb31ce09c5694cca973711f1a35e2b8b33b701bb1a5df2def88e4ca6d8420db23c0c641c74ebda13e04e08f603bd8c292528036d2d534c53b3d0d7b7fa9fe99d4c7c263085ac7ac72af8f6d3f942db5d0e4154f3d1a9b5150508e34a98572ad5327bc7659e6ae7e98d09a0dea041323c53e88465e368b8d16a9952237227823eeb3f0aff630e51df7cb11a5fbd36dc13275eab605d08f54a3b8120402b8df794a18b9bb01c3c84ec34d2db686ee377c5e82ac5d3f786e4d37ce0bf8ceb34258f6c05e1549d4d6f1e9a130c2c6cdd3ce2c167dd721cfe8478e119b851a3add82a9f41946fcc7838374807a44eeded508e34794fc3c27d5dd1e456adee26f7117148b0ddf2f30333f0a11d834417c82848e2ef0d8064adae57f55957cc2febc270f4b5d6ee6c726079f4badb4b2419f3b71ae1e1d3d684c95e067ecc5e1081b317f2c14bf87b149053f016b9edbc813f1de6e53426621b1f95fd70add45cf0fa8c1b4085671041cb43c7b96dad23a8057a81249ea9e0c11f8f77c7c502240c794757d8aa92fffaf4b2879a447253fb8ba80e9116b93f600674d72bf9c796bc4f0a0533f0da5084b93bb3ca60433c732e24368afe0c0020860d6f356a0f12f021e1c87959486efd5ca127bff0ec7289373d95f1a1ce778e4928851de3e62efb110277b8dfb9cb025670d745b5cefc5749f1932bf7d34ef750b0c025eb4802c84ef41cfe9004beb2a5850d43173a5d01b99fe1736b7a92c541d5434696760c2e1a01a2e0f870e992f4e09e2cd1e485f7284821f96d3185bc11188372e94c4a7b46ca75b38adb464e3eaf0cde1e5972085a3b0e39e19c7332870f731f8180e69b832a4fa4ff098faee5a6dd0f725132887c3e332d0bafc50320c3c2146045ef216a3186e5311395cad50fdd70bdd8bfa0359e6f5b35c7f64c4eb8836f524f023d98d81424d19c55aa27316dde0fe31a62094d5b5a27d27415a9be449704f89a674860affde08c76e80a131710040a50453c75ca5cef3ca127dec74a89e3731404b8127c90f114ccc96db5d9af7da11cfb0e385123192cb2b04c81f1f785e14ce3fbfb7d2edc141fd3e38593ab9e5a3b7a9e371ed2c2878b93861275cccff27e829115a5c2d7f8c801e3ebf85f6303434900db697063157f7e0be60a468e85825e11b799b65929b9cdf3692037c1d7299b097b33c5774d58942022f5babc4550937992fbdc3cd49fb723281cf663a9591ee466195d2563b73e06db0024db923d04f960f41a1b6812258d158ead5f845fd2d8851368b917985f28eb8ea9dece5a62c8286fab53a0ec86a04edf4d4d0ec0315b7fbd584b43b7754024b21ba25cd404ee249de0c138243f597177a2342890afe1c9853e97d14d967771daec123816d99c844e64efef27a5da66619efc377eafacc6b3835a2074d33e44e1d367045d6c05037c51fd79b16bfbf05c624ac2647b0822766b3aec3495e142cafdaaa15a6d6c56a0681b3184e844bdc266b9428ba5c0271747914f77012a78f9dc3591fe644b8884392a2e27d5fed32bc0057aecdc4fb4e3919998110a7ec39f1b8fc49f789f1669d3ca360ffe293d660cf519470a236b165746cfa9d18c667eb36c6fd76310875711de1ef6ac1e9507e2195189654d2b5a515b9124334e109877e9aa0f969d5e38ae440f65d6fe35b99cf350c6a4adc6624147c6d36396136e60ce23aa536bab24ac61daf29d2c1d34246cd4d5504311519980864b45032b85d7e82349fad178bec6423d9c229644f288b4d1e84c77fbef843ce62b765e6dc5b3de0e750777c0fb952fbfcaac04ac12e1b6717666b9606da434718f6b2a3097515ae539bcdba81066e7a1d44ea8f852cf080af686d326b38fa4cc5963af8f37b5e9cd4743c83cc8085c6e08d4c70418777d528d0cacacbbad65ecde6467f0dab1a1525ed8d7cce3bfa5a96bf490126f2d65bb4f3dafbde93c5b45c996109efa260f63abe82fd92dee401ec18dbd84c5e1b6bfa8e84e7a07ba274d8d029218eb9667abbfab2cd6d1b38b056f279c6e485a4f03450911d113bffbaca395f9e3e075d253e4403799929f25d77e069bb319c20a17329eb974f85a00190909782c321fb6a9d9deb1472b6d01a2abc86a81c8e55c4806227ff4d177edea8cc50e14eed1570f44a074d7a73335197cdbb52dab02c2ae4fd087251936d8e7250ac0b6b7b54e9a86549b47412eec58b0d8dc91d2db79fb851b8660e6b83835484bc083d475071ed4831b219b936edc7233ca011e33fd587ce40a7bc02238d1314729b8d77f7bdace821018fea9172748ca64b453258415dd66fb5e281", 0x1000, 0x10001}, {&(0x7f0000001300)="ec018ab845016046de03e0e43e305a3788b096c1f3710cf3dc72ffc06b750fb73b513f460d2b331e84f137be5cdd8f10144780f6000786b4b9c1fddeb2b79c82ede8bd42f8ba4dde60b9accc35ff0d58f295e17ab4de0e95edfb90a6d0a668631d18a53161086c66906c517ae800e4b71401f26fa1b98770e35d5e9e8f2f9b28f6beea370b8a3258743c17afac7b1e2222da3e266d728eefa188d02e", 0x9c, 0x7fff}, {&(0x7f00000013c0)="bd18b11db84511804eb249a23eac975ecd0d1b527adb4046269cafec3f66694352738f5d457de90c30c9946ef6b4c7efab5d8899a42c0919fc4fc32626fe4b4f600ffd1f37d45f33caa9df0e23177e27dbd332aa682630afc05be0abdc2b91f1bb50fc07028e8459a2a1814b556fbd237efcad0c743dd9d8b98ef70bfded1a8d74f7d2d36abf7001f2ede5df0b1b0912c80191eb6b37b6cb07f8a53602d5fcc43c01e14b790bff04a48ef837e1c3b8218c80023af91bb6bbd85f04", 0xbb, 0xfff}, {&(0x7f0000001480)="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", 0x1000, 0x7fd}, {&(0x7f00000001c0)="1460798c94a747b80c65edf4678ee6e1cb5ab40382b515ccae35fa2a312d4268f3", 0x21}, {&(0x7f0000002480)="a66bd4366af379c62b9e8e108d0468267d7f15dc13a2f3e273fe6db7e0ad8da21ee54949587010b042b4a268f17b10e35c80c1aaf61664c314a5db46fd482e8a2644db1b83331a0a49fd270772418483542fa94f6c8284b22656e0fde30fceea4b35ed9455aba1f723df1e77d0500dac58f13dd90b868d286c783448edb6ac7b2e87cfe9fca81936a3698a3b38ab5145878572", 0x93, 0x3}, {&(0x7f0000002540)="2471b8df094798c77126b97fee33ae9b21f1a3f2aed38a37388ab172c3cd8187163d8f032d7afa3ffc69007e64150e6d222eb98d0f21d91e94dfae7b3b6f169ff833a35076c7bdc43a1f481297ef9727e3ac97584b047b71db78812ebb8566bb3488e35e2027226fe3fab7c4c38424b9e37e4cae49f22113f0394bfd89077f3eb04fd425f9d087684e51a233d4e1b1eb10879392f9661b05eb7404f8b657284af7f8403a176b823199ffcd5267bde0533c61920349530060feb7f65f12bac8393ef342a3a489793df5382f5a12cccb0d606d08bc98343ad6ba7a97f28736426b232cd4fef8462beb51a309b99bfa", 0xee, 0x5}], 0x20000, &(0x7f0000002700)={[{@journal_checksum}, {@prjquota}, {@grpjquota}, {@block_validity}, {@dioread_nolock}, {@data_journal}, {@jqfmt_vfsv1}, {@resgid={'resgid', 0x3d, 0xee00}}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@appraise_type}]}) mount$bind(&(0x7f0000000240)='./file1\x00', &(0x7f00000027c0)='./file1\x00', &(0x7f0000002800), 0x1000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) sendfile(r1, r3, 0x0, 0x90000001) dup(r2) [ 2764.363760] handle_bad_sector: 9 callbacks suppressed [ 2764.363777] attempt to access beyond end of device [ 2764.363777] loop5: rw=2049, want=21, limit=15 [ 2764.704428] attempt to access beyond end of device [ 2764.704428] loop5: rw=1, want=22, limit=15 [ 2764.706332] buffer_io_error: 4 callbacks suppressed [ 2764.706345] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2764.709718] attempt to access beyond end of device [ 2764.709718] loop5: rw=1, want=23, limit=15 [ 2764.711572] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2764.720599] attempt to access beyond end of device [ 2764.720599] loop5: rw=1, want=24, limit=15 [ 2764.722469] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2764.732834] attempt to access beyond end of device [ 2764.732834] loop5: rw=1, want=25, limit=15 [ 2764.734709] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2764.744865] attempt to access beyond end of device [ 2764.744865] loop5: rw=1, want=26, limit=15 [ 2764.746733] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2764.756579] attempt to access beyond end of device [ 2764.756579] loop5: rw=1, want=27, limit=15 [ 2764.758420] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2764.775228] attempt to access beyond end of device [ 2764.775228] loop5: rw=1, want=28, limit=15 [ 2764.777072] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2764.791531] attempt to access beyond end of device [ 2764.791531] loop5: rw=1, want=2044, limit=15 05:17:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x10002}}, 0x1c) 05:17:40 executing program 2: sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x2c010) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000800}, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000006c0)="74456746edf52c53e79c0fb808e169d98b97ff403b9e0b2254fa264101e9797009525ca8fbbe7de1278252e819e407ad2004e459433b06b2544734bf837a9e400a68fc6811b516503991be28ce78517a90db74f5bf509bfe9e6699bdc673fccb326f2da7c530ab25617264c0b5f81057519ddb2103696c5da4ec4e2cceafb9d34079c59e0b90580fde91ac8114301cc04f9476a1ea62f9f277cd1b894035b40b3e6122a7775480afb24b38c9d4567bb8a962ca0421b02ead798fc7d79f63efb55306f1ea340adf9ba9f75510086ef8cf257e70b75fd1b62e5cd37f56f6ac502b1a43f4a227", 0xe5}, {&(0x7f00000007c0)="c15579d020270b70fdac523742e850c66a63259cf359722eb1db678f5794211ea45a0b54aa5c43b4533d8ceabb8250e9c0d1287e50d191f095eae71a96d617b519bd24b74de9ec13a1abcc83ee551f56df95f9a4ec4a38abaa8721c9c4a1e2d41f925168138451073bd18b074a59eddf200027301a07d5a432a0f19c1a5b88dbcab3eef1d62bb2ff4eca9ff072495d68797dac43307512e78cd45595448b86411939c3087e14e8bf15a1b40bc0fde30d1b55e31fc4038b25b20f48d8e4ecc15a6128a0965ef76a8728a52110ca218299033a3830778794373b491d27bcd3bb59bff8e21665b998", 0xe7}, {&(0x7f00000008c0)="ae740e152fb75955bf401808694477b9c64e59964499a8656b8b8a22f3eb245275b730428d7161a3779e3d731fde1f8c3f4a1fb99c65ddf17b87af0940c4fa5b5584a8cf1b239fe2dd8b9d0dc6d0b7f045c4ecd15a187d607450c6d439de43a0dcaf0aef383b42c1008436a7ebd9868c34e381e06bb856d0b7fa39e3aea509fcd1c3aeb06e71ff17468ce26f6ac54ca31779fd76add47c2fb82f1183e1613c32e12d3b257eddd5f0f5efdb4f9cbb51aa739baef02b85ebcb66c628382332eb", 0xbf}, {&(0x7f0000000980)="d14a3ddb884df946831d55f2281209c5c0d74e1c9eda7eb298157e1b01260408287fea60c1fae667095ac39df6564de6407547e40b68faee2888dfe5d5176b2090283060460d24b0c51e8cd872975dba0567250e4906d7d47135c8b8d8ed5bb0b15288bb67c4eeacc03f2d324d46faed0bb0f13fbc9a6c4cf5b92cc941e99161fa4d6615f4a5c81aeb9fbe93cbec468a8f886ac41af4f2e5f9", 0x99}, {&(0x7f0000000a40)="4f28a7a595a200b7ecfcb66afd17ff53223842047557d6f991bb9120ac4217e886d8c476ccd1a6d51b7c6cab54ac126081718b2857d0ce12cc0a6cf1e82623bd03d98dd3fc4e606da5a4ad0901a374764b244c770352db979bfaa842d9c7633e671d2d61f0ce460a1ae470531161e3cdb90c3bf33ab31f5d6ddab60ccbd42490c4b419541fadb76e1cc50a98b96ebab1bcf3c31e64b15ab513afecbd93bb5911679646bf309dddc062b8ac2b633a6f6cba2bacb0ab176a49990916a3c5aedea27927a21eb8e87441642d269bd8fc5b7bc721c53f9d72adeae4075a4da32bc655d76f57c40e8e4af579f4cae4", 0xec}, {&(0x7f0000000b40)="67135e104d35b6a7250ed6bb2dd4839890527a61549fbf3fc41ada350bee63da54a51576003bda3ba91c5788418df00324a697ef734702c8389c095acf94cc213674c623e42f683684c697031cb494710cbbd6f534f872f36df4aa9609feaff6daae489d7aa55666dece1af474dd3a82b71628d457663b8e1d589b7edfe9c4a1e9ca9c01ae415b869ddad2dfaa36bf06edca8bcfeaa3a8251f75b367987b359a7133dc2e17cbcc82339ed5f51c1c9acff7e39e20fe44e28e30a6089fc80c2f77aabbda31f5af5b22c98cc87fd563876c5bdee9c47efbe9f2f397934f99c01aa106b483ec63f60604131be2dfbeb157185d", 0xf1}, {&(0x7f0000000c40)="eebe88d26ee5cb6f64a766c8bdac2555973a5673565e73e2f36cb36fc67f7f7fa1766517ed33338781", 0x29}], 0x7}}, {{&(0x7f0000000d00)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000d40)="a741b71bb34201c52853c496a26d0b034880ba23506ba084fb24384184d209555088c095621f06281e32967e2b298fb2eebb72273cf9016084bd63370e62e790909fdb9b450255ed331ca60e53da8585f18bdd8ea4f0592c49ae3d351fd9e9bb2b2201ac28c28f12cd80e831a219477d33564820885e56b326bb72baf229e1a54fbe9ff39d4ac1b02a652b3a27d74cdef7bf90111b1b2f162450207a292a4e4b788f6f6edfc8e93c22c3f6663dadfd", 0xaf}, {&(0x7f0000000e00)="4754266719dcfe311a465fcd4d9f1b6de5ab65bbced70c11ad7421d9267b992c6c08d55064eb8d9f193de61dd288022001772f53f2e4", 0x36}, {&(0x7f0000000e40)="17d50f0b9f462ddc1f2af22c2f2ab8e0afb1f749d64c2f2a", 0x18}, {&(0x7f0000000e80)="cacfec4e310631b6f28d88a49c32e3d40841639a01af7baac858a7744710fbbfc26593896f2ebb799ded29da7928a8c13053", 0x32}, {&(0x7f0000000ec0)="bb8d02e5bd877154027ab75a560043fc2852e998f27ef37930415b7956290d584f2aaa63c612e28e02343cdfcd734c7775d22934b84ff7433721eee5734235b66df83a1c6331c8c755db5e548bac99afe0af9cc0eba3ffb57aa1e6e83b5580cc090842ccc0bc3242482843ef877d5fde3dd2c4a92e353d3059397bc9977d7e4a93410f8da751503d341fb1370480a65739bc1334e51b500856de42e9e5a2d993e013f6cf429734fc63eb7370632f6f2d4ae4efbd9a953298ac330a85e794e257e1a39e8ee003cd9a37fd13b6aa2a13abd3464446e29767d030", 0xd9}, {&(0x7f0000000fc0)="2dc5f35344221396b03fdfbcf9d4affdf6ffeb6d6f9446192dff0d3c05bc20", 0x1f}, {&(0x7f0000001000)="eafdc58d2f5c905adc4a40a72840d2c9c3ebc7eec0896709e8cd5f2a2aebc013c51186f444993f34360f2c724321a2aaeea3fbbd35aeab47cc06df6dd5c0daf2ac8efb48db7e8441108da557271703a6d8b4e19687ed0b1fa4ef044eddbfd84810d1be43972c508a7f9bfb7df7d41b57fb8e1fe48dc7be4c9ac0e63882703935ba94fe17bc80d45036ea581bc88e961766afedac888cc0fd9a70c59376655e", 0x9f}], 0x7, &(0x7f0000001140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x48}}], 0x2, 0x14) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x6673, &(0x7f0000000240)={0x0, 0x6d62, 0x2, 0x3, 0xd1}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000340)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x54e6, &(0x7f0000000580)={0x0, 0xd901, 0x0, 0x1, 0x8f}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000600), &(0x7f0000000640)) 05:17:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:17:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x4, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17, 0xfffffffffffffffc}, {0x0, 0x0, 0xf21}, {&(0x7f0000000300)="bb67e408fe810811f346d70c2ec357ff0f56d0c66ea32a1fffc731f8aa59af0ac3d12d0764ae3113a16b5996c7f56b4fd567e4e42aed2365e227b7975b8f6788c211971590e8cdb771a275c3aee4debcb34e000000000000d5cf6408df9414eaf21ec068630f25262babb9628033696c6ae50700974ef447dd09479eee7c742278585a2eee9caefe7c11340a1c1bd6839c08e8315ae2cad36178d72a609e2226d92300000000004000", 0xa9, 0x401}, {&(0x7f0000000180)="2c3ea3dad7d3d02a6fe83551f61a9d85f6b9026c205dd330265c2a1f3ed65c5938aa7c9a621d98dba76570076043db2aafd5fed9c5edd8b50af01aa0e0efdcff547c61", 0x43, 0x2}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000170000d0f3369f66696c6530"], 0x10) ftruncate(r1, 0x1000003) r2 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x8, 0x1, &(0x7f0000000240)=[{&(0x7f0000000440)="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", 0x1000, 0x9}], 0x3011020, &(0x7f0000001440)={[{'vfat\x00'}, {'vfat\x00'}], [{@dont_hash}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@seclabel}, {@seclabel}, {@context={'context', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', 0xee00}}]}) openat(r2, &(0x7f0000001500)='./file1\x00', 0x300, 0x100) sendfile(r0, r1, 0x0, 0x80000001) 05:17:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7}}, 0x1c) 05:17:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:17:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x0, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:17:40 executing program 7: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)=ANY=[], &(0x7f00000004c0)='./file0/file0\x00', &(0x7f0000000140)='nsfs\x00', 0xc, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ff0000/0xe000)=nil, 0xe000, 0x1, 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x2) ftruncate(r2, 0x2) setxattr$security_evm(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), &(0x7f0000000400)=@ng={0x4, 0xb, "83eae2c6"}, 0x6, 0x2) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4080) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs2/binder-control\x00', 0x2, 0x0) r4 = accept$inet(r0, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f0000000340)=0x10) dup2(r3, r4) [ 2780.709846] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2780.732165] FAT-fs (loop5): invalid media value (0x6c) [ 2780.733410] FAT-fs (loop5): Can't find a valid FAT filesystem 05:17:40 executing program 7: add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000008c0)={0x0, "65a6cf5b9c07642a3340db90bee4874c94ec4fdd53be77d8d05520d91682233c045247ee072dddb4606017c18511ee7cc2005a83f5d5bbc07333a25fce3d1db4"}, 0x48, 0xfffffffffffffffb) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r1, &(0x7f0000000240)=""/95, 0x5f) keyctl$invalidate(0x15, r1) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) pipe(&(0x7f00000000c0)) r2 = add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000200), &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)="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", 0xff, r2) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 05:17:40 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x34, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TUPLE={0x4}]}, 0x4c}}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x5, 0x0, r8, 0x0, r9, 0x2, 0x0, 0x1, {0x0, r10}}, 0x81) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2781.592672] FAT-fs (loop5): Unrecognized mount option "" or missing value 05:17:56 executing program 7: ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/35) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, &(0x7f0000000040)=""/142) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000140)={0x40000001}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1f}}, './file0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x12, 0x4, 0x70bd2b, 0x25dfdbfb, {0x16}, [@generic="3e42479d79935595290a53b3394eadbdb8e9884198e66d052bf272bd3825b309958de9265e31851b"]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$sock(r3, &(0x7f00000005c0)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0xa6a, @local, 0x3, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000400)="8517e97f54da10c642f4acd9b69d4b7f88401b6e2a24345264539f06d2c57acf08607999e93683ea21490fdcbb4741514b85e1e5dd9734ea8085a480d67837565db44d11779714af0bdcf59bc869efd6de0e103bfa83e20a52d01dad5485db9b5debae4b40e07c4d38e161ea183f5af79f16812d43e2e7429bb8ec45dadf0ac78e45828a30863f8a242d0034996aaf7fdcf784d64ab2a8d9b7303edd3ebcb58d004dadbfa8e6090771", 0xa9}, {&(0x7f00000004c0)="c506ddf9c3e0de4d6218e9bad7", 0xd}], 0x2, &(0x7f0000000540)=[@timestamping={{0x14, 0x1, 0x25, 0x81}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}], 0x48}}], 0x1, 0x20004011) getsockname(r1, &(0x7f0000000600)=@ax25={{0x3, @null}, [@netrom, @remote, @bcast, @remote, @bcast, @netrom, @default, @bcast]}, &(0x7f0000000680)=0x80) flock(r3, 0x4) writev(r3, &(0x7f0000000840)=[{&(0x7f00000006c0)="8d85940d5209d107ac08e3eff197d9256455e100359e2a8b12f22b45da18bb1a229927e6bec6aedef724a5a735da0155d1e07ac1c8bbc05904da750b3d73f58f139a9e5fefaa3ef069f294d2be0762843aa1939bd7d8df4e1756c251d1011172ff2f23c004330e4336f4d6e2", 0x6c}, {&(0x7f0000000740)="116e499fc0f69ace7150033196137447b1afae97d6b632fde5d8cf6a0f312655306bbc726f70f8726646ccb90cc30803252f1c6322f0670e947cc558e2422cf6495f7645befcf4533f0b82d15100ee695bab11408643ba6023c4d77ddbad84417ca4034d8766c553c9d12d625c3dade58dfe2b142f8f6f6d1294424de8a2dcb866e0689f926d54b54cc23105c35806f72ae40422a971fdef9a7ef9d45b15543dd6cabf0aaf70e7f146ccfd2b5bf0b35195539e32cdce299fdb2346b4869621feef8c2862dd876392cde674b2b8c7df473f6b522be2", 0xd5}], 0x2) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x50, r2, 0x8000000) r5 = eventfd(0x771) syz_io_uring_submit(r4, 0x0, &(0x7f0000000dc0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x0, @fd=r5, 0x4, &(0x7f0000000d40)=[{&(0x7f0000000880)=""/32, 0x20}, {&(0x7f00000008c0)=""/209, 0xd1}, {&(0x7f00000009c0)=""/5, 0x5}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/246, 0xf6}, {&(0x7f0000000b40)=""/163, 0xa3}, {&(0x7f0000000c00)=""/31, 0x1f}, {&(0x7f0000000c40)=""/195, 0xc3}], 0x8, 0x2}, 0x4) r6 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000e00)) poll(&(0x7f0000000e40)=[{r6, 0x20}, {r2, 0x8000}, {r0, 0x40}, {r2, 0x2}, {r0, 0x1080}], 0x5, 0xa5) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) syz_io_uring_submit(r4, 0x0, &(0x7f0000002540)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r2, 0x0, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000e80)="147deed2e54e2eafee77e62d31a3e4aa", 0x10}, {&(0x7f0000000ec0)="87d439896cad3f20ed7525ec14d027b02b64f40f98365f8c7bd089309b8a491084124266159982e794a2c65b99ff9ad508a00aca8d7738982865a182bdaa73f623a795bb2ffcc62a2a6c8334630a97c15b49a00db5b6db57c7d5ff44108eb6", 0x5f}, {&(0x7f0000000f40)="915ceb92dedd0f8ac658b99ead6b3a430217d6b1f7a244ec6585844d075e16847f81d182804a73f7f90a75b5c9fc35818285d95925674d501efee818cfc939dda217afc8a61d9342af69cb8d7a7b9097d7a543b1233989c1ad842b9e2a0849e609621947890229ca2c2e5863c6420426e9832901056b068c46b60db0090a4ee7d7b227c0c6d2c4f591aabec8fb40a7a494d09f343d43f7dd17235b4d", 0x9c}], 0x3, &(0x7f0000001040)=[{0xe0, 0x6, 0x9a, "4d2bb1c5683cd81bd901f46cb0a62aaf6cd61fdb106917b809344e27faca5d8bb0de87e64fd14c158580732d61a0f1b789b3ec6b5b3e3c985ba0d8744bac550954cb72e5afd0f898b76058f710e036ec2aeade00c79bccef63ecd7c1a6f0c23971a63bbf0ca3d7d5011ed49a8834d45cb681e92023d143b1444d4a519b6534e1bf558b59aacebd824dcef5a903b3cfc735bb41bdc77571a570c8f68c1d556f41f6c258c0f769464a4fe7c8f157298f0fd54384db13d2b1c507a7f8484df428897842af59a7f887b055774b085d"}, {0x1010, 0x6, 0x185228ae, "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"}, {0xe0, 0x108, 0x6, "b4af727e59332faca222b5b2ba497092ea4ba37b2e7cc695fc8c72c714b1f94c48b05d5cd414fb5e1c5dd92776dccf96e7190adc559ac36144f621ca8bb77be39463acc8538236c0ceb87716a9fb66ee1a5cf9900b5588de04ae0fcc9691fa43eb3e8f5c7ee2a24020738999f3c75a9c069df0678cae0f3f6302b48460eaad3de9a1fb1d8c20cdab1be8939b9f92a7608dafd6897a46fc066cf871853bf7c016704a5e6b47576a45874d5e55c72a4c3a35f9b43897b3ccc6dbcae2810f122980f613c81f014c1ae68e90ace1621c4f3f"}, {0xf8, 0x10e, 0x7, "146fe4876083fd9325062f5943a60f66192963034f2eea82cdd85ba4e37869ec2dc8c79d4ec2b82b83fec3c7e97f15040dfdcb548d8566ff28fe29bc4a33c23d71def040f9adcd5a49c09f0a0238b88ebf8d88778f7703f4e5ce439b7f5999c140c34354a859632f7bd67c50b7842bf6e2960f28e28bbde20fe96df91773a4ab29d4688a01da1201e20f9b63228180c3fb24228d5206b7bf7cc94d9b7202286d77d7debab770fb698cd9bd6c88ba67dee71f0c07b671c49f0d41a71cde3c6689af9bbcfd6d0d5b2c6d76af076235bcca026c2f7ac86c2cd109bfe319ca10f0c2e3"}, {0x50, 0x10c, 0x8, "e7d3025f0ce61bdd0dd69654507d8b8c8cbdcf57e59b2bb061d8bcb44fbec66ce7a83b8ba45b870b3373011e7f7d1119d55b6806f360e05bf491"}, {0x108, 0x10a, 0x1, "91f819a90a728a0f56030f8ba952e07caecf91aae232c98130fca5c10177aa49257310f83fa299126aab0ab35d6d84446948141b5a6df85447ff6e2dbb2a030739d51df58b837d12f34497bf8ccf427d5a6e5fcc65f9973a3061691c9ca5ba965a5de41dd81dec25b67d118c62f81f0ef28a10d61bda9bb6151b51dd49fa8e600195eeb3ae519e890646e27481ceccb188a873d788ea4ad5716761c4deddacf5dea0589723ec886955bd78cb37e667e4cc9798fe2abdb4abbc2e88a2865aeb84795bd6c8024f2a0d2e669d114a263705149047068a4bbf37506e0aac5937d8b8eb813abd57c1666b8ad9390c69ed1434fd"}, {0x98, 0x116, 0x80000000, "1be3b66449280aa72fc736b479bbd92f959225d312072bd28b689dd875045ba690e171299031adfa21be3c3f70b70c1317c68c5d95589759c29f2d3871da64f7047dea5d93ab176a88587a22205a13113393ef35019dbb434d3ca895f2075fa90ce5468a573ab35aea5f97632e8a2566d067f807384e251686ea476f771c1b8f9bb1adcd"}], 0x14b8}, 0x0, 0x0, 0x1}, 0x1) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0)={0x141000, 0x5ddb36b9b16e385c, 0x1}, 0x18) renameat(r7, &(0x7f0000002600)='./file0\x00', r2, &(0x7f0000002640)='./file0\x00') 05:17:56 executing program 2: r0 = syz_io_uring_setup(0x36d1, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="00000000801357bc4678b16c7442c9c241f2a901467834352a17399b8f957093db9bd4dc045d5d9d0cb53637fb6155e55cac9d43da062c77bfa41cfb2b2648f543418c4a644de6018edff13708414a2e266b7f1c52f04fb409a24451c805d8afa0b7ed6004e1bbd6e8b18d5b1b2af8ee85d8a2956724e5f079ad5dfccd32d0aa3a03456ffd8acdea3c6d5783b89f7d4cf5ed99d9dcca7a898d81e60b512018c355670d04207a958570909f7cf6de5836c90a98f17e17b93697c0bf1027b5c87cbab5e98ab9bfc2ee166a8ce3bca5d2ef3a5bd1c10c4b23e233eba231970000000000"], 0x1c}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r7, 0x0, &(0x7f0000000340)="4161e7e0e208743d466c3c7a55e5c8da4b339d42fc5fdda9e15c8a676e09bee94e034c6f1e1d4579fb13f30a7c063948556677708c65403f321cad6741896036f666ea3895414e6da11684f4d55a9190eceb258b13b9e49a92aa72fb44f38c5144fe085b005f1e37a2d40b2f895fb75bd28cbdb968d0a105deb4e6807b8c70af4e20831afa35374cc3c756087e4e6c324355ac377fdebd4b80118792af79ccc776758239d248f3c7bce028e908768854c20c69f8afff64704c03c175bb536eb90013d13fadc4d96d9cf2d07813d728d3332a0e", 0xd3, 0x4000000}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = syz_io_uring_complete(0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000240), 0x0, 0x10000) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x8001}}, './file0\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8000}}], [{@pcr={'pcr', 0x3d, 0x3c}}, {@subj_type={'subj_type', 0x3d, 'vfat\x00'}}, {@obj_user}, {@smackfshat}, {@appraise}, {@euid_lt={'euid<', r3}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r4, 0x0, 0xa1, 0x600000000000000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000180)={@desc={0x1, 0x0, @auto="6fa40487b6d58e08"}}) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r6, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r6, 0x1000003) sendfile(r5, r6, 0x0, 0x80000001) 05:17:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x7f000001}}, 0x1c) 05:17:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 05:17:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x0, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:17:56 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:17:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:17:57 executing program 2: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x8c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x884) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='user.incfs.id\x00') r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:57 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x118}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) chdir(&(0x7f0000000040)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r4, 0x1000003) r5 = socket$netlink(0x10, 0x3, 0xc) close(r5) sendfile(r3, r4, 0x0, 0x80000001) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 05:17:57 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2797.540344] attempt to access beyond end of device [ 2797.540344] loop5: rw=2049, want=21, limit=15 05:17:57 executing program 2: ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x3d5c, 0x0, 0x3, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, r0, 0x8000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000000c0)={{r5}, {@val, @actul_num={@void, 0x3, 0x74}}}) syz_io_uring_submit(r4, r2, &(0x7f0000000080)=@IORING_OP_NOP={0x0, 0x5}, 0x2) r6 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x1a1502, 0x537e0d06d241bf4b) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f00000001c0), 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:57 executing program 7: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x600000000000000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000001180)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x3, 0x6, 0x4, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x8000, 0x80, 0xffffff56, 0x6}}) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="48903d096c3bce8c377d289e642a9506f6b2132de7ff7e4fff376a8d82f8d651921b", 0x22}], 0x1, &(0x7f0000001200)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1d}, r2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}], 0x40}}, {{&(0x7f0000001240)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x28}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001280)="29d797f1533231bd045c7b3585880fee42e659b800de8b68d16abb9b40d47b586e4d9befa02838621a1bab6697e3c44c29ba3f43d97b54bfdbf3cb0800ae4192adb2ca7095aa06eb8e", 0x49}, {&(0x7f0000001300)="9bb886953af6d10486ec6d32ad6f8d2e24", 0x11}, {&(0x7f00000017c0)="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", 0x1a5}, {&(0x7f0000001440)="15f26b26f862f788004666ecc45f369286cbcd223331a139f993c59e7bd0e643c7d5448e8d1f8e107e56ddb60138b3830f13f550a8b2495bb118246aaffdd575a237b6f60862979e206f87a935c8fb443c74b88e1a56ca501b066a2ad0a1253c8b4b9994dc1ade1f5f0a52dbc19197da48ad50921f928235dbb28dfa943986ddc6bf814d1679ee1a3731abb07763d10c363584711c03b62eb7c820cc6608ed13b991a2a5da0fa05a144c5bbcde3e76cc91ccb9052681c897902fef5fb9179cf2d91133a3b824b9984475a84c89797fa8dfbe72a58692a6a76f0a670d9bed8ae7cfff325f0d321f0ba1b75a0b50e09da609f3", 0xf2}], 0x4, &(0x7f0000001580)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3ff}}, @dstopts_2292={{0x58, 0x29, 0x4, {0xff, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x28, {0x0, 0x8, 0xdf, 0x8, [0x6, 0x3, 0x6a, 0x3]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}}}, @dstopts={{0xd8, 0x29, 0x37, {0xa8, 0x17, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfff8, [0x2, 0x4, 0x4, 0x1, 0x401, 0x2]}}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @generic={0x9, 0x1f, "b059b2405eb86f566912d1ec1a2ab3224f7f6b1ab2299a2711f1dbe65b5b92"}, @jumbo={0xc2, 0x4, 0x401}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x20, {0x6, 0x6, 0x5, 0xff12, [0xffffffffffffffc0, 0x7, 0x9]}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x9, 0x8806, [0x90d6, 0xccaa]}}, @ra={0x5, 0x2, 0x5}]}}}], 0x148}}], 0x2, 0x20040005) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) connect$inet6(r1, &(0x7f0000001780)={0xa, 0x4e24, 0x40, @local, 0x8}, 0x1c) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)="949a07240999058d15ed339d4ebdfb0f5f459216278a969e6267873d382b651d93d90088416f9faadf366a5a11473976b6563ccedf33950ba59965f1db2e176cc64716b4a2ac31f59f0befef150269e0b81b6401911975e7c60c55409286b6d60efb05dd9eb44ea36ae8e4a18b0b5be01faa498bb0bf600b714b3defa0a8a787999f488229cb6b2525e84eaba82dce5d92aca57db1b18a8994161b021ce5236c8f9309f08b9c11198d6b18318dc7b09955f2792b7a8913df1bf6e19b6df55ee8258e0a111b1761aacc25beba64c6d919a8129d9c4f036e835431f2eb1d95514ed88e4d7772ff96e8dcb504cfe0008423b5075df2bbd50dc759b5f0c7d400ebe68a8f7963c51da3e984eeeb03e8e21efd52da7d7ba6d766b616be600b253908d181c6a656f405378b7c02bf1e6124b3cf725052ccc027d7847676cf6884cffbe533e4dedf55391f198401702ef42b59259a2de427ffc9e436092f53f67a60c2a1302626105bc9f22dd34747139854ec2260e73412468cc982a0957f636dd5efa75d0a70b20fcba3166fbb744897cf6fdd3b135b21b1be5e91f838f07a7d34956c3508b100244193fbb22448c9fc3ea360ab004b1603a3629e7722c3af8b4f67ddd1c6cddd227e07fe3daea1f806f54dd90a45e91e224faa50dfcec37afdb10282af9a1afc465ce8b50dac6ba64508f5e8b2061973de42668eef150329e566ebcb922d2479815687bb94d9c8782d67de7b826eef66c168b1f38a49c72d60ef96ed022f9db0a8abd229493577fcc439e135b5db9b003245878fab2f0aa2b65e233d1bd7a92eba798d0164672ff5b9b4456e0db96002f3debd7816d53c01ae6776edc0a251edc10456f9233dcda2b3767021e6c23c4d9bf16754955a857f3efd7180fb61707581e537a8b90aef91aaa74ba6fe9ad94fe5a4d749afd5ac4f77ae3c362452c7fdcee2b3fd9ce728057ce7144e879909431999295a080865db50b314b25bb1ddeacb5146cd865cc44ebbe62f86881b517d9d8289794a7a9d42a1ad7de67952c712ea8e74d0392d796ba8cc0f952f5418cbaed0e57dcb29af878b6974847cbbf7a410f05bf3f9074790f195ff40be0b589e029536a2b17675356d8c4f030a8d7f0a7d22127d1849042bf439093effa0ccecb3162e275a3c2095921588b9c303530d00c82d6444affeeba33b81d94578c96404c740e7b7552f04f6a59bcffe871c252097c8426601d824e4cc65c9c83d1ef7c527ba6db88448f3dbbb47f1e78d183152d27de4565478e6a4f2cce4d04e2d309d5869ae1f88737361a58c7e8add792f8904be5b4a1f04a07ad0d4d763087ac6c7b219bd2df0dda2653e884475aeaa650c0bc7fca24f1bfd2f3dd575998fc3237694d4e66205bf3223ab8e8d91f8cd61494099f934bec33412118ab9f9d47478d0481f6c0829a8f79f3e38449de0543c0c41cb98a213f3abc62fc92084c7d2fa48728ed316bdb7d2e05873d1078be97b1d0a947350536f7b2bba665a49f3aca1592873f14cdcc402ddf7bcb8d91a9c13499ccb3cd3c5e2659d87fe3ac0dc77324f66571d7948d9e4518e07130669f24bbb8b83d5c07fce5c6cd5201e3dededde8ed18a528b2e2f39147aba67f865eec6a3975004a22f810d2dbcf0fdcd838e4b76da61291461f72f45c830e8bb797ce7aa2b5ace154e7e2c28a6149a37ebdf6d0d467dd4308621b208f1be9579b5f63bca1eac3cfafb929119d6606e07b2fb455674605c5727ce5afba1bdd1d60a054409ae3d8ef151976ad96f518c276a47b306208948cfe00e3ae34e47af0cc0d2435b8446bc53302f24deb48cc0dea6236ed6369cd3a007ee435fdbe125d162b19d4c8e40142fdb0b73b810dffbed590886fea783deeeee961029a8a1dfac11059630cdf8ac1fc6486cceec8ceb0cf1e54ae32e199765824d6ecf120c7bf6b7818722ab5a5025c1d8ca7a51cfc51f5f08f4e0f12d344b35b43be9bcd92aacbdf76b00a14fa39c905923731db9b907c552a2ddd2bfaa41c2c51323b576b40020918e13a43ea6d8124c9a6bc6a1756185de81afea121123455375d1c476122154110004d688e4d509ab057f6dba86d398adbc63858b65c143ee6d4c60c747fb20e34e18d459b6b1d00e724cc8858d1f043aa39d725c5c1664c5f81066eedc69a099d1b8c47cd468d381890bb825abb8878799f5744273ac31d3956366f8026e890c307a9e323e23bc051d8035507bb5948528322175a21aef0d2f1f479d70f4babb52c797a1b79cb123a822b3629ab32089d6de4f3901d6c8bde7aa063129cc612ef28cafc7bbaa592e139d98339142c8b1c9fab07e710ddd93b923ed23d75009da25fe74657e88bab1dff64f16221e585f519473939b7f6092371a2fd693d4a4d89b3ea80f926f2328629b22f036917853e0f56bc2b8eeb1f79d2972daa8df53d19a0c33bfd391f1a2bf4af2e3b4ff0f329fd18e2914120542bf8039d5b3ecc25e5154b3892d9542511b2a3d5d95cb896b5a2879fd6d17a800533b7db141079cece4cef84172ab9591ed9e240026c7490da7173599ad5a8985897ac94e9f61afc352b7a2b13c6f3ec2ec6bc3d5ffb469cf62a4dbfa8a66f11601be3e062785bad98fd66faf66f4b159e79f70d3c4db3b6ec17350df7097abec07f66a636e5b8563e55b250c8d3105ed9c9c37c610d0efd00428288367c3989c8eef7fbe04f3f466fd583ac5ad4c19514cc902e91030598fd8cd8153536c1ecbda88972ec23323ee8f1e8c20b261c7cd6023a71ae384b9efbcca583f7515bd91f774a79de6ed12ff758c4fbbe879c77c71eff837fa08e748b28c3a670b09452d8b7c231d8f71f77a33402032c5a46b29b6dd39f3dd793f643c24135dcaf05a5574d1a0f15eb65c187fff6620d58063436b1addf312c7e61e9bcfe00a65b7fe0a63b21537217ad849117da0196fb7068e05f6355021370f6b26d7420872805dac0f4c330bd12098b8e737fd91ac5a746463ca44cb262bc05d770133cbc6cbb9a96a4d8d4c3d65750d2685f02447441934f7bf1c151bf5e31e595a9d99b9bf049a500394393499dc204aa25b66a624c8b61dc340fb7399791c981ecddddf9c5a4970936673ddcbecac57706e39f00490c6ed8eea32e1e3bdfacddf588ef67b1faf776655d0e644b2ac7b6b9114eace44d12f90a739dfaf9fdcf9260bc1c9c60d809f5f12d08803e20c4726f1b8efc5ba2523db92463be7d0480ea6d3bcb22636a244e5b4ccc78151daa3e433a6cdee18bcf196c1d683d7093d0deac21e0e8777016cddf585d26598812acf8fb39b575abe555595c93730ad781aa0a6b42b74f9c60e3ecce83ce39660bfd961709db4d179d64daac8d75b8bf2e060346ba9555ac89fe07b85d3c317a52c6f42a5765b5da7488e4db31486721d245c1e9d7fd1caa2aec00dbb77cab835d5fc0bda08f782f10614d894ee9e683fc4269de5cc983aca755bca67802d7308f308ce34d191f642e8e0672b4f1939ad1fa74fdfd09bf097bd57f1598e6647a255f2ebe6c0fc68bb4baf2d65a0d614b7d4a4eff9d7836ad2c0ae4eac2dd4169d3434ebb80ee3175949a2492301e193bbdac97a44250d9095adba09557a5ed65f679bc6861d7af397c6eb00975181710ea5fb24a8bc8b8010319933a8c495d67ec95da6aa97d603e9f16515ef8eb9ae4a0d64369abce084e53a7972253a2eabe1b93bd36c59979db0a34832a9617b48d284d3372b60f70a464b773e097e33730af247810aeb0d98c6e37cd38d4cbae1b3740c79a75d7566c05a5ec66f2eedd0849ac4758e54855fcf99e4102ff38635df0c18047e5a66a4913d3920a9b486565076c2b7494041fd9e94b926f193418bea0a26d394ff8b3a6090752da590c42660330fcc9724eacfe756d96d0d4f7185a1fdf28ca4a5c597b9bee0e862ff7df65f59300b951da039879600a9c146a6f0aebc0211cb55692c88edb01626eeed8eea2b48026a49b5d47e2398edeb393759a33fbf29bd023d2a6afe1cbbe7db042ded79360f0f76005cafa1d9d213576372d0a4d41e7071a456a34803359df270c6f571ff1d265f7706a8c0cdbfad0c0b77ba878df78592903ae1955814f92bb356ebb7b879051a78b4fbdc0d4dc1e0877080f5b4659091620f05a3d802a5f3e43b0c8203c014ffb733bc15ef27fda0dc65ea254179a1024e4b6d0e65cc4d1289e6f5b86e88a1332ce07bdee801f704407937b0aa2d619e9b0a9d7e0f3efab4abe6b7594dcc4af05d3383efde28422c03e14bbc52ad4c68ee8c7ea86494e5d708a65b9e08cd949c28b69dcd9775d70168bcbb85f715d82e586aafe260682aefb9afe4b68a36e35c4cab156955db6540289aae927b28d3053a4c91d615f17b5181daae962ba6e9b96af975192b815cbdf0bb02916830e792e1d31c5ef086ffe76e01a705908d2c5389fea0469226367f852ca0beeb434234f00cb363ca223a0ce36bde554e1415ff852801cd95ef667a9cc1fbe6dc6135909a89e69410b51257b7063add9b5ffd66954c006bb8c8905fa12f4870b99e7df5839d6e358714622c4bbd1e26f8add339a0feefb6400e2ec85a5b6bc8f09ae8993e722bf21df17f2b784b6c7e32b4186f3761ed1a529c8bb4965f5bc4d2f52ac0571d8de1b64d572ffc887c1032e001d1c8be2562b993886b0de7b373a28727fb41baf4d6ee402a5e57b8327d3d4156192bf6ff690951fb6c7ba3b90b8a1e366e97ad3b8a96fa6c2a6788cebd5e134cbdd521a36a432240ecd622d7a122d04cae5023b756028e81d9b44f15329cfe4d87cc696a1d08b2cca6d81cbda9165be3958011ec505cb815230d7057e9c0558df8086f304b50b55b716687aa9e7f0c165229f0261d897ccb6aa8893b32f6ebd836ed492bc067240d76ca87ab0efc0bd0a2bd399404a056ba012596a0488ee0fef4fb2b5e3bf535216ea40545ab1d7e406473829448cb3a39e21e46132442f6b4614e394f3840dfd2079bf84020e4c2467b7e3d04c61cf8906ff0a2e25f85e7f4e2f413327d09b4ed3394e7adbd8ad3e2501d36cc8b2f06a6115203a021fc44ba54dbbc99dcd8e6456bd88f69dcaa9fe0f124c8750ea80406a75232fc06d7d50e93a21a9c1ab3d9266f0cb245206baa7c3a4953ca07ff28fa489332c0e06eb76c7465eef14eccda8fea956fd50c48752ca6f27b4cca8532a28555bcd347dffab82f41967a412cc2f93dbebb02d311935bc7449945453dcb06dd4c141dd64469c5804b9f0a529fe53abb26aa1aa462de7db90a09a81b46660b7b77718c3b9c295f59a05e7f272bd7d6402ec5558b8bd114ee01af8e285e304205d9825b93bf337ec58c754f293731b4d5a41a2def8578874eeb35ce60ee5237890dd5d6db7fe129dbc77fa8bd8ead57319e39139bfd02dc777f6249ba916ce039f0b30da66b5d0c834f0dec0d9a5ecf016dbecc90bbe4def8c707afb7ce5811bdb6440d9b90c30e175311e2c7ab33b99c06aef7cffc029566b02ffc52670b0822f788c377006d7c44f96fb6849b8794082f47a5636796b2ae2e59c5df8ff638e6a3c7ed124d9e8f589cf2e4561c819e1d280ec75e6615694fdc7d21113c98ec60c68c7960e65d5030e9e70489687db8ddff24b640a6901816a303f60ce021bfef0b3bdcb7a3b0664a237427b0cd120ce498341aa3977fbee06a8dafdcdf40fbe4b086ae16e119c91d5d32fadfddbaa2a88c8421db9fd586a7b5b292d8a6029c5d5ee04c23da5dae749816f53584fbc90110b8e4d2e74f83e6155c84491449af7c", 0x1000) r3 = openat(r1, &(0x7f0000001a40)='./file0\x00', 0x400, 0x80) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000001a80)={r2, 0x1, 0x6, @remote}, 0x10) recvmmsg(r3, &(0x7f0000004f00)=[{{&(0x7f00000013c0)=@un=@abs, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001ac0)=""/230, 0xe6}, {&(0x7f0000001700)=""/100, 0x64}, {&(0x7f0000001980)=""/79, 0x4f}], 0x3, &(0x7f0000001bc0)=""/211, 0xd3}, 0x8}, {{&(0x7f0000001cc0)=@hci, 0x80, &(0x7f0000003340)=[{&(0x7f0000001e00)=""/216, 0xd8}, {&(0x7f0000001f00)=""/223, 0xdf}, {&(0x7f0000001d40)=""/51, 0x33}, {&(0x7f0000002000)=""/84, 0x54}, {&(0x7f0000002080)=""/91, 0x5b}, {&(0x7f0000002100)=""/42, 0x2a}, {&(0x7f0000002140)=""/187, 0xbb}, {&(0x7f0000002200)=""/29, 0x1d}, {&(0x7f0000002240)=""/221, 0xdd}, {&(0x7f0000002340)=""/4096, 0x1000}], 0xa}, 0xeed}, {{&(0x7f0000003400)=@qipcrtr, 0x80, &(0x7f00000035c0)=[{&(0x7f0000003480)=""/87, 0x57}, {&(0x7f0000003500)=""/16, 0x10}, {&(0x7f0000003540)=""/102, 0x66}], 0x3}, 0x4}, {{&(0x7f0000003600)=@caif=@dgm, 0x80, &(0x7f0000004740)=[{&(0x7f0000003680)=""/133, 0x85}, {&(0x7f0000003740)=""/4096, 0x1000}], 0x2}, 0xfff}, {{&(0x7f0000004780)=@caif, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004800)=""/212, 0xd4}, {&(0x7f0000004900)}, {&(0x7f0000004940)=""/162, 0xa2}, {&(0x7f0000004a00)}, {&(0x7f0000004a40)=""/218, 0xda}, {&(0x7f0000004b40)=""/97, 0x61}, {&(0x7f0000004bc0)=""/196, 0xc4}, {&(0x7f0000004cc0)=""/228, 0xe4}, {&(0x7f0000004dc0)=""/32, 0x20}], 0x9, &(0x7f0000004ec0)=""/45, 0x2d}, 0x8b3}], 0x5, 0x0, &(0x7f0000005040)={0x77359400}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x3f}]}) [ 2797.642602] attempt to access beyond end of device [ 2797.642602] loop5: rw=2049, want=22, limit=15 [ 2797.643826] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2797.646933] attempt to access beyond end of device [ 2797.646933] loop5: rw=2049, want=23, limit=15 [ 2797.648174] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2797.653583] attempt to access beyond end of device [ 2797.653583] loop5: rw=2049, want=24, limit=15 [ 2797.654743] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2797.662431] attempt to access beyond end of device [ 2797.662431] loop5: rw=2049, want=25, limit=15 [ 2797.663618] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:17:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2797.669870] attempt to access beyond end of device [ 2797.669870] loop5: rw=2049, want=26, limit=15 [ 2797.670946] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2797.672565] attempt to access beyond end of device [ 2797.672565] loop5: rw=2049, want=27, limit=15 [ 2797.673663] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2797.675123] attempt to access beyond end of device [ 2797.675123] loop5: rw=2049, want=28, limit=15 [ 2797.676109] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2797.678240] attempt to access beyond end of device [ 2797.678240] loop5: rw=2049, want=148, limit=15 [ 2797.804033] attempt to access beyond end of device [ 2797.804033] loop5: rw=1, want=2044, limit=15 05:17:57 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x800, 0x6, &(0x7f00000005c0)=[{&(0x7f00000001c0)="b6fed91a479698d74a8576bc6f2e304113c421e1ce049c60d35b2d22bc158d98e030db7489596f6a1a0d21edb138891aa274be17", 0x34, 0x800}, {&(0x7f0000000240)="d608362f3fa94ca377f69bb2f3c45e79bfc6712e1e1751fc9c", 0x19, 0x1ff}, {&(0x7f0000000300)="b01f325c5e92aa5547cb8285ca7ed9c035b7c598fc7e3b08ca32a86be5fce0ef0e633515dcb82d56a7e78a2ee6c95fa5cef2fb3d76627264c240b62b9876a1048f85e4547642cb168fd600595de5794647d49941cc7fc97fb41fd9be4151287c5ea2a32af1ed54c3a9ef7469565d712541945bdfc47d0af0a10f7775e636d879dc243d391c", 0x85, 0xffff}, {&(0x7f00000003c0)="c213ef16798775c12b588618950ccb6932fcd7083c8914b008604148744db32a9754a6351ed3560c789705c8815108d556608cbfeeb6d66768ade85bbe37dc1c93f3ffdde51927a29c0e9027aca07ac02b8e124cfe8fd69fb6b9cd61e13a0834de06e3084075d2dab88178bca14241055df707cf4ec77be51f3a6ab5402beb5b2e12daf19fb979c78ce11fb7f648ccc0aa630cee7aef9deb52ff7b7caa67d058aeccd4cac444f3cde37012a3e3639625f1876dd79671ccc8a5", 0xb9, 0x8}, {&(0x7f0000000480)="801c9fd518d641d4ad5043c465bbfde70b7b2973f3bac28ddf04f84243144edf47c74f129ef0077633b6451dc1e13676a64693122d28fcf01eadcd686703447fb08097bbc293495b6db26d6dbee890ad2d9cc7e94f92713a94d836411922ee4e6198eb5a801c7b89eaeb6e1f164f483dfe89993d2678cf85976f3bf680cc6195e98cd598e61af30bcf253deb7f9ae117e2d913e246ea96cf398bd58dc6127184e51b6d006c15a0368f2c75066d7df485f812bde1e25bbd69738fcbfe325db16f359e0acbf0309580817f0ec5e262e801e9c6f20bcd1443d337f6fc2cd9e4f90449c40680ad92d3c3b99308d9fe", 0xed, 0x7f}, {&(0x7f0000000580)="e86ac37e23056842dd56ec62b68beee8", 0x10, 0x9}], 0x1008000, &(0x7f0000000680)={[{@huge_within_size}, {@huge_advise}, {@size={'size', 0x3d, [0x6b, 0x6b]}}, {@size={'size', 0x3d, [0x35]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x32, 0x36, 0x31, 0x25, 0x70, 0x67, 0x32]}}, {@huge_within_size}], [{@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}, {@smackfshat={'smackfshat', 0x3d, '-{\''}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@fsname={'fsname', 0x3d, 'vfat\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@fowner_eq}]}) unlinkat(r2, &(0x7f0000000780)='./file0\x00', 0x200) ftruncate(r1, 0x1000003) open(&(0x7f00000007c0)='./file0\x00', 0x8000, 0x160) sendfile(r0, r1, 0x0, 0x80000001) 05:17:57 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r4 = signalfd(r0, &(0x7f0000000180), 0x8) openat$cgroup_netprio_ifpriomap(r4, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000340)={0x0, "4dc368640d928ff18794d859d72e910e"}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2004, @fd_index, 0x800, &(0x7f0000000080)=[{&(0x7f0000001340)=""/181, 0xb5}], 0x1, 0x8}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:17:57 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2798.059848] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2798.077397] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2798.102104] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2798.328798] audit: type=1326 audit(1676438278.125:87): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15092 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82ba4ebb19 code=0x0 [ 2798.383673] audit: type=1326 audit(1676438278.180:88): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15092 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82ba4ebb19 code=0x0 05:18:13 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000140)="20000000000100000c000000d40000000f9060d2b29e539347b7e63bd5b477bd0000000100000000000000000000000020000000200000201c0000d7f4655fd7f4655f0100ffff53ef6cc374ac434958fc618f397cb73fbbfbd2d75df2442dde0467478f7c9dda4ab89368ae", 0x6c, 0x400}], 0x8040, &(0x7f0000000040)={[{@lazytime}, {@dioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@nobh}, {@noblock_validity}, {@noauto_da_alloc}]}) mount(&(0x7f0000000100)=@md0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='v7\x00', 0x10, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@l2tp={0x2, 0x0, @private}, &(0x7f0000000300)=0x80, 0x80000) 05:18:13 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_complete(r1) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x7, 0x7, 0x3, 0x30, 0x0, 0x0, 0xc0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0x9}, 0x40, 0x9, 0x6, 0x8, 0x8001, 0x4, 0x35, 0x0, 0x101, 0x0, 0x5}, 0xffffffffffffffff, 0x4, r4, 0x0) 05:18:13 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000001c0)="eb3c906d6b03732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf23}], 0x1205868, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0xd0100, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) dup2(0xffffffffffffffff, r2) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000017000007002e2fd1f08d6abb"], 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) unlinkat(r0, &(0x7f0000000180)='./file1\x00', 0x200) 05:18:13 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:18:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x9}}, 0x1c) 05:18:13 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:18:13 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x5, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:18:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140a}}, 0x1c) [ 2813.918510] ====================================================== [ 2813.918510] WARNING: the mand mount option is being deprecated and [ 2813.918510] will be removed in v5.15! [ 2813.918510] ====================================================== 05:18:13 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_setup(0x54fe, &(0x7f0000000080)={0x0, 0x9e14, 0x2, 0x2, 0x2f2, 0x0, r0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:18:14 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) close(r4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000100)={0x276, 0x9}) 05:18:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101942, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r3 = getpgrp(0x0) tgkill(r3, r3, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) r5 = getgid() statx(r1, &(0x7f0000000540)='./file1/file0\x00', 0x1000, 0x4, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(r1, &(0x7f0000001b00)={&(0x7f0000000740), 0x6e, &(0x7f0000001940)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/19, 0x13}, {&(0x7f00000017c0)=""/143, 0x8f}, {&(0x7f0000001880)=""/116, 0x74}, {&(0x7f0000001900)=""/13, 0xd}], 0x5, &(0x7f00000019c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x118}, 0x10000) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r8, 0x0) getresgid(&(0x7f0000001b40)=0x0, &(0x7f0000001b80), &(0x7f0000001bc0)) sendmsg$unix(r0, &(0x7f0000001cc0)={&(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000200)="7fb5ec5d13abc98fd95428e0b26267b6489f3a2acc22083ccbf42c7a4bc5c51bb8b56ca3a7711e4c9647d797ca3399cec4eb852c935d3a64c19e6b4733c57d3656cd24a4fc81929c837d337628399bfd940cab365b0ac2693a8e42669af0c7cfe0b315e9179b664b60a63fa513259744d59d5e422880eca54f7c980847cf5c1abeeb864cc3b1c29e89105c5e95c88eecfb088a76c64a998d57ccabafebd85feccc45bd5d0884fd7758dfecb68f3186d4b938be13ca56", 0xb6}, {&(0x7f00000002c0)="c8b9976a8996023f8a3fce6045257b42086f95b1e835b0bc0d7be6aefbdad2c8", 0x20}, {&(0x7f0000000300)="d28ec178c08ae32bfe93c82d8ffd1aa85b4c4e5ab0b298a072f37c097418c3b1e09fa84214e496fdf9cdd8bb3caff7efc87321a2b7a0c76c855aa921da42c77e853a0bdbf45ea2626b116da2c93e474a1488c69e681dbe7d50059df012d99083c08096678e9e60ecbeab658a00903d8806d832b2e40ca1da65c02ffa0afc6ffb6462c697544a328568e3122e02bab84168c870fc2fa9e7a03ac6ef454ab6d2c21abf1111144b1eaa2f4c97c3e5f5c8", 0xaf}, {&(0x7f00000003c0)="f7a00f9a77a30f0f65133a2ca6b19b976db84068f7b1e796b6942a36da97cc3e70743e31447b1b8b402ce59a512afff32f7b1bb63dde3fbd928b2e8ecc5fa8635189cefeea1e2665196ac5dc6ff17e60b72bc6fdd6220eba16069f198aa5d5a077a6d3567866469a263d646a13e531f1e7f505976c8cc4d29fa69a89ac8ce365cb55c6", 0x83}], 0x4, &(0x7f0000001c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xffffffffffffffff, r6}}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}], 0xa0}, 0x4000000) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) openat(r1, &(0x7f00000000c0)='./file1/file0\x00', 0x20700, 0x3) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[{@cache_mmap}]}}) 05:18:14 executing program 7: ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/13}) unshare(0x28020600) unshare(0x8000000) unshare(0x200) unshare(0x20000000) unshare(0x20100) r0 = fork() unshare(0x18000000) tkill(r0, 0xb) fork() connect$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) unshare(0x12000100) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x4000009}) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x80000) r3 = dup(r1) unshare(0x40000) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6b, r2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001900210c000000000000000012000000080000000000000008001e0003000000f8292c146e318a6bfc1332b815bf5a0b1518c44dc3c0c8ef6e376aeeebbdf27b06423cf7d980ac32205f70b821f06d494586b0c6a38860780fbda4e53ab90e88d5b93e917ae47d9dd0467898567db174"], 0x24}}, 0x0) 05:18:14 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:18:14 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_enter(0xffffffffffffffff, 0x1ba5, 0xb1d1, 0x2, &(0x7f0000000080)={[0x6]}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:18:14 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0), 0x48, 0x140}, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f00000000c0)=0x9) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/snd_seq_dummy', 0x90000, 0x84) 05:18:14 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000002000201010000000080000000000000000000000000000000c722701f6239b22be91cacb7fe332a3c0b64332babd39054e73e0936b3306e46acd97303c02dee9eaf250f3e7d4368d90efb9a696eabf6bb09707500e655ef3c5998d42d75bf8cb05a913c4a1a6c983b147981d0dc52037cead7cd7d71c7a6d1f94f89de1ca568cbb92e5dfc786661de7fb75b9051351cd2fe05dfd72156ea5dc9567cf68f4206f5b8b1248ae66341eed36be9db20af17fd4e12f4284d6198d24bbfba38da909e49f8da528af0e9208c09ef42c4978f426c6d592a810fb9757ae66dcbe9c8d73894291f4e601edba4215882fe8bd8a1e0f5e0251d6fd6"], 0x1c}}, 0x0) ioctl$FICLONE(r3, 0x40049409, r4) setxattr$incfs_size(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), &(0x7f0000000180)=0x5, 0x8, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x20d315) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file1\x00') r5 = pidfd_getfd(r2, r2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000000040)=',\x00', 0x0, r6) r7 = getpgrp(0x0) tgkill(r7, r7, 0x0) recvmmsg$unix(r0, &(0x7f0000000c00)=[{{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000380)=""/121, 0x79}], 0x1}}, {{&(0x7f0000000440), 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000580)=""/164, 0xa4}, {&(0x7f0000000640)=""/252, 0xfc}, {&(0x7f0000000740)=""/192, 0xc0}, {&(0x7f0000000800)=""/242, 0xf2}, {&(0x7f0000000900)=""/149, 0x95}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f00000009c0)=""/141, 0x8d}, {&(0x7f0000000a80)=""/192, 0xc0}], 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000000100009d000000000000008bb52317adfa2893732b72d949e2e41010c46e4ad53e8fb4a454a9c1911a1b2d5b54d86cacab125c727af6dad8205ba438a7e00a0758b45d1f8b60", @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32], 0x20}}], 0x2, 0x10000, &(0x7f0000000c80)) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x9c, 0x7, 0x5, 0xed, 0x0, 0xffffffff, 0x104, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0x3, 0x6}, 0x102, 0x3ff, 0xfff, 0x3, 0x4, 0x5, 0x403f, 0x0, 0x6, 0x0, 0x200000007}, r7, 0x100000002, r8, 0x0) 05:18:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:18:30 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf20}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f00000010c0)) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) fork() 05:18:30 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xfffffffffffffe20) recvmmsg(r3, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/65, 0x41}, {&(0x7f0000000340)=""/206, 0xce}, {&(0x7f0000000440)=""/229, 0xe5}, {&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000180)=""/63, 0x3f}, {&(0x7f00000001c0)}, {&(0x7f0000000240)=""/106, 0x6a}], 0x8, &(0x7f0000000680)=""/125, 0x7d}, 0x800}, {{&(0x7f0000000700)=@nfc_llcp, 0x80, &(0x7f0000000980)=[{&(0x7f0000000780)=""/22, 0x16}, {&(0x7f00000007c0)=""/23, 0x17}, {&(0x7f0000000800)=""/225, 0xe1}, {&(0x7f0000000900)=""/72, 0x48}], 0x4, &(0x7f00000009c0)=""/220, 0xdc}}, {{&(0x7f0000000ac0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000000b40)=""/4096, 0x1000}, {&(0x7f0000001b40)=""/34, 0x22}, {&(0x7f0000001b80)=""/203, 0xcb}, {&(0x7f0000001c80)=""/141, 0x8d}, {&(0x7f0000001d40)=""/89, 0x59}, {&(0x7f0000001dc0)=""/23, 0x17}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/135, 0x87}], 0x8, &(0x7f0000002f40)=""/29, 0x1d}, 0x7}], 0x3, 0x12141, &(0x7f0000003040)={0x0, 0x989680}) 05:18:30 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:18:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140b}}, 0x1c) 05:18:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x300}}, 0x1c) 05:18:30 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) getsockname$unix(r3, &(0x7f0000000180), &(0x7f0000000240)=0x6e) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r2, 0x1000003) sendfile(r1, r2, 0x0, 0x80000001) fspick(r0, &(0x7f0000000140)='./file1\x00', 0x0) 05:18:30 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:18:30 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x500, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2830.687283] handle_bad_sector: 10 callbacks suppressed [ 2830.687294] attempt to access beyond end of device [ 2830.687294] loop5: rw=2049, want=21, limit=15 [ 2830.751784] attempt to access beyond end of device [ 2830.751784] loop5: rw=2049, want=22, limit=15 [ 2830.754495] buffer_io_error: 4 callbacks suppressed [ 2830.754511] Buffer I/O error on dev loop5, logical block 21, lost async page write 05:18:30 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2830.802325] attempt to access beyond end of device [ 2830.802325] loop5: rw=2049, want=23, limit=15 [ 2830.803489] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2830.822093] attempt to access beyond end of device [ 2830.822093] loop5: rw=2049, want=24, limit=15 [ 2830.824489] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2830.827505] attempt to access beyond end of device [ 2830.827505] loop5: rw=2049, want=25, limit=15 [ 2830.829867] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2830.832844] attempt to access beyond end of device [ 2830.832844] loop5: rw=2049, want=26, limit=15 [ 2830.835233] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2830.837943] attempt to access beyond end of device [ 2830.837943] loop5: rw=2049, want=27, limit=15 [ 2830.840294] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2830.844262] attempt to access beyond end of device [ 2830.844262] loop5: rw=2049, want=28, limit=15 [ 2830.846588] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2830.849602] attempt to access beyond end of device [ 2830.849602] loop5: rw=2049, want=148, limit=15 05:18:30 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:18:30 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x529, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:18:30 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:18:30 executing program 7: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000040)={0x0, 0x77, 0xd4}, &(0x7f0000000080)={'enc=', 'pkcs1', ' hash=', {'sha384-arm\x00'}}, &(0x7f0000000140)="3d4a0c8f767c49dc410e53f727f53d33bd2d4c2055c72677ba324518e0dc100534626e60b7eb4c358fd3bf74145818439b4a3cee435327167b59712a2383d9cc15f78a44d944cea213e84859e1d44e468d4dde26626414f0d5a2de668fe64dc5164072e55e97b3c4c8284683ea88390317f6def9fe5b41", &(0x7f0000000280)=""/212) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005", 0x9, 0x800}, {&(0x7f00000003c0)="4341000000ff0000d70c665f0405655fd7f4655f000400000000040002b85bd15b41310a413f72a6bb09", 0x2a, 0x1600}], 0x0, &(0x7f00000016c0)=ANY=[]) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r0, &(0x7f0000000240)=""/95, 0x5f) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r1, &(0x7f0000000240)=""/95, 0x5f) keyctl$link(0x8, r0, r1) [ 2831.026507] EXT4-fs error (device loop7): __ext4_iget:4925: inode #2: block 2491: comm syz-executor.7: invalid block [ 2831.028161] EXT4-fs (loop7): get root inode failed [ 2831.028710] EXT4-fs (loop7): mount failed 05:18:30 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000002, 0x30, r0, 0x8000000) syz_io_uring_setup(0x9a9, &(0x7f0000000080)={0x0, 0x2e61, 0x4, 0x0, 0x1db, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000580)=0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r5, 0x2, &(0x7f00000001c0)=""/26, 0x1a, 0x0, 0x1}, 0x400) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x40010, r6, 0x8000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000340)="a404a86bfa82742e4e201c53aabd766859e3d0ce6e33832ee1f9b67b71af8cd6336e64829caa02f152d963c7f78bac17129408757642a64633986ac674076ec910c6409962a58b15557b37934e7de6efdcdfa2b22236cdf42686fb43e377aca4bd98cdd66de0e95d582be20ed8dcc4d7c15c40f6840cc3985455d3197661c97b33b2eff7228b7321133a50c98023b45775b8efe6f9304dc9174674de50af40ee711787c64605164d67195b645ab721bfffd207738e4a3f21c5258b9c3c8ba906d3bd8000d5ca2cf30e1aaa96783d8fa78ae7c0ddcf40e2153b8564c827be4830d91cd750", 0x3, 0x0, 0x1, {0x1, r8}}, 0x80) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xffff}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x2bf) 05:18:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105940, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) [ 2831.062300] attempt to access beyond end of device [ 2831.062300] loop5: rw=1, want=2044, limit=15 [ 2831.081931] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2831.112253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 05:18:30 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x260001, 0x80, 0x2}, 0x18) openat2(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x30200, 0x40, 0x8}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x100, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file2\x00', &(0x7f0000000300), &(0x7f0000000340)={0x0, 0xfb, 0x87, 0x7, 0x0, "208ed2de47249d713e9a71c38522219a", "8b74993a9345f83b489ab778479804a05992e7e5a2ec7164fd5a07660676a6cbe8b8dccdc3ec02ce5229f8c5b95a670d1828de6713043032d2452e3cdcddc5aee048d0737e7b44fd8c18697621812e30dbfe9a7023324f7087d0a12f5596ac5b5c11472d746c0179838d617786195ee49cd6"}, 0x87, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r3, 0x0, 0x80000001) 05:18:30 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:18:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0xac1414aa}}, 0x1c) 05:18:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:18:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:18:47 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020801000470000000f801234f685227b8f44f31be622e", 0x23}, {0x0, 0x0, 0xf21}], 0x5000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x3f6b70af}}, './file2\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x105142, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file2\x00'}) r4 = openat(r3, &(0x7f00000003c0)='./file0\x00', 0x846a2, 0x122) mknod$loop(&(0x7f0000000180)='./file0\x00', 0xc000, 0x0) write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r4, 0x1000003) llistxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)=""/135, 0x87) sendfile(r2, r4, 0x0, 0x80000001) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {r1}}, './file0\x00'}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000001c0)={0x0, 0x5, 0xa2, 0x5cbe, 0x7fffffff}) creat(&(0x7f0000000280)='./file0\x00', 0xd1) 05:18:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:18:47 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:18:47 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x260001, 0x80, 0x2}, 0x18) openat2(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x30200, 0x40, 0x8}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x100, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file2\x00', &(0x7f0000000300), &(0x7f0000000340)={0x0, 0xfb, 0x87, 0x7, 0x0, "208ed2de47249d713e9a71c38522219a", "8b74993a9345f83b489ab778479804a05992e7e5a2ec7164fd5a07660676a6cbe8b8dccdc3ec02ce5229f8c5b95a670d1828de6713043032d2452e3cdcddc5aee048d0737e7b44fd8c18697621812e30dbfe9a7023324f7087d0a12f5596ac5b5c11472d746c0179838d617786195ee49cd6"}, 0x87, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r3, 0x0, 0x80000001) 05:18:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x52a, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:18:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) recvmmsg(r3, &(0x7f0000004a00)=[{{&(0x7f0000000080)=@ieee802154, 0x80, &(0x7f0000000240)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/227, 0xe3}, {&(0x7f0000001440)=""/239, 0xef}, {&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000180)=""/87, 0x57}], 0x6, &(0x7f0000002540)=""/254, 0xfe}, 0x7369}, {{&(0x7f0000002640)=@nfc_llcp, 0x80, &(0x7f00000028c0)=[{&(0x7f00000026c0)=""/195, 0xc3}, {&(0x7f00000027c0)=""/79, 0x4f}, {&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002880)=""/26, 0x1a}], 0x4, &(0x7f0000002900)=""/130, 0x82}, 0x2}, {{&(0x7f00000029c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a40)=""/120, 0x78}, {&(0x7f0000002ac0)=""/184, 0xb8}, {&(0x7f0000002b80)=""/213, 0xd5}, {&(0x7f0000002c80)=""/136, 0x88}], 0x4, &(0x7f0000002d80)=""/241, 0xf1}, 0x20}, {{&(0x7f0000002e80)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000002f00)=""/60, 0x3c}, {&(0x7f0000002f40)=""/169, 0xa9}, {&(0x7f0000003000)=""/93, 0x5d}, {&(0x7f0000003080)=""/59, 0x3b}], 0x4, &(0x7f0000003100)=""/135, 0x87}, 0x7fff}, {{&(0x7f00000031c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000043c0)=[{&(0x7f0000003240)=""/191, 0xbf}, {&(0x7f0000003300)=""/168, 0xa8}, {&(0x7f00000033c0)=""/4096, 0x1000}], 0x3, &(0x7f0000004400)=""/133, 0x85}, 0x9}, {{&(0x7f00000044c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000004940)=[{&(0x7f0000004540)=""/141, 0x8d}, {&(0x7f0000004600)=""/11, 0xb}, {&(0x7f0000004640)=""/68, 0x44}, {&(0x7f00000046c0)=""/240, 0xf0}, {&(0x7f00000047c0)=""/197, 0xc5}, {&(0x7f00000048c0)=""/95, 0x5f}], 0x6, &(0x7f00000049c0)=""/25, 0x19}, 0x8}], 0x6, 0x2, &(0x7f0000004b80)={0x0, 0x3938700}) close(r4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:18:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) 05:18:47 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0xfbfffffc, 0x0, 0x4}, &(0x7f00000a0000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:18:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) 05:18:47 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/94, 0x5e}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000240)}], 0x5, &(0x7f00000005c0)=""/23, 0x17}, 0x20) write$P9_RREADLINK(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="12000000170000300056fea2b1641e00000000000000da1f84412d30aa37c7deb6c31ff366d9e496f9199ae019ee"], 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:18:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:18:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) 05:18:47 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2847.663802] attempt to access beyond end of device [ 2847.663802] loop5: rw=2049, want=21, limit=15 [ 2847.745645] attempt to access beyond end of device [ 2847.745645] loop5: rw=2049, want=22, limit=15 [ 2847.747745] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2847.795057] attempt to access beyond end of device [ 2847.795057] loop5: rw=2049, want=23, limit=15 [ 2847.796192] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2847.807295] attempt to access beyond end of device [ 2847.807295] loop5: rw=2049, want=24, limit=15 [ 2847.808390] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2847.824608] attempt to access beyond end of device [ 2847.824608] loop5: rw=2049, want=25, limit=15 [ 2847.825697] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2847.842934] attempt to access beyond end of device [ 2847.842934] loop5: rw=2049, want=26, limit=15 [ 2847.844067] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2847.854059] attempt to access beyond end of device [ 2847.854059] loop5: rw=2049, want=27, limit=15 [ 2847.855188] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2847.873611] attempt to access beyond end of device [ 2847.873611] loop5: rw=2049, want=28, limit=15 [ 2847.874756] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2847.893707] attempt to access beyond end of device [ 2847.893707] loop5: rw=2049, want=148, limit=15 [ 2847.960451] attempt to access beyond end of device [ 2847.960451] loop5: rw=1, want=2044, limit=15 05:19:02 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000003140)=[{{&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000240)="c00eb942e2f7d914c6cef79cbe0ad9317c9e310d55ac17e55682b04622bb8b2baa24dea8f35b287d80f1450a685730909460e7ea9f948f0d47dd348dc3a3662769db93b9", 0x44}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="01c1e1da5d9367bbe4402443a5463869f6a3af5650e13e04641930f592a4f836b8007ae64c16e6e8ca7a014a93e8e7996ce2151761c91ff0f0a5303e4a7d7bb93f41e1c59d1adbabf192b72b638aa7b799d8af2e2894780e7060f20dd19fd52ab4f84c43c3c03d863612737f41c1f4e015268e6f8c9aa329ee7e5543a698688f8a66b729eba384d3eaeee45bc1c50aeec3486a023fe04c439c5168", 0x9b}, {&(0x7f0000001800)="6592f0c62109c1418e0cfbe644d3b67055b3da35df9ff5edf3f8711d0ad2a9368938c873da78f73d513a6467d8053436728aa09233182e4617eb534d1b85911f306a5eca66d8ba60bf22a23527aec563846fc658df1cf6e9ad72193152625effcb168cda72a1393377ce9791c2825e8c684aaa454b178cd363426716e01f0b348e8548c1c46d2ea4a0607d1db162e565612770677c53df2247670eff1b79ca347580b4", 0xa3}, {&(0x7f00000018c0)="740fce5903d7368654c333563bdecb85c3f7db73013588abcd10c99a50151eb188121ff3476df11fa2a8c0b761d81f28072521186610128e7e5897d4d997fe554f4a62221ed2360ba016889c9e79e5ff94b39871116066aece", 0x59}, {&(0x7f00000001c0)="94370b324b447a519c8fa4301f3c53e9710e821ce8c2258d8ec2509a9fe0a1f4c0fabd3b3f310262adbf314b07cca0da9a1d8c9663", 0x35}], 0x6, &(0x7f00000019c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcc}}], 0x30}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="f09f32c039e8a240d95569c92ae0425bf1889ddff09bb30805fd331dc067457d23219b41174176a8fe90162a063718f34b790e13c39320e5a16a3ba39bae4ebdbebd61a1efcb021243bbdfc90156daee1fc80e2a8e7d19b230847f167c5fd3225f8b423f2c0bf3ec8926b02e8fb640b45e35181cb929192bb2bfb425782df2067a", 0x81}, {&(0x7f0000001ac0)="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", 0xff}], 0x2}}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000001c00)="d694458461808cc281026d9b12342794a1beda48ea25c34fdf35", 0x1a}, {&(0x7f0000001c40)="87551bebaee124daece6a6d51448236fedc73e2afed56544bc720ba6a9050179f5e360bf8b7459da021077882cf5ed46e7b79a59a3ae401f90acc8e001e6586bff3eaf6cb290c0ebf4689a4d19a3b994380579c3160ea2ee6c0cfaa32551db2bd2599a1ea8037d3dd67bcc05117f89c14016448b03dba00417c885eee770b2bc4fbedb978c493cc1f18dcfc67b", 0x8d}, {&(0x7f0000001d00)="8a09ad364c89f6363da95009220b1dc6521b52b706276b", 0x17}, {&(0x7f0000001d40)="5f284a27a5573a4512542b79a3aebe1e5addc1af1cea06179fb01ae6ba22ace7fbc51189fa8d6cc559667739be5882c0d42d7df7570e3dfcd14abeaac9e08f220d1d3ef7542b9ee7a9", 0x49}, {&(0x7f0000001dc0)="9442203eed6371cd70ae56ef065da315b43709eed17a6eb24951bd0bd432670db4473a7829e6021f3c0ff914786cbab4151aa3f28a285fd31f2d2bb5988637b8676054", 0x43}, {&(0x7f0000001e40)="f49a89b45d6bc412bc2772dbfe0865a59f6c254678ebd217c7580727ddf92089fc79c227cf8bcdc9d39797bfbe34eb7ae1a86b4c8a5c5c63aa733cf3644889106b45464d142cc8d42879ab956b1faa43402d4dd906ac5eddd91fa5cf81a8a81d30c68da1727beab039256d669268e9a2509a45054f0f5d", 0x77}, {&(0x7f0000001ec0)="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", 0x1000}], 0x7, &(0x7f0000002f40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1e1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x285e}}], 0x30}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f80)="485a5cf3f1de8efb2a49498cbe7d3037935f4c8eb97f375a16cbccf73ea5c50c162ecc9d500d4a4094dbde579744197d4e2541dddf3d8c95c205160ab39a4965b1c5d9ceeac300976c71632fc3df0e5052c41a35ebaa593c529c53efa01140f16af1e1f5fb91890e24e5f20aa7df1ab3c93f2cb400fc50f49e5de6b5a0e95556bef70ce93ba63b26babcefb6df83115e5ff11891d2a05e669209fd4338a51a2e9697b9ce247beba9183b1f4fe51950356682805964", 0xb5}], 0x1, &(0x7f0000003080)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @dev={0xac, 0x14, 0x14, 0xc}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010101}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0xf}}}}], 0x90}}], 0x4, 0x891) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x20, 0x1ce, &(0x7f0000000340)}) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x7489, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r5}, 0x0) pipe(&(0x7f0000003240)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r2, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_capability(r6, &(0x7f0000003280), &(0x7f0000003340)=@v3={0x3000000, [{0x2, 0x9}, {0x77, 0x4}], r7}, 0x18, 0x4) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r5, 0x0) 05:19:02 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x52b, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:19:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) 05:19:02 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x8000, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000180)={0x260001, 0x80, 0x2}, 0x18) openat2(r2, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x30200, 0x40, 0x8}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x100, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file2\x00', &(0x7f0000000300), &(0x7f0000000340)={0x0, 0xfb, 0x87, 0x7, 0x0, "208ed2de47249d713e9a71c38522219a", "8b74993a9345f83b489ab778479804a05992e7e5a2ec7164fd5a07660676a6cbe8b8dccdc3ec02ce5229f8c5b95a670d1828de6713043032d2452e3cdcddc5aee048d0737e7b44fd8c18697621812e30dbfe9a7023324f7087d0a12f5596ac5b5c11472d746c0179838d617786195ee49cd6"}, 0x87, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r3, 0x0, 0x80000001) 05:19:02 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:19:02 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:19:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) rename(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000180)='./file1\x00') 05:19:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) [ 2862.714763] attempt to access beyond end of device [ 2862.714763] loop5: rw=2049, want=21, limit=15 05:19:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) [ 2862.801362] attempt to access beyond end of device [ 2862.801362] loop5: rw=2049, want=22, limit=15 [ 2862.803419] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2862.848535] attempt to access beyond end of device [ 2862.848535] loop5: rw=2049, want=23, limit=15 [ 2862.850514] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2862.856231] attempt to access beyond end of device [ 2862.856231] loop5: rw=2049, want=24, limit=15 [ 2862.859754] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2862.864483] attempt to access beyond end of device [ 2862.864483] loop5: rw=2049, want=25, limit=15 [ 2862.866768] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2862.870585] attempt to access beyond end of device [ 2862.870585] loop5: rw=2049, want=26, limit=15 [ 2862.872848] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2862.881858] attempt to access beyond end of device [ 2862.881858] loop5: rw=2049, want=27, limit=15 [ 2862.884161] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2862.888780] attempt to access beyond end of device [ 2862.888780] loop5: rw=2049, want=28, limit=15 [ 2862.891098] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2862.894316] attempt to access beyond end of device [ 2862.894316] loop5: rw=2049, want=148, limit=15 05:19:02 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd70e47aeb32254100000fb73f11ad37e88535976024d5222e30d1990007000000390000000800a003250e8f00080026246c0900e67a950182a0f836012dd2bf08de55a0ee9af093ef2b755514ae032b2dd3dd65"], 0x50}, 0x1, 0x0, 0x0, 0x4e40299d7dc23cbe}, 0x20040000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r7, 0x0, 0xa1, 0x600000000000000) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000100)='./file0\x00', 0x4, 0x4400, 0x12345, {0x0, r8}}, 0x6) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000875000/0x3000)=nil, 0x3000, 0x3000009, 0x8010, r0, 0x8000000) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r10, r11, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r12, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r9, r11, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r4, 0x0, &(0x7f00000001c0)="bfe4af282f23819097f34561997295227ec2f59c522866847eab04a079230ae3f41444ab8678ec89b00ea96f9fbfa98699a4", 0x32, 0x40000000, 0x1}, 0x3ff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000400000/0xc00000)=nil, &(0x7f00006f2000/0x4000)=nil, &(0x7f0000dc7000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000bdf000/0x3000)=nil, &(0x7f0000a9a000/0x9000)=nil, &(0x7f0000ee9000/0x1000)=nil, &(0x7f0000f40000/0x1000)=nil, &(0x7f00004e6000/0x1000)=nil, &(0x7f0000cb7000/0x2000)=nil, &(0x7f0000000340)="719b61c150f2f273b1a38bfba246a3d28b49ecbffd1fb329b43e92c17af4a00a385b66ee1495b35ffe6e99ad921a43fd2b833a1c9ee4fc143fd3d69e8043a8999d8ea455d814db8508eb50500b504ea88268440973a2f8ad611886c022cfa5410e4534479daf653fbc8bedbbf63163f4059608c6ccc203b5b181844d381c2eaa0f29e7354ca80cc146d1014718755bcb15cee0126c4b3942fa762ad4202ae57c4af4102c16fc3572df3834feda1a22986ba9e0abc36a03da9ddf7760c8865262440d146bca349f551ddad4208fa3138c93d9883eb9ead4ed4cfe1062a6a53bacc79d71b40fbacd9be62be0383008edd787f492a16e1ed6bb5b", 0xf9, r0}, 0x68) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBMETA(r6, 0x4b62, &(0x7f0000000540)) 05:19:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 05:19:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) removexattr(&(0x7f00000003c0)='./file0/file0\x00', &(0x7f0000000400)=@random={'trusted.', '\x00'}) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x30, 0x0, 0x2, 0x801, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x30}}, 0x801) ioctl$FIGETBSZ(r2, 0x2, &(0x7f0000000300)) ftruncate(r1, 0x1000003) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x400c1) sendfile(r0, r1, 0x0, 0x80000001) [ 2863.069207] attempt to access beyond end of device [ 2863.069207] loop5: rw=1, want=2044, limit=15 05:19:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:19:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe}, 0x1c) [ 2863.410035] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2863.435090] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:19:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x50}, 0x1c) [ 2863.447711] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:19:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x52c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:19:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r5, 0x1ffe, 0x66f3, 0x2, &(0x7f0000000080)={[0x2]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f00000007c0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @mcast2, 0x401}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000180)="fc23594c1fc06608bb571eccef", 0xd}, {&(0x7f0000000340)="571e97182882f1ee4cf7e6544efdbe2b56367fa778488a08b1c3b3161c5f2ccd4a086ab101a13c28b7f44911271b3483e1a34333a262be6dc7e4c558d822dd36c44eb0ed40fd24a19eb0f6f3c570b816b71ce32d27933c4df9687c3c73d22d997fa73c086a90e64a86a68c6010ba0177111e7166599cf6c0d2f49bcf5d5773e63770013a80eebaadbe9d0fb9b5d3595b2be277ec108fef41e6f272e26ac0432f7362419d41f543e416df3e52c5540bacf4ca513dbd3294450c39847f3c2d9aaf3ac6a16faa1fc96629c3de9aa21086ec9790da3f79edac96339c5edaf4781e25b539a3882c40d2f43f7324062b2b30e5ca88a14d14", 0xf5}, {&(0x7f0000000440)="0b21371a1dc74c2972a484db01bfb0d7995ffeaf8fe8925f3e2af6e2a84cf3f9277021dbd4aafa00a128e2b7e3deb398b8cd917c7eeb69537f60b6a22754934d73cea137bec42f5fe761bd7558f45e714aafa4cc107419e09fbf28e56ea5f22399cfe974bf192ed23a98ea341e24d7e9f77bf7fe745be2f5d6c4288294b8835c1fc8bd540aea6b7d3f7d9acc5c6404b82a6672936434ffef2664aac75fd07b4d5f6cd311a2f9e92c7a4827d7354cf4fd62a0d5e0765b4dda69846c7bd453498d91606b3af438c94181aeccbcb3a287f8d4d11a02a91a91c86e", 0xd9}, {&(0x7f00000001c0)}, {&(0x7f0000000540)="eacaf627eae1f66c361d1f340c41bc63fea4577e1e89a21eec041d3b9b6049ca8d50bfe46e66bf643504a1832925a237c5bcdedac99b7360d17184cd373be18d9b994b323d7eea75ffafa84cc19dfab4444e3ba97d5860db80222b48512a14fb4641a338d1cec984fe402c1be9aefad63b74763a51f2f1d22c8240addd35befc19c8697c94c69b6970fe37d751685f943f1a802437717e458408ba3f627da82d88acab91145ea1292dfd41762a24d0e03b5169d9e5703f6e4d2182b13c2f1bd1cb9df0bf4ab5426ac33dd652eac5837219fd566098825b", 0xd7}], 0x5, &(0x7f0000000640)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0xf8a}}, @dstopts_2292={{0xe8, 0x29, 0x4, {0x2f, 0x1a, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x48, {0x1, 0x10, 0x7, 0x6, [0x2, 0x5, 0x2ef2, 0xfffffffffffffffd, 0x9a4, 0x2, 0x5, 0x6]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x0, 0x12, 0x1, 0x8, [0x1000, 0x8001, 0xfffffffffffffc01, 0x80000001, 0x7, 0x80000000, 0x5, 0x8f5, 0x7]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x2, 0x6, [0x6]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x3b, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x0, 0xfffb, [0x4785, 0x6, 0x4, 0x9, 0x4, 0x5]}}, @enc_lim]}}}], 0x170}, 0x0) 05:19:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:19:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) 05:19:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:19:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfc}, 0x1c) 05:19:03 executing program 2: r0 = syz_io_uring_setup(0x84d4f, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x0, 0x12, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r7, r8, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r9, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r4, r8, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x3938700}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:19:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x1f4}, 0x1c) 05:19:03 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x101a0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x3f, 0x0, 0x2, 0x81, 0x0, 0x101, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x165ffecb, 0x20}, 0x5000, 0x6, 0x40, 0x5, 0x1, 0x3, 0x9, 0x0, 0x6, 0x0, 0x6}, r0, 0x10, r1, 0xf) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000001c0)=ANY=[]) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) copy_file_range(r3, 0x0, r4, &(0x7f0000000040)=0x7fff, 0xa1, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1030c0, 0x4a) open_tree(r5, &(0x7f0000000280)='./file0\x00', 0x9900) 05:19:03 executing program 7: syz_io_uring_setup(0x109c, &(0x7f0000000040)={0x0, 0x7228}, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0) remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4, 0x0) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4) 05:19:03 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r5, 0x542e, 0xc016, 0x0, &(0x7f0000000180)={[0x5]}, 0x8) accept4(r3, &(0x7f0000000080)=@phonet, &(0x7f0000000100)=0x80, 0x80000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:19:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:19:20 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x32f1, &(0x7f0000000080)={0x0, 0x823e, 0x0, 0x2, 0x39e, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000180)=0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f0000000380)=0x1c, 0x400) r5 = socket(0x11, 0x3, 0x9) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r8 = socket$inet6(0xa, 0x3, 0x0) fadvise64(r8, 0xc8, 0xcd, 0x5) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) syz_io_uring_submit(r1, r3, &(0x7f0000000440)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r4, 0x80, &(0x7f00000003c0)=@xdp={0x2c, 0x0, r7, 0x23}, 0x0, 0x0, 0x1}, 0x20) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891b, &(0x7f0000000240)={'macvlan0\x00', @ifru_data=&(0x7f00000001c0)="f128f5f36c538a6d0b72a4e126829097d5f180bacbbc01deeafcfef79888dc3b"}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r9}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'H.245\x00'}]}, 0x24}}, 0x0) ftruncate(r2, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:19:20 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) 05:19:20 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:19:20 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xcc4, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2880.759542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 05:19:20 executing program 7: r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000000201010000000000000000000004000380040002800000"], 0x1c}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r3, r0, r0, r4, r0], 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x9) syz_io_uring_submit(r1, r2, &(0x7f0000000540)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = inotify_init1(0x180000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000180)={r7, r8+60000000}, 0x1, 0x1, 0x1, {0x0, r9}}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x186000, &(0x7f00000001c0)=[r5, r0, r0, r0, r6], 0x5, 0x0, 0x1, {0x0, r9}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000080)=0x5, 0x4) sendto(r10, &(0x7f0000000140)="3ceb226d", 0x4, 0x0, &(0x7f00000000c0)=@nl=@unspec, 0x80) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) 05:19:20 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:19:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x218}, 0x1c) [ 2880.791832] handle_bad_sector: 10 callbacks suppressed [ 2880.791848] attempt to access beyond end of device [ 2880.791848] loop5: rw=2049, want=21, limit=15 [ 2880.798780] attempt to access beyond end of device [ 2880.798780] loop5: rw=0, want=21, limit=15 [ 2880.810067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 05:19:20 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000170000071900696c65300000"], 0x10) ftruncate(r1, 0x1000003) open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x8) sendfile(r0, r1, 0x0, 0x80000001) 05:19:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x240}, 0x1c) [ 2880.901853] attempt to access beyond end of device [ 2880.901853] loop5: rw=2049, want=21, limit=15 05:19:20 executing program 7: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x80) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}, 0xca0cc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) copy_file_range(r0, &(0x7f00000000c0)=0x401, r0, &(0x7f0000000180)=0x8, 0x5, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20301, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000400), 0x2000, 0x20000) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f0000000440)=0x8, 0x4) io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x3000000}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) [ 2880.997309] attempt to access beyond end of device [ 2880.997309] loop5: rw=2049, want=22, limit=15 [ 2880.999335] buffer_io_error: 4 callbacks suppressed [ 2880.999347] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2881.041408] attempt to access beyond end of device [ 2881.041408] loop5: rw=2049, want=23, limit=15 [ 2881.043473] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2881.074224] attempt to access beyond end of device [ 2881.074224] loop5: rw=2049, want=24, limit=15 [ 2881.076408] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2881.114584] attempt to access beyond end of device [ 2881.114584] loop5: rw=2049, want=25, limit=15 [ 2881.116772] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2881.130721] attempt to access beyond end of device [ 2881.130721] loop5: rw=2049, want=26, limit=15 [ 2881.132675] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2881.145218] attempt to access beyond end of device [ 2881.145218] loop5: rw=2049, want=27, limit=15 [ 2881.147417] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2881.152960] attempt to access beyond end of device [ 2881.152960] loop5: rw=2049, want=28, limit=15 [ 2881.155001] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:19:37 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) 05:19:37 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f00000000c0)=r5, 0x1) 05:19:37 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:19:37 executing program 7: syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d706fb5e25605a14d621c34e61a56a2838621393d707265fe54878a302d3000312f312c0020a58c5c8fc88230771190"]) lsetxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)={0x0, 0xfb, 0x66, 0x0, 0x62, "fddd5d46836f039b644bf13ade0fcad8", "91fce6cefb518eeed2a419bf61f6f1f0552d8577052e69c052f911ef432c8aa6135083659bc6a8e466cba3df659c4db8b744482b323baca39fde8cd023ce71605959502aa5ba96461ec0c28a4ed2689fe4"}, 0x66, 0x0) 05:19:37 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:19:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x300}, 0x1c) 05:19:37 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:19:37 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x4101b7b4412a505a, 0x11) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) [ 2898.072648] tmpfs: Unknown parameter 'mpoµâV¡Mb4æV¢ƒ†!9' [ 2898.079962] tmpfs: Unknown parameter 'mpoµâV¡Mb4æV¢ƒ†!9' [ 2898.094477] handle_bad_sector: 2 callbacks suppressed [ 2898.094489] attempt to access beyond end of device [ 2898.094489] loop5: rw=2049, want=21, limit=15 [ 2898.174163] attempt to access beyond end of device [ 2898.174163] loop5: rw=2049, want=22, limit=15 [ 2898.175503] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2898.208893] attempt to access beyond end of device [ 2898.208893] loop5: rw=2049, want=23, limit=15 [ 2898.210210] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2898.231853] attempt to access beyond end of device [ 2898.231853] loop5: rw=2049, want=24, limit=15 [ 2898.233182] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2898.249819] attempt to access beyond end of device [ 2898.249819] loop5: rw=2049, want=25, limit=15 [ 2898.251086] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2898.270355] attempt to access beyond end of device [ 2898.270355] loop5: rw=2049, want=26, limit=15 [ 2898.271670] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2898.278684] attempt to access beyond end of device [ 2898.278684] loop5: rw=2049, want=27, limit=15 [ 2898.279997] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 2898.290844] attempt to access beyond end of device [ 2898.290844] loop5: rw=2049, want=28, limit=15 [ 2898.292049] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2898.300190] attempt to access beyond end of device [ 2898.300190] loop5: rw=2049, want=148, limit=15 [ 2898.469314] attempt to access beyond end of device [ 2898.469314] loop5: rw=1, want=2044, limit=15 05:19:56 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) 05:19:56 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:19:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3e8}, 0x1c) 05:19:56 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:19:56 executing program 7: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x10, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:19:56 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x40010, r3, 0x8000000) 05:19:56 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2905, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:19:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/slabinfo\x00', 0x0, 0x0) openat(r0, &(0x7f0000000140)='./file1\x00', 0x8100, 0xc2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000017000007000f2f66696c4530"], 0x10) ftruncate(r2, 0x1000003) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x80, 0x8, '9P2000.L'}, 0x15) sendfile(r1, r2, 0x0, 0x80000001) [ 2916.750561] FAT-fs (loop5): bogus number of reserved sectors [ 2916.751941] FAT-fs (loop5): Can't find a valid FAT filesystem 05:19:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x500}, 0x1c) 05:19:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_io_uring_setup(0x4f47, &(0x7f0000000240)={0x0, 0xa7a3, 0x2, 0x0, 0x82, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:19:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x600}, 0x1c) 05:19:57 executing program 2: r0 = syz_io_uring_setup(0x498f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000080)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r4, 0x80, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x810, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, &(0x7f00000000c0)="5266d98d2de2e6dda2857c36d2daf83d310a44536d61d6fda159dfcb71c5126a3d889289001303aadb927c3394088ea9b1de65934462451a3a0b73ae48e006747484ba7cddba4b2694e982afb39b544a54d0ee7b86c5a45602", 0x59, 0x261d17f0ae85fed8}, 0x0) 05:19:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x700}, 0x1c) 05:19:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe00}, 0x1c) 05:19:57 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a05, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2917.593225] FAT-fs (loop5): Unrecognized mount option "" or missing value 05:19:57 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:19:57 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x6}, 0x1c) 05:20:16 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) openat(r1, &(0x7f0000000000)='./file0\x00', 0x4101b7b4412a505a, 0x11) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:20:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x1802}, 0x1c) 05:20:16 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) 05:20:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x301000, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x426f, 0x385f, 0x0, &(0x7f0000001100)={[0xffffffff]}, 0x8) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "46dacd8396fe92"}) r9 = mq_open(&(0x7f0000005c00)='-@\x00', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000007640)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}], 0x4, "9755154351ac9a"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000009640)={0x0, ""/256, 0x0}) mq_timedsend(r9, &(0x7f0000001e00)="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", 0x1000, 0x5, &(0x7f0000000000)={0x0, 0x3938700}) mq_timedsend(r9, &(0x7f0000001200), 0x0, 0x3, &(0x7f00000012c0)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "c009b39830e4109622d7a29d0bd42e6d365c8384f665a2104b6faaa5427626b93311e77f0de4211e1217bc355a5246327eb7ba126bf7e4adb45535a4d9757c77f555e42c9254e9f9089be590271f821f5f6b632da2dabf1d6e618629da57a34a33f5e913338e628f32d84f60dbb9f94b70f1828e7d652bb2443c02901738d15cd72d14288f0d47dfe96e49988d0402f96628f97be361723e018daf71ab695fa4726664c00ec9aa53b8c092760da4cd088f03fad6504eceb8949dc35abc6c9f51916777bc38aa3669fb220546dbd1024eb87da205b46ec35180a8fcb898160855b5044023da75f2b1f285c1462a8afa95492a14be3f42052ff535612d226506a0", "7374bf600a2dbb0a10a4446998c60bc654676f080ecee8672b9b990319e9f34b4c45be9b1cbb8fbe1f4541599e2a8deeedad6067575d671432b4ba4028542704ab850b2cd326bd5a16431e3e06cbefba068d34f999e863befaed31fe2f898bdfe4043148f4d1cc27af274cc202dd9cd92b1891ba85c4048baa5cf0aa7a3d5dbef19adb89a7123a5c5cf1f42650df4c63aa25c0c5f606a072b8c1910206999409a39439cacd824f129adb4177e14f533050e77cfd6b9e760c12899b047feb4c8e5b746e5570db48fc8fafeccf98bad6d99a585091b403666ded97ce43cdf6dd1791052bc149861ea2585dfb28b538cc9fe6ffc5e07182615951fd668085ed124af574a07e3495491f19b1aa2a3b69028ccacd78524d988b224ab17ed905da0b840b4a9939e2af6efdf4221126075a8964d904883db014031e0924681a4ef3795071b256b75002a7df298c87c565b1d8a331e7d0c1000e1d707100917dfe107f87ebea9dca1b708b01cacf1c9f348c0d0fd64aa64193637c7169264d06f613c41be60f39b0cc9d813ae5fca2222832f86f2ae87e883efd48df36d16e6c1ca5c378f6ff0fbace91eb3099d744b16171fcc1ab7d5456392f0878ecf27e8caad7386663de490c3044eed7e7cb83e675716eda0cc09f219aadddd814c88048a7c6cefe69a79f2f7a234cfffbf19ac7a9f6ef59faf2776ac3d636904ec1bda09b1c9d8caeafa918983215d866f5cb6f1088e7e99a43425913d258a3dc8550fcbca3e0bec47503e24d709dd1fd1bb3cd92837d10387a0eebb98aab27950a2a66dc0b9bad3e4ef6393036d64949931ffe6479073790b3b885ac8563d4018e9227d644864c17f048daefbb192d15b56a2a440ad6d4ef5af2ac9904d8b69c64d2368928d7595594e6c3fd23229cb6aa80ec308301b1c94777900d34b1b3eea03dca765036a3f5351551affb585f22541074380b60ca062bf8a8a2324fe61ecad5733aec51e0c5ddc648280556b8a038b5816947b1637ef598cfd134cf9833d875fd23d22f5f74e74a4634d50a3ac908eed128f4297924296d95361b9504c08df4a0603eff93ee34bd45ed12e8d06b8f399fefef4ced732aad15b70f3e276101fa4b5a5c17435d0999b3345ccfe853c955e8b7927c7a171506b8e5b4de8a68cb5e80c3709a0e15643b5772d82d04859133e09fa8ab81ac042e67bc918f2847af14a4eb77c3fcac3132ec1af5a57d85acb9ce91d9d15019904396737ade63df938e6f054f8ee21e8994d45b0801ccd8ae8bda90128cb05eddd297d800412bc01fc5cfdfa9d473641fffc793b513da3f7565a27c4ff3678ac6f71560cc6cc95fb4d20f85b7934cb4a4f614182d331ab53b6a09ff47fc272b6c1f5aaca477bfdfed3fac942d639773b7a5656c526eb595d6fa9d301c425947f37088447cb4400c37750b76eb6c1f7933e43b27224c2fdc053e55125d00ab11428af674f58bd5c3ea1ce4762856afccbd37dd59a5e726f2e5e770bcc8372304fc2a33611234e3b0d411fcae8691e621b64581dc32b3d97c02920877b2c995018dcfff2da8687bc64332cffc3d355931561dc799d169f61d121f242dd3605e3fef8a46bf73998202d6a87671719896c61d729006104bdb7e926020f28260c75c2c754e5f073097d7031567e62cbfcbff541702cdaf498bbfe01e2948e6e164271ca4ab4df68a1569d29d3ce7029c0b58d2a1e6d179fa817ec9df17195c8b83a7a7508f18f0e3d07e8871f331d7a151bc11301c7dce402e6a5fda6f3096df2ddfeb48b3991e055c55d2a071ed66bf378e5c451f849cdbd7951cacad16d6b5734b71db866e77086bfab1797942633ec688d78bb2fccaae2b0e796b852b278bd4a4648d0811293e1bfe68e30b42eb27ac0a4e435e086b4cfeeb9fa539f0d800b6108e4c7b9d7237746770a3f3477646b7c9bfd2bc111679d40bffe221be492ba984df6cd4d7d8f9cbf7185e79804416be68d8a2bfa28e5bec4b57bf5f08eeecafabccd55744e49bb4a7dd1324908d91762b9884e7268d0bb6290be3b51091ae6ccf2ebbd4945dd7913bd38509a00ce38d955909bfa1f3740fc123a12e15b853b59b9b691460afdcda150d39e566a83eaa0c3b7bac9819bdbc7e0a620206be87ff2f8ea8091dbffa014d2f2eb919040a434cdeb3db68adf845d2ba751dc0e1ce4afd8672a5ecf0653b8c672c3265aa236a174185f4b4a291bda664bb79c13f8b6932a831385773898d194d2500b38fbfff8c4acafa5a80dfd3f1f906132885446f9f7ad787dbbdab593661ab1c255df879eaf4ca739deaa11379a5c6b650472257fa54b646b29ceb3dbe27e3584914f9f766bbbcc67abeffebb0df881a42b8671bba930b04d1d7710cc15d546ee69ad40e66f04eb28af8bd17b739e68ad75a239303fb97b18f8f08d2f95bdae0f245ebdfc3ecf555a6fd53f5a35af8b2dd016b227d209fc8323a7576e66a9913a0ad4f19d30d2b6f25ac8b5b6c762e2c68c76f9bd7818adbb3c9b194c09471482ec6898754469076b8674ab9e26b5977a0fa693160f18a01d2f2c362186ff75c205cec261d9e6c431ee672e4056b7e458ef02dca1167d09de5977210461758ed506290477a63c5af0698a1f4edf3bc569692bc9febd5fd641860dd34a6926af47ae7bdd3cce59a5b24b6944075e30ec2f2dbd043ebc57a39eaa5559bc4f21f08198e0daa2e8506b21160c8f9b629ad0e80d5e99e5cf4c4ceefb8d9fe5493ebcb066a647269fef2146f1ed55dac66974446e650e49db26ceb24c16c24885a2d2d011d11ec52d5b7a9c8096314d1dc7c992a1dee70be2fc0cc2d9fc94b0d02d479f6f4bfd3fa20df42568e27c0cea6caa1028d5dfbe6a9657053c06132387f9abfbaf93d9b335b69b168bf7fdaa0a44981dadc3358b50f1b24d390f8858d6775fa838388ff8a69b02bf446028485ba9e0c15731288c186b3cdf2fbc088f13f50e5eecc9b3a058d1369b7a254f11aa81a5fabd862bfd5226ce26e0199ef241badd55ba0d6087e9eb1661111a6afef1caf2bd54832bb5a3e8b864c8af220a8a115746c1646e78471ba2edb7c63fcff7f6be047a5f740525fbe5e259beee146dc2a609d3fd576e826ee1e4fce8ccbf75aa713514bda04ed4086cdd11a770cbe5782bca23f5f3ad8682609d5c5d4e5ca4e117d7423740b41081c6945b446223bb435c6ae2314552b7bf53a8b2c8a7a2a961d17315e0f7a660624b119c89ae81d2214b03cd79bc3eb355bf06811d7186b1f0a7219dd8d4096cb0df940719279357b853bc7c5bcf645aa65c12227859ce0851953fcefa6051f2a31e3666abde9ef1ece3eba658de696edf5d87a7d562dfe1f6bb9ac5e6773bc9069c732683715868cf14825345fb60665982549b9bb7c5b7d934ed0c4d136fa089f8459d473bf1ee678cf88c26f4f5ac681aa6dbe6ef78c26e7a3649ae0574f550f9fc64e8caa14586cbc43d8ec72a3170fc4f6c78fdbd40332c1f35adfc04be68a067f2c03325d624e21fa0e1fa6ea879caa84665bedefcd19759872824a0053a110af2b6099d8ea572b0c81cea39147bb2dca0eaefd4be8c3b59b98c27049f04ae5f3652ade0e1561238296d17979581b93d0ee26464fb5675b968cbc397558207fb1d5365f73994c0c8f2bcae0164e74d602a4856355b214af58b6357b2505779260ec73929eb4fe1047bbc2a125ff6c88718d2b8b8fb9c0d1cb1760748ffc5e4998dbaf8fad99df26b2eaf99bce2541d287b243d7b9cf0ecb25588d14c6228a6cb5413f48e3d07817d258c45ca0ab3494ca5b59f87abdf38e439b4a31d60d9474a52e465f36dd0cd56f00d4e5e563bfc6421b40a7522eb71894a698c19510fa7dc690b6b3f782d88e61ca635d5efd4c9c1725dbf24e0c8e246a2dc979e4750de8347687038f0441858bdf5a06bcba827d8d1327601943ca9fd004c121034fa6e1c8b9eff5da764961f5700eab97380e99b37f302239b528b36f5c9bbebaff25edae48fbe59dd272099af5c695a19b62f64485ba01ae8416c02f04360be933b8ba8a49c6c1188a78c3d36d0c61f61b4002bfeb669e29bbcb306f573528a749b085500c7649aea469fca867da4ca9eaecc75a70f41baeb80bf803402a9066dc1e8243192b78533e0ad590e14fd2bf2ce3ac943ade1fcefd247406785ee387d18e9afe8845481748fbadf4d081e01ecce50ef1fc5b457fa296b833d77390764e2af12f7930c6334476dc4cf45d9f272e364336810c11318bd0a95233005d66fe81a5708ae5fad8c7db17e6d97d2340651f7aa7a36e132a77a7a6206b36a95ccb5a48cb19bd3bb886ff0e77bc76653912149ca85895c4f80c373cbbd4305a91213e8ec5b7b18d8587d723c18f02854556aaaa540935eab2b7470a7c1c40c7e843ac1221a51e92eb05af2342fea7c853a46182c8384612aadb40145b95de565140003468eaca74b38bdf4dc640d0af80c3dd81747652c5fe15ffff8965a150a4ca6a9d9c91d067b4fac49b23cd2041dfdab22126c97d812b67ed638cc65d75d836bf439807cd7cd3cd0e6b30c81983e3f45a00282a14d401d81ac7c5544510dc7d157eeaa18b09df5ec949a22d7342b5b720b2a47251e995410f9b35d90824c1b19beb8575c9efe2aaa2a2011790a1099a924c01ca835fb7cc561eb2310a5331d4d9c4a9ee03a5f1364c17a7f4511c0c1b929c630cc110696f9e94b4107d0b75338fda2c5e0b8d46d19b98071e328f57debd56b4a0a9009913ac41518a08e6fa533edf20db0dc5eff43cd3ead623fc826ac03925490537d6b6a47f27031faa17f9852a3cb72d2088f33d35846a40758e60dab4b3980d032adc3e4faa61ff8aaea6b08bc9705cf097701e9af550fa43ec06c0ae2257927eebcbbbf4a05ad8097597943d6aed8a950ba32bc0d19827539019397e2fffa5f7379ffd7ec266f0c1cd947aab0c9e73c2796bd4c32fa0a0effbc84570efdebd3ac1eb57cc89cdbed91ed43a64cccfeba427a017a07d84acc850a45e2f26639598ed061ea81b60fb1873983591d446129ba8b27a4aef3311292017e3cbc00533824888ef80ef1a85c86a370dc11694d2f455e04ceb8811afa53aac77c65b38703d18167aedcc077c988dd9832ee1999a82c8752b921bceae484c19cee6828eef373c979b5c3f208080c8dcb38c53e384bebed6c41c3b9d6958bd2b952d82d17b262dbf30f90ab5c5d197ccee9f6b6525928b0100ffdeace644e159500495ff5a0ea7df7b9ab63617e3879818e25341e97d839beefdf248222cadd61a5d76b1ff34704bb78656afef7994904da269f973598217edc3be93157185aa15ef225f6471d7786a5e28d0f145b96566e101bf46723486867b9aa90f9eb4d1f5612d4950160c1504a367daf984"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001300)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {r14}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000000100)={r14, 0x1000}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000060f40)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000061f40)={0xe137a7a, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14, r17}], 0x1, "e0ee3eb5edb679"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f000005f600)={0x1f, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}], 0x4, "0674dc203698fa"}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:20:16 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x404001, 0x24) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r2, 0x1000003) setxattr$incfs_id(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) ftruncate(r2, 0x350) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat(r2, &(0x7f0000000380)='./file0\x00', 0x400, 0x0) sendfile(r1, r2, 0x0, 0x80000001) 05:20:16 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:20:16 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2b05, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:20:16 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2936.424411] attempt to access beyond end of device [ 2936.424411] loop5: rw=2049, want=21, limit=15 05:20:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4000}, 0x1c) [ 2936.500636] attempt to access beyond end of device [ 2936.500636] loop7: rw=2049, want=21, limit=15 05:20:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000080)={0x0, 0x4, [0x6, 0x6, 0x4, 0x6, 0x2, 0x8]}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 05:20:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4002}, 0x1c) [ 2936.585589] attempt to access beyond end of device [ 2936.585589] loop7: rw=2049, want=22, limit=15 [ 2936.587559] Buffer I/O error on dev loop7, logical block 21, lost async page write [ 2936.601355] attempt to access beyond end of device [ 2936.601355] loop5: rw=2049, want=22, limit=15 [ 2936.603367] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2936.606774] attempt to access beyond end of device [ 2936.606774] loop7: rw=2049, want=23, limit=15 [ 2936.607929] Buffer I/O error on dev loop7, logical block 22, lost async page write [ 2936.625247] attempt to access beyond end of device [ 2936.625247] loop7: rw=2049, want=24, limit=15 [ 2936.626414] Buffer I/O error on dev loop7, logical block 23, lost async page write [ 2936.636729] attempt to access beyond end of device [ 2936.636729] loop7: rw=2049, want=25, limit=15 [ 2936.637857] Buffer I/O error on dev loop7, logical block 24, lost async page write [ 2936.656903] attempt to access beyond end of device [ 2936.656903] loop7: rw=2049, want=26, limit=15 [ 2936.658035] Buffer I/O error on dev loop7, logical block 25, lost async page write [ 2936.667280] attempt to access beyond end of device [ 2936.667280] loop7: rw=2049, want=27, limit=15 [ 2936.668422] Buffer I/O error on dev loop7, logical block 26, lost async page write [ 2936.689344] attempt to access beyond end of device [ 2936.689344] loop7: rw=2049, want=28, limit=15 [ 2936.690455] Buffer I/O error on dev loop7, logical block 27, lost async page write 05:20:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x5000}, 0x1c) 05:20:16 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000002010100d1940fb250cf1e16d700"/28], 0x1c}}, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x100) syz_io_uring_submit(0x0, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x1, &(0x7f0000000100)=[r4, 0xffffffffffffffff, r5], 0x3}, 0x28e0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 2936.777152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 05:20:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x80fe}, 0x1c) 05:20:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) 05:20:30 executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x404001, 0x24) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r2, 0x1000003) setxattr$incfs_id(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) ftruncate(r2, 0x350) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) openat(r2, &(0x7f0000000380)='./file0\x00', 0x400, 0x0) sendfile(r1, r2, 0x0, 0x80000001) 05:20:30 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:20:30 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x0, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="64bdb54bd4a88d8c66f08660b80cb1bb7d5fda13e4aa98c06992b67c47011031cc4cec0831ef28799865bf61feb71e95aa33393d", @ANYBLOB="8a75f760f1d0d40a34c6a0cb3b22bc18a91a7407c8e7a806d1967e98ed915cf386855b83b65b2046de08e438125a4dce133fa90f26621e96de46ada75831569df4561dac12bcf8fae692559dc070c044b624aabee64470b75295e8276358754994f0d45a0c45463f6360635d1484b5e3677939f013c3b8735c28843a5aad04741dd2a1833673d4dea545b61cf201a7898fbf41f3cc4d", @ANYRES64=0x0]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) utimensat(r0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)={{0x0, 0x2710}}, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x148) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r4, 0x1000003) sendfile(r1, r4, 0x0, 0x80000001) 05:20:30 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2c05, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:20:30 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:20:30 executing program 7: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x24000004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) fallocate(r1, 0x4, 0x2, 0x8000) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000240)="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", 0x1000, 0x0) fallocate(r4, 0x0, 0x0, 0x8000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) [ 2950.855681] FAT-fs (loop5): Unrecognized mount option "ÿÿÄ" or missing value 05:20:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xc0fe}, 0x1c) 05:20:30 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200101, 0x4) syz_emit_ethernet(0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="000008023a4d7729c24baed6c2ff3d63f2ccde9979e00000000000"], &(0x7f0000000180)={0x1, 0x4, [0x108, 0xb7a, 0xd85, 0x40f2f]}) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x200, 0x41) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="8000000008021100000108021100000008021100000000000000000000000000640001400006020202020202010882848b960c121824"], 0x36) 05:20:30 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:20:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe803}, 0x1c) 05:20:30 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4793}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2f0af2f4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x40d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bdee6e6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e47}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x764a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x72d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf1c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd209}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd190}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dc36701}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11608140}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3981}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf21d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2ce8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb424}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x433c4622}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x487c21d7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1cf2}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x104}, 0x1, 0x0, 0x0, 0x20000014}, 0x2000c1d4) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800e0009b1eca891a810b19ad5adb6e2b445d5a13", @ANYRES16=r2, @ANYBLOB="0100000000000000000001090000040004800800010000000000100008800c00078005000600000000000800020001000000"], 0x38}}, 0x0) 05:20:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xf401}, 0x1c) 05:20:30 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3a9a, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:20:30 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:20:31 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2951.682106] FAT-fs (loop5): Unrecognized mount option "ÿÿÄ" or missing value 05:20:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe}, 0x1c) 05:20:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:20:48 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)={0x26c, r0, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xb8, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xa8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xa4, 0x2, "3b08382d4f8baeeebf259ce288ecafbdcd8313a9090b6b262ef8541d8d489eb2b62e76e4e5d2edb71ff79b9db67a443087fe800bacc735e3712bde9f40be722f6e5383320c8ffd6bb152cf7a62eda2cb4edf6adb439b60d2caacc409468b15212d85e1a2a6c311498b1fd112b70ab15de5e077a0632a8a90eb9a9c0f719d1e0a82e2810c109b6e2df4394a108908ec62b82bf99c8cb957e1739e623dd4b934de"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x188, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xf8, 0x2, "f81600e1bc58543516839f6581160435e14f0717e9b568736f530074371d7726e7ec5c564d039a7c58abd0dc940dd5973991bdfe32760535fbacf38fc744ef96243a28ef3bdadf1791572221372429f3c9cbccacaead421185d4f3ba1a05d9ddd5e095b5324bca5274b5095bc4da3fab780fed49cecaaa001dc940a8153b17dab1a5396fa28227e5922e9bd765f5f868b8ab60859bf945cea1e7f6505132f4764ef9d3d6faf0c0af868e04bc6293fe9cde41aae3f16bfc8a42eed9caba75a7941526cab39290a527e6723528df9d6a73e3383aa98ff29bcfe0f52b2e1b0a4eac45bb9c47ce2bf6db960081b4ef0d6078cdc3fa1d"}}, {0x7c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x77, 0x1, "d560647ecd003661856abf4c754a0f625c11d2d81c47404394666b468bfa69db75fb78c95eefc8486712c1280e36f4a3f82b8b48ef6157e7ece8f26d8db58946fc03b39fcf9461d854623b356b35dcfe7365d482add139d69f55aa6faab94f5cb650aba49b0e516b65d3231a85abd6caa38047"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x5}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40c0}, 0x4000) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000067300000000000000000004b60a3ff6b8ffb191bd717a8bb9a271f88193e847b8c9ad475d89be793812d94281a007be1372d79a7f512b567b764c11023ce37f8aba19e375a3b7262d74bdb59ab798ef7d538f1e8f2ee8edae0e5afe760aee937519e0dfd83198458747667d7db7c8d5ab5e3de2026732473dab389179986a8adf574ff4041296c34e92b6a8f153b73a15c4dda262985ef625d9d1774825d6ea75b992d301c00ad733564ffafbb84289827cab1eafa6ccaf0d5220cd176119a58fef7d6b569e33fb9b366bf5cc82eb919a2afde934de2e55bac87236a87c5b1a9703ffca1627743ef"], 0x10) ftruncate(r2, 0x1000003) sendfile(r1, r2, 0x0, 0x80000001) 05:20:48 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@can, &(0x7f0000000000)=0x80, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032800000000716300000000647b3f1000", @ANYRES32=r4, @ANYBLOB="0c009900010000800e000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x20004000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r9, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[], 0xfdef) fallocate(r5, 0x3, 0xfff, 0xaf23) 05:20:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfc00}, 0x1c) 05:20:48 executing program 7: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f00000800000004000455", 0x1e, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x44, 0x4, 0x7f, 0x2, 0x0, 0x7, 0xc0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x7}, 0x40480, 0x6, 0x100, 0x1, 0x4, 0x1000, 0xe000, 0x0, 0x9, 0x0, 0x89}, 0xffffffffffffffff, 0xa, r1, 0x9) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) write(0xffffffffffffffff, &(0x7f0000000280)="fa543e3861a5e7d147eae13c2bd003676d91ed703be6239142e0165ebd1feec0dcbd45f69510bb77eb6ee4e4db9a569847107729831368145fa95ba51341bc10ff5c19dc32e61a6bb4c8005e136f6b0b5fcaa820684fa03449588634539aa109c1781b3d3d26899af790745e87b142e8adbf44776d7e81d121c8b089fd8d039ee07ae4b9a91a4da2e1543f6de0d4801fbfc618dc4f04716c998c7654bd174c29d77dd11da33d31278ed694ce4c94eb823fee83e68908ee7939d1913125cc3b51683644cd2db8d953a25136b107b20d895cad47c6e7b8e6b3ca31ffd3511ed8ad695c513b4d373b6bfb0d83aad690a4", 0xef) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='squashfs\x00', 0x1000020, &(0x7f00000001c0)='\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) r4 = fcntl$dupfd(r0, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000440)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) openat(r2, &(0x7f0000000400)='./file0\x00', 0x80000, 0x2) 05:20:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:20:48 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3a9b, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2968.744432] handle_bad_sector: 2 callbacks suppressed [ 2968.744449] attempt to access beyond end of device [ 2968.744449] loop5: rw=2049, want=21, limit=15 05:20:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfe80}, 0x1c) [ 2968.766220] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 2968.783261] EXT4-fs (loop7): re-mounted. Opts: [ 2968.800877] attempt to access beyond end of device [ 2968.800877] loop5: rw=2049, want=22, limit=15 [ 2968.802050] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2968.803060] attempt to access beyond end of device [ 2968.803060] loop5: rw=2049, want=23, limit=15 [ 2968.804273] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 2968.806158] EXT4-fs (loop7): re-mounted. Opts: [ 2968.807458] attempt to access beyond end of device [ 2968.807458] loop5: rw=2049, want=24, limit=15 [ 2968.807468] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2968.807503] attempt to access beyond end of device [ 2968.807503] loop5: rw=2049, want=25, limit=15 [ 2968.807510] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 2968.807542] attempt to access beyond end of device [ 2968.807542] loop5: rw=2049, want=26, limit=15 [ 2968.807549] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 2968.807583] attempt to access beyond end of device [ 2968.807583] loop5: rw=2049, want=27, limit=15 [ 2968.815613] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:20:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:20:48 executing program 2: r0 = fsmount(0xffffffffffffffff, 0x0, 0x105) ioctl$CDROMEJECT(r0, 0x5309) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@rand_addr=0x64010101, @in6=@local, 0x4e21, 0x2, 0x4e24, 0x9, 0xa, 0x0, 0x20, 0x2, 0x0, r1}, {0x4, 0x1, 0x1a0fa7b6, 0x0, 0x2, 0x9, 0x9, 0x6c80000000}, {0x6, 0x8, 0x6, 0x6}, 0x8b, 0x6e6bc0, 0x0, 0x1, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x32}, 0xa, @in6=@remote, 0x3506, 0x0, 0x1, 0x7, 0x1, 0x1f, 0x31}}, 0xe8) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup2(r0, r2) open_tree(r4, &(0x7f0000000140)='./file0\x00', 0x1101) open(&(0x7f0000000240)='./file0\x00', 0x408900, 0x41) fallocate(r3, 0x0, 0x0, 0x8800000) [ 2968.870238] attempt to access beyond end of device [ 2968.870238] loop5: rw=2049, want=28, limit=15 [ 2968.872579] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:20:48 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000100)={0x0, 0x6, [0x0, 0x100000004, 0x10000, 0x400000000, 0x0, 0x8]}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) openat(r0, &(0x7f0000000040)='./file0\x00', 0x40400, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x10809, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0xfffffffffffffff7, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 2968.888512] attempt to access beyond end of device [ 2968.888512] loop5: rw=2049, want=148, limit=15 05:20:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfec0}, 0x1c) 05:20:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:20:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:20:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xff00}, 0x1c) [ 2969.122343] attempt to access beyond end of device [ 2969.122343] loop5: rw=1, want=2044, limit=15 05:21:05 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x50}, 0x1c) 05:21:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xff0f}, 0x1c) 05:21:05 executing program 2: rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) fcntl$getflags(r1, 0x40a) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1000}, 0xfffffffe}, {{@in6=@private1, 0x0, 0x6c}, 0x0, @in, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) unshare(0x48020200) 05:21:05 executing program 7: socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000000)) 05:21:05 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3a9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:21:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x410181, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x1730c0, 0x2) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1040, 0x0) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:21:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:05 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 2985.386641] attempt to access beyond end of device [ 2985.386641] loop5: rw=2049, want=21, limit=15 [ 2985.443098] attempt to access beyond end of device [ 2985.443098] loop5: rw=2049, want=22, limit=15 [ 2985.445103] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 2985.464669] attempt to access beyond end of device [ 2985.464669] loop5: rw=2049, want=23, limit=15 [ 2985.466649] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:21:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x30000}, 0x1c) [ 2985.519123] attempt to access beyond end of device [ 2985.519123] loop5: rw=2049, want=24, limit=15 [ 2985.521102] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 2985.567416] attempt to access beyond end of device [ 2985.567416] loop5: rw=2049, want=25, limit=15 [ 2985.569572] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:21:05 executing program 7: pipe2(0x0, 0x0) pipe2(0x0, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000001340)=""/91, 0x5b) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = creat(&(0x7f00000014c0)='./file0\x00', 0x104) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[], 0x1248}, 0x1, 0x0, 0x0, 0x48804}, 0x20000040) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) fallocate(r0, 0x10, 0x8000, 0x20) r4 = dup(r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r4, 0x8936, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x0, r6}) sendmsg$nl_generic(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x10a0}, 0x1, 0x0, 0x0, 0x20000841}, 0x40014) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000001540)={@loopback, r6}, 0x14) copy_file_range(0xffffffffffffffff, &(0x7f0000000200)=0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000240)=0xff, 0x7, 0x0) sendmsg$nl_generic(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001580)={0x0, 0x224}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) io_uring_setup(0x5473, &(0x7f00000000c0)={0x0, 0x7ba4, 0x3a, 0x1, 0x1c0, 0x0, r0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x14, 0x0, 0x20, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000810}, 0x4000000) syz_genetlink_get_family_id$nbd(&(0x7f0000001500), 0xffffffffffffffff) [ 2985.606735] attempt to access beyond end of device [ 2985.606735] loop5: rw=2049, want=26, limit=15 [ 2985.608880] Buffer I/O error on dev loop5, logical block 25, lost async page write 05:21:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x50000}, 0x1c) [ 2985.648732] attempt to access beyond end of device [ 2985.648732] loop5: rw=2049, want=27, limit=15 [ 2985.650693] Buffer I/O error on dev loop5, logical block 26, lost async page write 05:21:05 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:21:05 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 2985.702091] attempt to access beyond end of device [ 2985.702091] loop5: rw=2049, want=28, limit=15 [ 2985.704165] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 2985.711793] attempt to access beyond end of device [ 2985.711793] loop5: rw=2049, want=148, limit=15 [ 2985.761836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16029 comm=syz-executor.7 05:21:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x60000}, 0x1c) 05:21:05 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3aa0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 2985.919557] attempt to access beyond end of device [ 2985.919557] loop5: rw=1, want=2044, limit=15 [ 2985.953491] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16051 comm=syz-executor.7 05:21:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x70000}, 0x1c) 05:21:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:21:22 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfc}, 0x1c) 05:21:22 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f0000000000)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x81, 0x95, 0x0, 0x7e, 0x7, 0x2, 0x6, 0x9, 0x120, 0x40, 0x34, 0x5, 0x1ff, 0x38, 0x1, 0x6, 0x200, 0x81}, [{0x6, 0x9, 0x7, 0x2, 0x1, 0x401, 0x10000, 0x2}], "a9521f608562df510681e2d53b6a56b70c7d5a70b4ab2e54c09eea9e828ec307ebe1a62d5aea311379b7797462742e7e63488cdaf517bbfe91b77556191728b58240d5cb5183e2c2daa152beeedafa12a3cabf427723f65149bb0089f82996d0f5e102bdd408793baa3995b76c5c23edfd09f775b83d4fcc4720dbb7668a7142434b7c610b81df767e6d3825dd2b98294ac8bf4d", ['\x00', '\x00']}, 0x30c) 05:21:22 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x10, 0x0, 0x1000002) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file1\x00', &(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x8, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) stat(&(0x7f0000000140)='.\x00', 0x0) utimensat(r1, 0x0, &(0x7f0000000200), 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, 0x0, 0x0) r3 = syz_open_dev$vcsn(0x0, 0xef03, 0x240000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000001c0)=ANY=[@ANYBLOB="f3847772c5cf0b41000000", @ANYRES32, @ANYRES16=r3, @ANYRESOCT=r0]) fcntl$dupfd(0xffffffffffffffff, 0x0, r3) fallocate(r2, 0xb, 0x6, 0xffffffff) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x6, 0x0, 0x1, 0x83, 0x6, @remote}, 0x14) read(0xffffffffffffffff, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) openat(r4, &(0x7f00000000c0)='\x00', 0x0, 0xcf) 05:21:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3f00, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:21:22 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0xffffffff, 0x1c, 0x0, 0x12, 0x4, 0x8f6, 0x1, 0x15b}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]}) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x2000002, 0xf154c79f1722d852, 0xffffffffffffffff, 0x10000000) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000280)=""/56, 0x38, 0x40000001, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x2, 0xffffffffffffffff) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r1) pwritev2(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000180)="3905c2183826d8ea69", 0x9}, {&(0x7f00000001c0)}, {&(0x7f00000002c0)}], 0x3, 0x6, 0x20, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000040)={{r2}}) pkey_mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = pkey_alloc(0x0, 0x6) pkey_mprotect(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x3, r3) 05:21:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 3002.514478] attempt to access beyond end of device [ 3002.514478] loop5: rw=2049, want=21, limit=15 05:21:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe0000}, 0x1c) 05:21:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 3002.602702] attempt to access beyond end of device [ 3002.602702] loop5: rw=2049, want=22, limit=15 [ 3002.604834] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3002.635548] attempt to access beyond end of device [ 3002.635548] loop5: rw=2049, want=214, limit=15 [ 3002.653803] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrjquota=,delalloc,,errors=continue [ 3002.674728] attempt to access beyond end of device [ 3002.674728] loop5: rw=2049, want=23, limit=15 [ 3002.676743] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 3002.725856] attempt to access beyond end of device [ 3002.725856] loop5: rw=2049, want=24, limit=15 [ 3002.728052] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 3002.730778] attempt to access beyond end of device [ 3002.730778] loop5: rw=2049, want=25, limit=15 [ 3002.732904] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 3002.735300] attempt to access beyond end of device [ 3002.735300] loop5: rw=2049, want=26, limit=15 [ 3002.738773] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3002.744896] attempt to access beyond end of device [ 3002.744896] loop5: rw=2049, want=27, limit=15 [ 3002.747015] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3002.749548] attempt to access beyond end of device [ 3002.749548] loop5: rw=2049, want=28, limit=15 [ 3002.751577] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 3002.754051] attempt to access beyond end of device [ 3002.754051] loop5: rw=2049, want=148, limit=15 05:21:22 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:21:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x400000}, 0x1c) 05:21:22 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x28, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0xc, 0x14, 0x0, 0x0, @u64}]}, 0x28}}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x7, 0x7800, 0x7, 0xff, {{0xa, 0x4, 0x1, 0x3a, 0x28, 0x64, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@end, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0xc, 0x24, 0x0, 0xb, [0xfffffffd, 0x9]}]}}}}}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r6, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r7 = socket(0xb, 0x3, 0x9) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {r7}}, './file0\x00'}) openat(r8, &(0x7f0000000340)='./file0\x00', 0x400080, 0x110) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r10}, 0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r3, 0x400, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0xbc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x322}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x23}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}]}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20004001}, 0x44080) 05:21:22 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:21:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x500000}, 0x1c) 05:21:22 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:22 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:21:23 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x218}, 0x1c) 05:21:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfcffff}, 0x1c) 05:21:23 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:23 executing program 7: r0 = syz_io_uring_setup(0x1a2e, &(0x7f0000000140)={0x0, 0xcd7f, 0x10, 0x3, 0x2c0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) pwrite64(r0, &(0x7f0000000240)="797a9caa1da2a9fa5f22d31138d5cbb3a6cef47d0308cd076ffe4be63cbbf598be2981787070b0f0011062b333fe55d6b52e933293d53b", 0x37, 0x0) syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000010000)="601c6d6b646f73662a7b3b00088001000240000004f801", 0x17}, {0x0, 0x0, 0x1800}], 0x0, &(0x7f0000000000)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) mknodat(r2, &(0x7f00000000c0)='./file0\x00', 0x100, 0x9) syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=ANY=[]) open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x88001) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 05:21:23 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x20, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(r0, &(0x7f00000002c0)='./file0\x00', 0x1a240, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYBLOB="04000500000000002e2f66696c653100"]) getxattr(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="627472662f363a1f685379b7f2a2ca1ed56781732e76666174005af2bfc5cd4dc557c1c81ba104112dcc0ec0994cbf3f966d22fcc1a7b45f696baadcacb3749d9e0e96fcf26a48e00de4eadf38744842414dc5d2ac10fc43ffb20d23ce0f819832b600b157540260bea23ba9253649bb5383dee44e"], &(0x7f0000000300)=""/187, 0xbb) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) ftruncate(r3, 0x890) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000180)={0x6, 0x1}) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file1/../file0\x00'}) sendfile(r1, r2, 0x0, 0x80000001) 05:21:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xffffff}, 0x1c) 05:21:23 executing program 7: creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x200000000000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x200000000000, 0x3fb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file1\x00'}) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x380000}}, {@uname={'uname', 0x3d, '#!@-'}}, {@noextend}, {@dfltgid}]}}) 05:21:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x220}, 0x1c) 05:21:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:21:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x9a3a, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:21:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x1000000}, 0x1c) 05:21:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:40 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x800000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x20c040, 0x11a) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:21:40 executing program 7: syz_emit_ethernet(0x26, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @val={@val={0x9100, 0x0, 0x1, 0x2}, {0x8100, 0x0, 0x1}}, {@can={0xc, {{0x3, 0x0, 0x1}, 0x2, 0x3, 0x0, 0x0, "c736ab79bea990cb"}}}}, 0x0) 05:21:40 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 3020.889198] handle_bad_sector: 2 callbacks suppressed [ 3020.889215] attempt to access beyond end of device [ 3020.889215] loop5: rw=2049, want=21, limit=15 05:21:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2000000}, 0x1c) 05:21:40 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x2, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) tee(0xffffffffffffffff, r0, 0x400, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x100, 0x401, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000100000018000000", @ANYRES32=r2, @ANYBLOB="02000000000000002e2f66696c653000"]) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000600)={{}, {0x59}, 0x0, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)="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", 0x180, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1da}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@mcast1, 0x32}) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e24, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}, 0x1c) sendfile(r3, r2, 0x0, 0x9bbb) creat(&(0x7f0000000040)='./file0\x00', 0xc) unshare(0x48020200) [ 3020.988789] attempt to access beyond end of device [ 3020.988789] loop5: rw=2049, want=22, limit=15 [ 3020.990728] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3021.008275] attempt to access beyond end of device [ 3021.008275] loop5: rw=2049, want=23, limit=15 [ 3021.010280] Buffer I/O error on dev loop5, logical block 22, lost async page write 05:21:40 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 3021.044162] attempt to access beyond end of device [ 3021.044162] loop5: rw=2049, want=24, limit=15 [ 3021.046320] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 3021.070303] attempt to access beyond end of device [ 3021.070303] loop5: rw=2049, want=25, limit=15 [ 3021.072258] Buffer I/O error on dev loop5, logical block 24, lost async page write 05:21:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3000000}, 0x1c) [ 3021.098677] attempt to access beyond end of device [ 3021.098677] loop5: rw=2049, want=26, limit=15 [ 3021.100549] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3021.125750] attempt to access beyond end of device [ 3021.125750] loop5: rw=2049, want=27, limit=15 [ 3021.127688] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3021.156662] attempt to access beyond end of device [ 3021.156662] loop5: rw=2049, want=28, limit=15 [ 3021.158832] Buffer I/O error on dev loop5, logical block 27, lost async page write 05:21:40 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 3021.189618] attempt to access beyond end of device [ 3021.189618] loop5: rw=2049, want=148, limit=15 05:21:41 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4000000}, 0x1c) 05:21:41 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x9b3a, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 3021.519942] attempt to access beyond end of device [ 3021.519942] loop5: rw=1, want=2044, limit=15 [ 3021.540012] perf: interrupt took too long (12352 > 12331), lowering kernel.perf_event_max_sample_rate to 16000 05:21:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x240}, 0x1c) 05:21:58 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000008d000007003c2f666d6c6530"], 0x10) chdir(&(0x7f00000006c0)='./file0\x00') openat(r0, &(0x7f0000000680)='./file0\x00', 0x2, 0x1a0) ftruncate(r2, 0x1000003) r3 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, 0x3, &(0x7f0000000500)=[{&(0x7f0000000300)="409d4bcdc201913e78e54b66b7967e7cdb83b6b0e14c0a0384c6b28a5fedc444b8333c989f348ad3cd3136b327d23a55f16bdb8dfb553a4792295f0aca4b3107098ab0e08df69fa2127286ddf336c9dd5155e5f8935b0f831e73ad049ee4b9d0d0a9e14b0b26febde9e408672e3b3fc01f3db40e739f66000945e79e3e0e6b6c7811b26c5b30ac232bbd38963a3a1b39ae64c4073f15b7cc9ee5cdf99318f437a68e61caecd50227f96bb0f263484779ab21cbb32aed42e5372fa6d0400a7b6ec4aa51c11ce3e598e10519853a8295047362ce58e08fbc34c143ee6e8e2fa69d6c683ecc29ea64028c8c0a2cb84ea3cecf350a8f6bf330", 0xf7, 0x8001}, {&(0x7f0000000400)="9d5562d9bae6bc84f7686405fc06d59705e05dc82d4dcd6920807a686f90499c00320c6bf782efc3cbbf2dab995ea4b2a3a20efbc4e709fb9b77a8cb752257378b5708e48b6b4504734fe4c0049268fb8487f6ada80be1dfee6278273e9931aee7e4d5475a975c2e16a0c4f896b2240f8de16d79c73137dc21a3079aec604cecf7e4f16afaeb6683d9880071194dd01ad3604a96739e8decc74c537fdf80e80ea69ba8204c2394d9432a5a077df79d45c3f6c3cad2100f2a583fe8b3364aeb67153f0b", 0xc3, 0x4}, {&(0x7f00000001c0)="6ae14c9a4788fa5959ee1d884e24da2deacad580da7ef307d7bfbd934a33d1ff2cabfb61f7be658fd8c3", 0x2a, 0x401}], 0x0, &(0x7f0000000580)={[{@nonumtail}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}, {@uni_xlateno}, {@numtail}, {@rodir}, {@rodir}, {@shortname_lower}], [{@audit}, {@pcr={'pcr', 0x3d, 0x39}}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'vfat\x00'}}, {@fsname}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}, {@pcr={'pcr', 0x3d, 0x21}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'vfat\x00'}}]}) openat(r3, &(0x7f0000000240)='./file1\x00', 0x80000, 0x40) sendfile(r1, r2, 0x0, 0x80000001) 05:21:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x5000000}, 0x1c) 05:21:58 executing program 2: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:21:58 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 3038.337435] attempt to access beyond end of device [ 3038.337435] loop5: rw=2049, want=21, limit=15 05:21:58 executing program 7: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004, 0x2, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) tee(0xffffffffffffffff, r0, 0x400, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r2, 0x100, 0x401, 0x80000000}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000100000018000000", @ANYRES32=r2, @ANYBLOB="02000000000000002e2f66696c653000"]) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000600)={{}, {0x59}, 0x0, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)="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", 0x180, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000080010000000000000c78000000a36dd798dc6915a2c7fc24b1f5d922ffbe78e85cf7b61d39e21d4bf5f6f5fa18aaf6721b87cc618ec9c4f733d93a82ef28435dbd91cc3e3a08e93b939cfa1d230ac52628003860dc53d4681d1645e840ac4f98b577cc51a9fcbeb87b04595b863f652eb311f4e274b46a1879f92692920f21090033c46362fb000000fde58d572b30f6ef90a5f98d949272a4a1a85adbe6303003835bab6dee2455bdb00f5a5e1ea3c3ddc1da92c3571bb1ea39cf1d174e9b4af89a42b1651455086b0294f6d540858e173c47d3f99c168642facaf4b0f88688ebdea7fd0351e2963a94763e0641f7a91cacaf5d73936026d9678410604349fd061a2e95a11a68164c555e4c7b275c9101d8623590298a66f34fe2dfe35763770d92ab823c026f7ee3188aa620c9695cc6d42cb4f60daf81601feb2bc0a0c3c6b71ea4e657a0faf8dfc27759711172c88d396f99a5e0a99eb803c9a8d1eda1e5030fab05566114573d6e1045b5683245851512eceea2a51371c33a12e8092b98d33843cdc130dbe24e000000797e2749010419497f2ba72c5a2f9004dafea4d0c15737a247c6524fbc3ea402f4c8a7a03af954589c8a6f29ac1a0957e6796453ebc482a0caf76d8c606ba230ee6f49e3ecb72ac9940865a5b2f2"], 0x1da}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000100)={@mcast1, 0x32}) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x4e24, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0xa}, 0x4}, 0x1c) sendfile(r3, r2, 0x0, 0x9bbb) creat(&(0x7f0000000040)='./file0\x00', 0xc) unshare(0x48020200) 05:21:58 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x9c3a, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 3038.403493] attempt to access beyond end of device [ 3038.403493] loop5: rw=2049, want=22, limit=15 [ 3038.405487] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3038.409337] attempt to access beyond end of device [ 3038.409337] loop5: rw=2049, want=23, limit=15 [ 3038.411222] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 3038.415153] attempt to access beyond end of device [ 3038.415153] loop5: rw=2049, want=24, limit=15 [ 3038.417087] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 3038.419799] attempt to access beyond end of device [ 3038.419799] loop5: rw=2049, want=25, limit=15 [ 3038.421695] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 3038.425502] attempt to access beyond end of device [ 3038.425502] loop5: rw=2049, want=26, limit=15 [ 3038.427412] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3038.432359] attempt to access beyond end of device [ 3038.432359] loop5: rw=2049, want=27, limit=15 [ 3038.434333] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3038.438171] attempt to access beyond end of device [ 3038.438171] loop5: rw=2049, want=28, limit=15 [ 3038.440063] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 3038.443054] attempt to access beyond end of device [ 3038.443054] loop5: rw=2049, want=148, limit=15 05:21:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x6000000}, 0x1c) 05:21:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 3038.523892] cgroup: fork rejected by pids controller in /syz2 05:21:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x7000000}, 0x1c) 05:21:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:21:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8000000}, 0x1c) 05:21:58 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 3038.995446] attempt to access beyond end of device [ 3038.995446] loop5: rw=1, want=2044, limit=15 05:21:58 executing program 7: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x800000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x20c040, 0x11a) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:21:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe000000}, 0x1c) [ 3039.211036] Buffer I/O error on dev loop7, logical block 21, lost async page write [ 3039.212304] Buffer I/O error on dev loop7, logical block 22, lost async page write [ 3039.213611] Buffer I/O error on dev loop7, logical block 23, lost async page write 05:22:13 executing program 7: creat(&(0x7f0000000000)='./file0\x00', 0xc8) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002780)={0x18, 0x6a, 0xc21, 0x0, 0x0, {}, [@typed={0x4}]}, 0x18}}, 0x0) 05:22:13 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:22:13 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x5, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000780)="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", 0x114}], 0x1}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/170, 0xaa}], 0x1) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c04604500f141002000020101800000000000000000ed000000f215"], 0x1c}}, 0x0) io_submit(0x0, 0x3, &(0x7f0000001bc0)=[&(0x7f0000001a00)={0x0, 0x0, 0x0, 0x2, 0x0, r6, &(0x7f00000008c0)="501a7a7cf6b12964a8191e4fc5e3890bc0a34edee982e48c58df0e4358105dfd5a04f1c4e21e1ae7032992a235eab83886df65f26728a51edbf71b88407403dbf7221507765fece981adfc46ff825864aad118d3c74ec84cb5306bfeafffd7e49882a112fbb99b93b7a1eb67e4c744af08c3379a2b9ed3005c222ad592c019677d06", 0x82, 0x8, 0x0, 0x1}, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f0000001a40)="cfee9a26ec5ebe1aa8a8e9ff491c3eab0c3e2244f6f0ee5bf5113bbcbddc0931fad34ebb6946d0bb9c5da71a84ac4efa306eecfcefacb33418f0f0f471870b1dfb37b3c0ea7480265858e18190c8aaa58b214a8ce2934a4878b33cd49a21de44496d637bf798c6b51777be9eb94223f4cb1e112b72463171f248e91dd62b118d1d4dbc597ae1040d04e1e5fdef3444bc10ffe9c18bc109a9283352a5a29d8753ea7bf0220e2269d8d37cab6bedd895", 0xaf, 0xffffffff, 0x0, 0x3}, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x6, 0x2, r3, &(0x7f0000001b40), 0x0, 0x1, 0x0, 0x1, r4}]) r7 = socket$inet(0x2, 0x6, 0xfc3) sendto(r0, &(0x7f0000000980)="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", 0x1000, 0x50, &(0x7f0000001980)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x1, 0x1, 0x1, 0x3, {0xa, 0x4e23, 0x8, @loopback, 0x5}}}, 0x80) 05:22:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYBLOB="2c89887b1e752d1abd3cce35de1aaf61e2533d993284d791266cb5efa946ed80df917810690992b97506d1fe3b9aa7d11c99d8b121ef3d68d1ffa433144170d9abb36d12255b1a03f4e733d07b816037", @ANYRES64=r1]) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r3, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r3, 0x1000003) sendfile(r2, r3, 0x0, 0x80000001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000240)="86dc0e2528ae4d86e54e2d7f55eac5be7b027b4acf79a167a4cc65bb28d56f43a20ae8076a91631d98fdaf", 0x2b}, {&(0x7f0000000300)="c4155400efeef5df2aecece4d3f9bf78d55e2060c155444c107627feaa61bb10dbf6f93a82600e14b3d9aa84f1ac0bc1d987c372bfdd1f19c7195b47c6b2cb1b643f5801f866e869749f6f9cb78d9ecc37b51a77b34a4b0d42c68c", 0x5b}], 0x2, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @private=0xa010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xf, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe901}, {@rand_addr=0x64010102, 0x3a}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x6}, {@multicast1, 0x800}, {@remote, 0x9}, {@loopback, 0x80000000}, {@broadcast, 0x5}, {@multicast1, 0x4}, {@multicast1, 0x53}]}]}}}], 0x98}, 0x8000) 05:22:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x18020000}, 0x1c) 05:22:13 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:22:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x300}, 0x1c) 05:22:13 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xa03a, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 3053.756627] FAT-fs (loop5): Unrecognized mount option "" or missing value 05:22:13 executing program 7: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(0xffffffffffffffff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000240)) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2321202e0500696c65300a"], 0xb) fallocate(r1, 0x3, 0x0, 0x18000) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0xce) r4 = dup2(r3, r2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000180)=ANY=[@ANYBLOB="6a75a83ec0bb0850cb6c73a3f7ec2d9c61f840981e", @ANYRES16]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r5, r4, 0x0, 0x7ffffff9) 05:22:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x28b703b7}, 0x1c) 05:22:13 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xc40c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:22:13 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "40107b0646d859d0a5209e3d87adb6efef98cd13c44505acfc4068cb9fe36b013a88ab9b19228676fc6b8f3d62f11028ab9bc047246775487fdaebac869a2df1"}, 0x48, 0xfffffffffffffffc) keyctl$describe(0x6, r0, &(0x7f0000000000)=""/35, 0x23) r1 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r0, 0x0) 05:22:13 executing program 2: rename(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) fcntl$getflags(r1, 0x40a) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0xfffffffe}, {{@in6=@private1, 0x0, 0x6c}}}, 0xe8) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) ftruncate(0xffffffffffffffff, 0x1000003) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xfdef) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') preadv2(r2, &(0x7f0000000580)=[{&(0x7f0000000380)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x17) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) unshare(0x48020200) 05:22:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x3f8cc2e3}, 0x1c) 05:22:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x40000000}, 0x1c) 05:22:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x40020000}, 0x1c) 05:22:14 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:22:14 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00210c0000000000007ed34980d4c9669d0000000000000700090020010000"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_read_part_table(0x3f, 0x2, &(0x7f0000001500)=[{&(0x7f0000000180)}, {0x0}]) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=@v3={0x3000000, [{0x3, 0x9}, {0x5, 0x100}], r2}, 0x18, 0x2) 05:22:14 executing program 2: add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000200)={0x0, "65a6cf5b9c07642a3340db5247ee072ddd03606017c18510ee7cc2005a8300d5bbc07333a35fce3d1db400", 0x39}, 0x48, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r0, &(0x7f0000000240)=""/95, 0x5f) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x1d, r1, &(0x7f0000000240)=""/95, 0x5f) keyctl$unlink(0x9, r0, r1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) r5 = socket(0x11, 0x3, 0x9) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', r7, 0x4, 0x0, 0x9, 0x7, 0x11, @private2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x20, 0x0, 0x6}}) ioctl$CDROMSTART(0xffffffffffffffff, 0x5308) add_key(&(0x7f0000000040)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00)=[{{0x0, 0x1100, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 3054.623841] FAT-fs (loop5): Unrecognized mount option "" or missing value 05:22:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x50000000}, 0x1c) 05:22:30 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:22:30 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:22:30 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)={0x18, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0x4, 0x9}]}, 0x18}, 0x1, 0x0, 0x0, 0xd1}, 0x40) 05:22:30 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x800000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:22:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001d00210c0087c3dc1249bc00000000000000040002000d00", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) 05:22:30 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x430981, 0x10) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r0, 0x1000003) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') sendfile(r1, r0, 0x0, 0xfffffffffffffff4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) fcntl$addseals(r2, 0x409, 0x5) 05:22:30 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x500}, 0x1c) [ 3071.268275] handle_bad_sector: 10 callbacks suppressed [ 3071.268293] attempt to access beyond end of device [ 3071.268293] loop5: rw=2049, want=21, limit=15 05:22:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x91ffffff}, 0x1c) 05:22:31 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000", 0x5c, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f0000012900)=ANY=[]) chdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0xfdef) clone3(&(0x7f0000000340)={0x190001000, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0xa}, &(0x7f0000000280)=""/85, 0x55, &(0x7f00000001c0)=""/39, &(0x7f0000000300)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9, {r0}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, @in_args={0x1}}, './file0\x00'}) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x65, 0x0, {0x0, r2}}, 0x0) [ 3071.458350] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 3071.507369] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 3071.680329] attempt to access beyond end of device [ 3071.680329] loop5: rw=1, want=22, limit=15 [ 3071.682820] buffer_io_error: 4 callbacks suppressed [ 3071.682832] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3071.685653] attempt to access beyond end of device [ 3071.685653] loop5: rw=1, want=23, limit=15 [ 3071.687576] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 3071.699109] attempt to access beyond end of device [ 3071.699109] loop5: rw=1, want=24, limit=15 [ 3071.701205] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 3071.712811] attempt to access beyond end of device [ 3071.712811] loop5: rw=1, want=25, limit=15 [ 3071.714819] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 3071.722138] attempt to access beyond end of device [ 3071.722138] loop5: rw=1, want=26, limit=15 [ 3071.724198] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3071.730318] attempt to access beyond end of device [ 3071.730318] loop5: rw=1, want=27, limit=15 [ 3071.732205] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3071.737078] attempt to access beyond end of device [ 3071.737078] loop5: rw=1, want=28, limit=15 [ 3071.739133] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 3071.749292] attempt to access beyond end of device [ 3071.749292] loop5: rw=1, want=2044, limit=15 05:22:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x600}, 0x1c) 05:22:47 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r4, 0x0, r5, 0x0, 0xa1, 0x600000000000000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r6, 0x0, r7, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r7, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:22:47 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:22:47 executing program 5: chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x408c505e0f4f0b73, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:22:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xb703b728}, 0x1c) 05:22:47 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@usrjquota}, {@delalloc}]}) pkey_mprotect(&(0x7f0000ff4000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pkey_mprotect(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0xc, 0xffffffffffffffff) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2, 0x0, &(0x7f00000001c0), 0x2, &(0x7f0000000200)={[{@shortname_win95}, {@shortname_mixed}, {@shortname_lower}, {@rodir}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x39, 0x35, 0x65, 0x30, 0x31, 0x39, 0x35], 0x2d, [0x64, 0x43, 0x31, 0x64], 0x2d, [0x30, 0x37, 0x36, 0x62], 0x2d, [0x3a, 0x0, 0x66, 0x31], 0x2d, [0x66, 0x38, 0x32, 0x2a, 0xc, 0x65, 0x66, 0x32]}}}, {@subj_user}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@subj_role={'subj_role', 0x3d, 'delalloc'}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@uid_gt={'uid>', r1}}]}) 05:22:47 executing program 7: r0 = creat(&(0x7f0000000180)='./file1\x00', 0x104) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x0, 0x8001, 0x0, 0x6, 0x0, "9c29e77a13390700fde1bb28cb12723ece1f73", 0x3, 0xa}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r2) syz_open_dev$mouse(&(0x7f00000003c0), 0x0, 0x30b200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xe40, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000140)={0x7, 0x9, 0x9, 0x57bd6dc4, 0xfff, 0x7}) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x44000) io_uring_enter(r4, 0x4484, 0x62b9, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) openat(r1, &(0x7f0000000000)='./file1\x00', 0x200, 0x11) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) io_uring_enter(r4, 0x27b0, 0x9793, 0x3, &(0x7f00000000c0)={[0x4]}, 0x8) 05:22:47 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) [ 3088.059208] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 7 (only 16 groups) 05:22:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe3c28c3f}, 0x1c) [ 3088.112175] EXT4-fs warning (device sda): verify_group_input:146: Cannot add at group 7 (only 16 groups) 05:22:48 executing program 7: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) shutdown(r0, 0x0) socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 05:22:48 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000b00)=ANY=[@ANYBLOB="190000001700003e252312783b86a6c400006723d496826a7ffe5c5e69cae18a6aea93f48858a36dff113ccd26030000000000000010d16825e004e41d0875c63d5880e593c6c6d5a68f6bce75510aa0f6b3517fc379f91a1f36044d9b6d866e88602299e3dbb6ead7c3"], 0x19) ftruncate(r1, 0x1000003) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) signalfd(r3, &(0x7f0000000bc0)={[0x8001]}, 0x8) sendfile(r0, r1, 0x0, 0x80000001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000300)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = timerfd_create(0x2, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0xb, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(r5, 0x5000943a, &(0x7f0000002080)={{}, r6, 0x2, @inherit={0x50, &(0x7f0000000000)={0x0, 0x1, 0x5, 0x0, {0x22, 0xc66, 0x7fffffff, 0x7f, 0x6}, [0x9]}}, @devid=r8}) ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000000700)={0x18, 0x1, {0xac, @struct={0xffff0001, 0xb256}, r4, 0x401, 0x6, 0x112, 0x100000001, 0x7fffffff, 0x414, @struct={0x952, 0x3}, 0xffffff81, 0x1, [0x80000001, 0x0, 0x2000000000000000, 0x11, 0x48b, 0x2]}, {0x6, @struct={0x7000000, 0x5}, 0x0, 0x4, 0x3cfe, 0x0, 0xffffffffffffffb8, 0xdba1, 0x216, @usage=0x412, 0x7, 0x9, [0x5, 0x8, 0x650, 0x65c6, 0x8ccb, 0x10001]}, {0x2, @usage=0x5, r8, 0x80, 0x100, 0x8000, 0x10001, 0x6, 0x0, @usage=0x5, 0x9, 0x9, [0x7fffffff, 0xffffffff, 0xa6, 0x2, 0xb3, 0x1]}, {0x9, 0x80000000, 0x5}}) creat(&(0x7f00000000c0)='./file0\x00', 0x10) 05:22:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:22:48 executing program 2: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x450082, 0x0, 0xa}, 0x18) [ 3088.350706] attempt to access beyond end of device [ 3088.350706] loop5: rw=2049, want=148, limit=15 [ 3088.372396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16673 comm=syz-executor.5 [ 3088.454240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16661 comm=syz-executor.5 05:23:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe8030000}, 0x1c) 05:23:03 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:23:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x700}, 0x1c) 05:23:03 executing program 5: arch_prctl$ARCH_GET_CPUID(0x1011) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000180)='./file1\x00', 0x822, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000300)="cdba6fb403bb53f27137e9482eb18826c9b08cf7f67e3ec33a1f51a37d8b6b31eb2282df3597e9cf78b6bd93855b28aa5c7793c793666f2be635f02d1e1bc166ab0e01b4ef5c65ff51613cf3fb048ac53eb67f023de79fec5c00617dd3fc89e619c9226a5d49912ff0d003178a27223c45f10185aa774d4914e4e42edb77660105b5", 0x82, 0x4}], 0x91, &(0x7f00000003c0)={[{@sysvgroups}, {@quota}], [{@seclabel}, {@appraise_type}, {@subj_role}, {@euid_gt={'euid>', 0xee00}}, {@fowner_gt={'fowner>', 0xee01}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@appraise_type}]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0}, &(0x7f0000000800)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000840)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in6=@local}}, &(0x7f0000000940)=0xe8) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xf786, 0x5, &(0x7f0000000740)=[{&(0x7f00000004c0)="487d60801a8fb161d6fccf08841e162100639c2ebfd6c4ca0cd399fde73931730c2ed54b2d5a47d9ff1554f5d71921de2e41aeadf22505d71adfe41fc7b5d8d613a9f00f640e15490f4af140ebc1d98f92ceeee0231e45ee377b67f73fc705d5578bbacaae93f18917b86d81990212fa8bd77b558e088b5b0c8254173ed6d912237bfeab874c3a955fe608fa8f7c07b9c45de2e500611322638218aff86e158812e81b", 0xa3, 0xffff}, {&(0x7f0000000580)="ace2db00d7065652f3a1b5b5c45b7bb171e82814e308be220303f4b2175f2ae37c4f8cc1403a1c3be15dfbc74194beef09ef65ce328ede8b8ea19cfe91", 0x3d, 0x4}, {&(0x7f00000005c0)="aa3d04354863d6c4c3279f4d40eaaf7b12116a7e7d01eb6c4fa3c614d6df8b749927ebb51605573166b842e4bf43d169f58eb6dacdf181628d256828accda21ab876612b3355273f24585a4de85db763779ca0d1b7c962d02efc5a74f54b47a893e1c1b9cf8359804687d3694939bb862e5650bb9a93d348aa8b6dd82f28103486dfb1847b3a8be707567ba8a1eba68f85f708667811e7c1f3f551cccefc6a5e6e4c255a231b14", 0xa7, 0x1}, {&(0x7f0000000680)="aa25d586c48ef40216037ec9826a113461118c9cad591eda3ba17410b2e83e0e5faffc60ec701c160c13ff568b6c817400b23c0544041405889f2964a83ec7617e6839a63c21f09af69c5486a2990f09a9aa7b9ad7da22f58c18659061e83b74ca46ed2bc8800bf9441437fed14a1dd4e724736e40c7e3c44ad54528801fed", 0x7f, 0x7}, {&(0x7f0000000700)="79d9f95081ce54aae96bb559f420e286477000e4b03a3e1ea096ac35ac37b434bc98d3b4fc96e15a26a1", 0x2a, 0x5}], 0x100408, &(0x7f0000000980)=ANY=[@ANYBLOB='resgid=', @ANYRESHEX, @ANYBLOB=',usrjquota=,jqfmt=vfsv1,grpjquota=,min_batch_time=0x0000000000000001,jqfmt=vfsv0,prjquota,min_batch_time=0x0000000000000002,nobarrier,fsmagic=0x0000000000000003,fowner<', @ANYRESDEC=r2, @ANYBLOB=',defcontext=staff_u,fowner>', @ANYRESDEC=r3, @ANYBLOB=',fsname={/]\nG,smackfsdef=*)!{,smackfsroot=sysvgroups,o_type=euid>,\x00\x00\x00']) r4 = openat(r1, &(0x7f0000000240)='./file2\x00', 0x9cca2, 0x0) write$P9_RREADLINK(r4, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r4, 0x1000003) sendfile(r0, r4, 0x0, 0x80000001) 05:23:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:03 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000004000000003000000320000000f000000000000000200000002000000008000000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000000080)="0000a1000000000000000000008174406d72404b538720b2bc773362a701", 0x1e, 0x4e4}, {&(0x7f0000000140)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012500)="ed41000000100000daf4655fdbf4655fdbf4655f000000000000040008", 0x1d, 0x4100}], 0x0, &(0x7f00000000c0)) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x7308}}, './file0\x00'}) 05:23:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x5000000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:23:03 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010003000000000000001e00000008000000", @ANYRES32=0x0, @ANYBLOB="2c46c83a63906cb4"], 0x24}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x408, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) [ 3103.437451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 3103.456511] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 05:23:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xf4010000}, 0x1c) 05:23:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xf5ffffff}, 0x1c) 05:23:03 executing program 7: write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfdef) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x84111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0xc424, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x1, 0x4}]}) r3 = fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) fallocate(r1, 0xc, 0x8001, 0xfffffffffffffffa) r4 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x201}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180), &(0x7f0000002a40)) eventfd(0x0) io_uring_register$IORING_REGISTER_EVENTFD(r4, 0x4, 0x0, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x3081}}, 0x0) io_uring_enter(r4, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x7c65, 0xb818, 0x4, &(0x7f0000000200), 0x8) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x401}) fcntl$setstatus(r0, 0x4, 0x6400) io_uring_enter(r0, 0x2846, 0x2024, 0x6, &(0x7f0000000280)={[0x8]}, 0x8) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000100)={0x1, 0x0, 0x3}) write(r0, &(0x7f0000001200), 0xffffff45) 05:23:03 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x101, 0x8, &(0x7f0000000680)=[{&(0x7f00000001c0)="8681fedff1ce0ecb1774a14c447ebc21c0af09", 0x13, 0x5}, {&(0x7f0000000300)="ca2c329144cad87661346f0bfd6f7a08e03d3417d08775a03ae53fbe5e994f39e7e7d2ab7128e36e9198123956aab43d5672b06cfc97925d96db9be32245d51de6800bd07de6a1d0f6a59c8559a1dbcc87b712a978e1a0b14be8c0f9509b59c9514aa1a5520112c1eb05856c3523b47b5493c4875e35060238e257a934b07826417171065cc4ee4d17fefb4c0a63c94f6660c8182c0ec2b9abaceb5658376a903d93447e027b7f829bd8ecbef0ea414a90984dcce29679f76ba8d689343792df8fe28ede2e8d6069650ee7213cc6adb9f5715395d4e7651b96b5981f8eb865f4f0ca8baa813f99073b", 0xe9, 0x1000}, {&(0x7f0000000400)="41f0210c4f28f60f92da0c1c2ac6710239b49ad32dd4af5ffb1f31b733f825d07136a6495277a0c5dcaed35feee342877955086a7e11f5c187d9cd6743f9b581bfadce66b4fcd321fafa75cb74fa2b823b3077f5dba79495", 0x58, 0x3}, {&(0x7f0000000480)="55c0d3b4413176151e26bc72a041dee362a63c2351daf033193c6be2bb50b2bd712d27ecc301f6722543a30dcccfe9278b48f844f709bbfecec4b2cfd584e8c8937156bcc06bf0238882bd9d625159765bc2a461acf3f137c03c43deb792267a0818541061da5f9fdf6142d051865eadecc32daca4ab04f4c7f4294bf70167b1c3888a6aab77630a3d23ffa3e3992cc154", 0x91, 0x8}, {&(0x7f0000000240)="83c495cf98c7a1e7b4317357bb30e68521e364095fd921d266bf9dde306fa183d7a1dec55c26164ce9b8b52d4244466903cec5", 0x33, 0x1}, {&(0x7f0000000540)="f4e339fdd1241469a27a31a95e14b6d90c26d83162f821e0f2f9ff8d4c84f1c054e8b3dbc5f008c68c4015466f00f85238a5e4184845ef1946e0f727c4e6049d8cb892ab852a232ceda8221b187a76c498f115d573d89a0431f5389a8f1d9e4fd032928f845f9a4dc109255cd8f8448fd654a0969ab2e7f7a5f36a69d464ef3c5e916296c00ddb", 0x87, 0x3}, {&(0x7f0000000600)="3a85015e", 0x4, 0x5}, {&(0x7f0000000640)="81e3711bae6b552222c564244c976584ccdbf171742262b2a7e4e74c7028d9c41e42d922c9e44f59f98f62068a2e636c32008c896cfaec", 0x37, 0x1}], 0xa20000, &(0x7f0000000740)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@discard}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@grpjquota}, {@auto_da_alloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@dax}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@barrier_val={'barrier', 0x3d, 0x2}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}) sendfile(r0, r1, 0x0, 0x80000001) 05:23:03 executing program 2: fork() r0 = getpgrp(0x0) tgkill(r0, r0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000a40)='ns/uts\x00') 05:23:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfc000000}, 0x1c) 05:23:03 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:03 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x8000000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) [ 3103.698919] attempt to access beyond end of device [ 3103.698919] loop5: rw=2049, want=21, limit=15 [ 3103.784598] attempt to access beyond end of device [ 3103.784598] loop5: rw=2049, want=22, limit=15 [ 3103.785857] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3103.786927] attempt to access beyond end of device [ 3103.786927] loop5: rw=2049, want=23, limit=15 [ 3103.788176] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 3103.792719] attempt to access beyond end of device [ 3103.792719] loop5: rw=2049, want=24, limit=15 [ 3103.793888] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 3103.806760] attempt to access beyond end of device [ 3103.806760] loop5: rw=2049, want=25, limit=15 [ 3103.807901] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 3103.815316] attempt to access beyond end of device [ 3103.815316] loop5: rw=2049, want=26, limit=15 [ 3103.816515] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3103.823263] attempt to access beyond end of device [ 3103.823263] loop5: rw=2049, want=27, limit=15 [ 3103.824378] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3103.835337] attempt to access beyond end of device [ 3103.835337] loop5: rw=2049, want=28, limit=15 [ 3103.836549] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 3103.848801] attempt to access beyond end of device [ 3103.848801] loop5: rw=2049, want=148, limit=15 [ 3103.909959] audit: type=1326 audit(1676438583.706:89): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16723 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82ba4ebb19 code=0x0 [ 3103.969038] audit: type=1326 audit(1676438583.765:90): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16723 comm="syz-executor.7" exe="/syz-executor.7" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f82ba4ebb19 code=0x0 05:23:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfe800000}, 0x1c) 05:23:03 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0xff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff810013a0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc8200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ftruncate(r2, 0x2) r3 = dup2(r1, r0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x1, 0xd2, 0x1, 0xc, 0x0, 0x81, 0x10, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x401, 0x100000001, 0x8001, 0x7, 0x8, 0xfffffeff, 0x4, 0x0, 0x4, 0x0, 0x954}, r4, 0xffffffffffffffff, r3, 0x0) [ 3104.128151] attempt to access beyond end of device [ 3104.128151] loop5: rw=1, want=2044, limit=15 05:23:19 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:23:19 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) openat(r0, &(0x7f0000000000)='./file1\x00', 0x442000, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r2, 0x1000003) sendfile(r1, r2, 0x0, 0x80000001) 05:23:19 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:23:19 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x7, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x20040, 0x13f) sendfile(r0, r1, 0x0, 0x100000001) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000002c80)={0x0, 0x10001}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) fallocate(r3, 0x44, 0x100000000, 0xffff) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x501300, 0x16a) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x100, 0x0) fcntl$F_SET_FILE_RW_HINT(r4, 0x40e, &(0x7f0000000180)=0x3) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000002c80)={0x0, 0x10001}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x2, 0x7, 0xfffffbff, 0x3}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendfile(r0, r4, 0x0, 0x80000001) 05:23:19 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x40280, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/98, 0x62}, {&(0x7f0000000300)=""/208, 0xd0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x14, 0x1e, 0xe21, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x66000, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 05:23:19 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xe00}, 0x1c) 05:23:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfec00000}, 0x1c) 05:23:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 3119.650214] attempt to access beyond end of device [ 3119.650214] loop5: rw=2049, want=21, limit=15 05:23:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x10001, 0x0) clone3(&(0x7f00000003c0)={0x1800, &(0x7f00000000c0)=0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180), {0x9}, &(0x7f00000001c0)=""/230, 0xe6, &(0x7f00000002c0)=""/182, &(0x7f0000000380)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0xa, {r0}}, 0x58) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r2, 0x4564a000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000005, 0x19010, r4, 0x10000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20d315) [ 3119.705044] attempt to access beyond end of device [ 3119.705044] loop5: rw=2049, want=22, limit=15 [ 3119.707076] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3119.723575] attempt to access beyond end of device [ 3119.723575] loop5: rw=2049, want=23, limit=15 [ 3119.725514] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 3119.768848] attempt to access beyond end of device [ 3119.768848] loop5: rw=2049, want=24, limit=15 [ 3119.770841] Buffer I/O error on dev loop5, logical block 23, lost async page write 05:23:19 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xff000000}, 0x1c) [ 3119.804156] attempt to access beyond end of device [ 3119.804156] loop5: rw=2049, want=25, limit=15 [ 3119.806307] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 3119.848759] attempt to access beyond end of device [ 3119.848759] loop5: rw=2049, want=26, limit=15 [ 3119.850725] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3119.852902] attempt to access beyond end of device [ 3119.852902] loop5: rw=2049, want=27, limit=15 [ 3119.854949] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3119.878529] attempt to access beyond end of device [ 3119.878529] loop5: rw=2049, want=28, limit=15 [ 3119.880648] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 3119.928266] attempt to access beyond end of device [ 3119.928266] loop5: rw=2049, want=148, limit=15 05:23:19 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000002a40)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000580)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @remote}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x1}, 0x80) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) ftruncate(0xffffffffffffffff, 0x0) [ 3120.036954] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 3120.092541] attempt to access beyond end of device [ 3120.092541] loop5: rw=1, want=2044, limit=15 05:23:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x1802}, 0x1c) 05:23:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, 0x0, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x29050000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:23:33 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000d9f4655fdaf4655fdaf4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000280)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f0000000140)='./file0\x00', 0x8) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) 05:23:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xff0f0000}, 0x1c) 05:23:33 executing program 5: r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x20000, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6}}, './file1\x00'}) r2 = openat(r1, &(0x7f00000002c0)='./file1\x00', 0x155042, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r3, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r3, 0x1000003) sendfile(r2, r3, 0x0, 0x80000001) 05:23:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffdf010}, {0x6}]}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@getae={0x40, 0x1f, 0x4, 0x0, 0x0, {{@in6=@remote}, @in6=@ipv4}}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x101, 0x4c}}}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa4, r2, 0x10, 0x70bd2a, 0xc84, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0xf}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x64, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x20, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "b5ae70d5d7"}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40084) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r9, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x3a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8841) 05:23:33 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:23:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfffffc00}, 0x1c) [ 3134.012722] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 3134.051123] EXT4-fs (loop7): re-mounted. Opts: (null) 05:23:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:33 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="bb44000017000007002e2f66696c6530"], 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:23:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x1, 0x0, r0, &(0x7f0000000140)="ee", 0x1}]) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000240)) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0xe000, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0x2010}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x100000000, 0x644) dup2(r2, r0) [ 3134.186200] attempt to access beyond end of device [ 3134.186200] loop5: rw=2049, want=21, limit=15 05:23:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:33 executing program 7: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f27e5f", 0x3, 0x2c, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x600000000000000) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@broadcast, @random="617608d05637", @void, {@generic={0x88b5, "6b62e732999ff0034f853fd4e05e95f1e051aa917859a8732c7e278b785de84134"}}}}, 0x2f) 05:23:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xffffff00}, 0x1c) [ 3134.266073] attempt to access beyond end of device [ 3134.266073] loop5: rw=2049, want=22, limit=15 [ 3134.268186] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3134.329685] attempt to access beyond end of device [ 3134.329685] loop5: rw=2049, want=23, limit=15 [ 3134.331848] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 3134.334503] attempt to access beyond end of device [ 3134.334503] loop5: rw=2049, want=24, limit=15 [ 3134.336457] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 3134.338499] attempt to access beyond end of device [ 3134.338499] loop5: rw=2049, want=25, limit=15 [ 3134.340599] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 3134.343061] attempt to access beyond end of device [ 3134.343061] loop5: rw=2049, want=26, limit=15 [ 3134.345029] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3134.346859] attempt to access beyond end of device [ 3134.346859] loop5: rw=2049, want=27, limit=15 [ 3134.348939] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3134.351400] attempt to access beyond end of device [ 3134.351400] loop5: rw=2049, want=28, limit=15 [ 3134.353367] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 3134.355447] attempt to access beyond end of device [ 3134.355447] loop5: rw=2049, want=148, limit=15 [ 3134.558071] attempt to access beyond end of device [ 3134.558071] loop5: rw=1, want=2044, limit=15 05:23:49 executing program 2: r0 = socket$inet(0x2, 0x3, 0x102) sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000100)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000680), 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @multicast1}}}], 0x20}}], 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) ioctl$INCFS_IOC_PERMIT_FILL(r2, 0x40046721, &(0x7f0000000240)={r1}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket(0x11, 0x3, 0x9) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r7}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r3, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}]}, 0x7c}}, 0x4000) 05:23:49 executing program 7: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f0000000140)=ANY=[]) openat(0xffffffffffffffff, 0x0, 0x10000, 0x179) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000500)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffd}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0xc00) fallocate(r0, 0x12, 0x0, 0x8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') readv(r1, &(0x7f0000003700)=[{&(0x7f0000000200)=""/216, 0xd8}], 0x1) syz_mount_image$msdos(0x0, &(0x7f0000000340)='./file0\x00', 0x3000000, 0x1, &(0x7f0000000400)=[{&(0x7f0000000380)="181a704aef62d5ad7b50bae29631a3993ddfe94d45870a7e1f300f76a3c1907728659087cd7b546045563d82bb07b76541a5af6c4164e7a80e8f74576a9084ddcca660e94daeeeac1725", 0x4a, 0xfffffffffffeffff}], 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6572726f7273cf636f6e74696e75652c6e6fe46f74732c646f74732c642c636865636b3df2656c617865642c666d61736b3d30303030303030303030303030303030303030303030302c7569643d000000000000", @ANYRESDEC, @ANYBLOB=',\x00']) 05:23:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x2002}, 0x1c) 05:23:49 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:23:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:49 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x4, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17, 0x3}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0xd3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x16, 0x17, 0x0, {0xd, './file1'}}, 0x2b7b4019bd60dbfb) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:23:49 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2a050000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:23:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xffffff91}, 0x1c) 05:23:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xfffffff5}, 0x1c) [ 3150.054530] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 3150.058428] FAT-fs (loop5): invalid media value (0x00) [ 3150.059737] FAT-fs (loop5): Can't find a valid FAT filesystem 05:23:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x17) [ 3150.149346] EXT4-fs (loop7): Unrecognized mount option "" or missing value 05:23:49 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f00000001c0)="201900d07642da921fd6ff11430c6c6b8c0ac5060048065e24ecf3bb8ce311427ac446646b66cda5c391a00fbccd665cde721d7307fdcb6b969016edfcfc7632c1f3819bab23a38c40d2318820e65ef0262cc5dd8b5bc96f21bc84022b67785d6741984f29f705f842bd5a0870925cdb5d80eb689f80ea6ff07d3876a48c6519dad0", 0x82, 0x4e4}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000180)=ANY=[]) creat(&(0x7f0000000100)='./file0\x00', 0x10) 05:23:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x2000001c) 05:23:50 executing program 7: r0 = creat(&(0x7f0000000180)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/209) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x208) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r3) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8000}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7f) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x9}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 05:23:50 executing program 2: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="626172726965723d307830f74b51833030303022b599eb20e21ee46ae1068ab773652b146a82c6518b765ea7c1c30694af2e9ed4f9653e587697878be3cc9ab83059448d74040fe9a9aab69da2da10d2896e09558eeeb2f3140cbffc5f8162a50882f31be258143ee54f22501b9c015bbb00848d2249d94a70bfb7f1310ce0d72d79a6b19cb9a0e212d060d51167f12b5e5c43bacf37ea831d9280b150c26ac0a63d58fb0ae913392650387df6d2e12432c72fe0a5f8411618ba98858f5542501700ceeaf0ae1968a946e2dd8777255353fb544db3b3aac49711d19e661206a97177e133a5895a43a340bfa8066bdb965989daef00"/257]) 05:23:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:23:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) syz_io_uring_setup(0x72ff, &(0x7f0000000040)={0x0, 0x72de, 0x8, 0x1, 0x98}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) open(&(0x7f0000000200)='./file0\x00', 0x20001, 0x20) syz_io_uring_submit(0x0, r1, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x1, 0x0, 0x1}, 0x18fe) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2000, @loopback}, 0x1c) 05:23:50 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 3150.940661] FAT-fs (loop5): invalid media value (0x00) [ 3150.942240] FAT-fs (loop5): Can't find a valid FAT filesystem 05:24:06 executing program 7: r0 = creat(&(0x7f0000000180)='./file1\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0xf0) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/209) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x208) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r1, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0xfdef) syz_io_uring_complete(r3) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x8000}, 0x1) syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x7f) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, 0x0, 0x9}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 05:24:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) 05:24:06 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x10042, 0x0) r2 = dup2(r1, r0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0xb, &(0x7f0000000000)=0xba, 0x4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, r6, 0x1}, 0x14}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000400)={0x0, 0x0, {}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000002080)={{}, 0x0, 0x2, @inherit={0x50, &(0x7f0000000a00)=ANY=[@ANYBLOB="67b3924dcb8c49a7b957fca46a4b06fb1f89d85aa04b11270af9f50000000000002f92a9e0d2afdbcc416dc2102484e0b6f02d76c2bc38f55d3672a8dcf73bfcabf31aa900be0006c48e680ad7e9a2edc8a1378bda4db64d36406b53b7075185aa3a7099a119dd668cab841f17f7070b9a229b8da751fda890014ce3aa9748ff26f45bf8bcb2db94a54b1ab0bff30555f3"]}, @devid}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000240)={r7, 0x40, 0x4}) dup2(0xffffffffffffffff, r3) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000200)=ANY=[]) lseek(0xffffffffffffffff, 0x5, 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x585042, 0x0) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) sendfile(r8, r2, 0x0, 0x7ffffff9) 05:24:06 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) openat(r3, &(0x7f0000000000)='./file0\x00', 0x60a000, 0x82) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) 05:24:06 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4000}, 0x1c) 05:24:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:24:06 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2b050000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:24:06 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:24:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 3166.832227] attempt to access beyond end of device [ 3166.832227] loop5: rw=2049, want=21, limit=15 05:24:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) 05:24:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 3166.919473] attempt to access beyond end of device [ 3166.919473] loop5: rw=2049, want=22, limit=15 [ 3166.921060] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3166.922866] attempt to access beyond end of device [ 3166.922866] loop5: rw=2049, want=23, limit=15 [ 3166.924296] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 3166.928504] attempt to access beyond end of device [ 3166.928504] loop5: rw=2049, want=24, limit=15 [ 3166.930077] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 3166.935121] attempt to access beyond end of device [ 3166.935121] loop5: rw=2049, want=25, limit=15 [ 3166.936705] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 3166.940108] attempt to access beyond end of device [ 3166.940108] loop5: rw=2049, want=26, limit=15 [ 3166.941707] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3166.945095] attempt to access beyond end of device [ 3166.945095] loop5: rw=2049, want=27, limit=15 [ 3166.946683] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3166.950300] attempt to access beyond end of device [ 3166.950300] loop5: rw=2049, want=28, limit=15 [ 3166.951848] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 3166.960693] attempt to access beyond end of device [ 3166.960693] loop5: rw=2049, want=140, limit=15 05:24:06 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x54, r1, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xffff, 0x2f}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x4084) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r3, r0, 0x0) 05:24:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x15, 0x0, "443330af44eefe10bd0cc5b6fef4b057140b7a300f83401229a96d5b26c0e58bd38785c6c968d7ef98b4b880abc5dc5bc2fe6eb8de710a32061c21af21e34c89a14d2356b18f06165f0d90359fb2f753"}, 0xd8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x0, 0x1, 0x7, 0x3, 0x401}, 0x20) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x189001, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x9, 0x2, 0x1, 0xc, 0x4, 0xea}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r5 = openat$cgroup_int(r3, &(0x7f0000000280)='memory.swap.high\x00', 0x2, 0x0) fcntl$dupfd(r4, 0x406, r5) 05:24:06 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:24:06 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f80000200040000000000000000000010000000000000002", 0x2d}, {0x0, 0x0, 0x800}], 0x0, &(0x7f0000011000)) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2c101, 0x0, 0x9}, 0x18) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x40) [ 3167.214487] attempt to access beyond end of device [ 3167.214487] loop5: rw=1, want=2044, limit=15 05:24:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4, 0x0, @mcast1}, 0x1c) 05:24:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x4002}, 0x1c) 05:24:32 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r9, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:24:32 executing program 5: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast2, @in=@empty}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe8) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x2, 0x0, &(0x7f0000000240), 0x8c48, &(0x7f0000000700)={[{@block={'block', 0x3d, 0x800}}, {@mode={'mode', 0x3d, 0x7}}, {@unhide}, {@uid={'uid', 0x3d, 0xee00}}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'vfat\x00'}}, {@dont_measure}, {@measure}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r1, 0x1000003) sendfile(r0, r1, 0x0, 0x80000001) r2 = socket(0x11, 0x3, 0x9) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r4}, 0x14) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000640)={'syztnl1\x00', r4, 0x4, 0x8, 0x9, 0x10000, 0x11, @remote, @private1, 0x10, 0x10, 0x0, 0x7ff}}) 05:24:32 executing program 7: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='e', 0x1}], 0x1, 0x100009, 0x0, 0x0) lstat(0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x102) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000007fc0)) getpid() fallocate(r0, 0x1, 0x7, 0x1) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb342b87ae631f7a548867a29f29fd1637ddac658a709b49b093393d0e1c7391515c7ab7c"}, 0x48, 0xfffffffffffffffe) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 05:24:33 executing program 2: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r2, 0x0, 0x8000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="70010000a51e49da63dd1a51626e6a1776cef256b8459ad849d157aff63e146784cd719572fce39a3cbd58c7e0dc3bf8e16eaee24612b6d9071d0c076e4254a9e7287b536c55e6656ecada852e0d060000000000000072e6e1300700"/103, @ANYRES16=0x0, @ANYBLOB="010025bd7000fedbdf252400000008000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e330000000a0001007770616e3100000008000200", @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="0a0001007770616e310000000a0001007770616e340000000a0001007770616e3300000008000200", @ANYRES32=0x0, @ANYBLOB], 0x70}, 0x1, 0x0, 0x0, 0x4084000}, 0x20000081) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000fbdb09000000050008f806000000050008001400000005000700100000000000c26b547cfa4daf7af52eb410acb107a22c82319d598104dd25a2d546279ffc106c785e91d72f10de4ea3fdfaf1196c40ad4935f4dc8663795aec69f6ac0317583945a2390eecd631d0e9488f51cf45afa2bc3f3544baa240c04d018a4b7977b20042db69d6c5a35948"], 0x2c}}, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x440000, 0x0) sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x250, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_BEARER={0x108, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd57}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {0x14, 0x2, @in={0x2, 0x4e23, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffff01}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x11d94d2d}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5d1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) 05:24:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:24:33 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2c050000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:24:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) [ 3193.294507] attempt to access beyond end of device [ 3193.294507] loop5: rw=2049, want=21, limit=15 05:24:33 executing program 7: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', r0, &(0x7f0000000080)='./file0\x00', 0x0) 05:24:33 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @in={0x2, 0x4e22, @multicast1}, @l2tp={0x2, 0x0, @broadcast, 0x2}, @can, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x200, 0xfff, 0x5}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 3193.355773] attempt to access beyond end of device [ 3193.355773] loop5: rw=2049, want=22, limit=15 [ 3193.357803] Buffer I/O error on dev loop5, logical block 21, lost async page write [ 3193.361282] attempt to access beyond end of device [ 3193.361282] loop5: rw=2049, want=23, limit=15 [ 3193.363249] Buffer I/O error on dev loop5, logical block 22, lost async page write [ 3193.365896] attempt to access beyond end of device [ 3193.365896] loop5: rw=2049, want=24, limit=15 [ 3193.368095] Buffer I/O error on dev loop5, logical block 23, lost async page write [ 3193.380942] attempt to access beyond end of device [ 3193.380942] loop5: rw=2049, want=25, limit=15 [ 3193.383107] Buffer I/O error on dev loop5, logical block 24, lost async page write [ 3193.385959] attempt to access beyond end of device [ 3193.385959] loop5: rw=2049, want=26, limit=15 [ 3193.388118] Buffer I/O error on dev loop5, logical block 25, lost async page write [ 3193.391890] attempt to access beyond end of device [ 3193.391890] loop5: rw=2049, want=27, limit=15 [ 3193.393868] Buffer I/O error on dev loop5, logical block 26, lost async page write [ 3193.398070] attempt to access beyond end of device [ 3193.398070] loop5: rw=2049, want=28, limit=15 [ 3193.400214] Buffer I/O error on dev loop5, logical block 27, lost async page write [ 3193.405035] attempt to access beyond end of device [ 3193.405035] loop5: rw=2049, want=148, limit=15 05:24:33 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39028}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xa1, 0x600000000000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = openat$cgroup_pressure(r3, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) copy_file_range(r6, &(0x7f0000000280)=0x9, r7, &(0x7f00000002c0)=0x6, 0xd7, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x64, r1, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2a}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x40, 0x4f}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8c, 0x2a}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1d}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0xf}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40008) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r1, 0x329, 0x0, 0x0, {{0x32}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 05:24:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x11, &(0x7f0000000440), 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:24:33 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:24:33 executing program 2: fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x115be6b1}}, './file1\x00'}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x3, 0x1000, [0x3, 0x6, 0x4, 0x6, 0x100000000, 0x7ff], 0x3, &(0x7f0000000140)=[{}, {}, {}], &(0x7f00000002c0)=""/4096}, &(0x7f00000012c0)=0x78) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x3, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xd1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x800, 0x0) r4 = dup2(r3, r2) r5 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_int(r5, 0x1, 0x10, 0x0, &(0x7f0000000040)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x0, &(0x7f0000001640), 0x10018c6, &(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYRES16=r3, @ANYRESOCT=r4, @ANYRES16, @ANYRES32, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRESHEX=r5]) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x10) syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000001300)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) sendfile(r6, r4, 0x0, 0x7ffffff9) 05:24:33 executing program 7: fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x301aa2, 0x80, 0x2}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') ioctl$CDROMSEEK(r0, 0x5316, &(0x7f0000000100)={0x9, 0x6, 0x4, 0x9, 0x40, 0x3}) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1) capset(&(0x7f0000000000)={0x19980330}, 0x0) r1 = fork() r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) ioctl$CDROMPLAYBLK(0xffffffffffffffff, 0x5317, &(0x7f0000000380)={0x974, 0x8}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x4, 0xf8, 0x5, 0xc0, 0x0, 0x9, 0x4000, 0x1a, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x7fffffff, 0xcbe045ac}, 0xa8b, 0x3, 0xfff, 0x2, 0x7, 0x800, 0x9, 0x0, 0x8b41}, r1, 0xffffffffffffffff, r2, 0x8) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) io_setup(0x9, &(0x7f00000002c0)) read(0xffffffffffffffff, &(0x7f00000001c0)=""/247, 0xf7) fcntl$setstatus(r0, 0x4, 0x4000) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x8, 0xdc, 0x2, 0x8, 0x0, 0x6, 0x80, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7a80, 0xc4c850e8d0ba8966, @perf_bp={&(0x7f0000000040)}, 0x1, 0x7, 0x1ff, 0x8, 0x64d0, 0xffff5df8, 0x6, 0x0, 0x200, 0x0, 0x8}, r4, 0x7a2, 0xffffffffffffffff, 0x1) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 05:24:33 executing program 3: setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x11, 0x0, 0x1, 0x0, 0x6, @random="9729f1101ca2"}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 3193.890306] attempt to access beyond end of device [ 3193.890306] loop5: rw=1, want=2044, limit=15 05:24:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000180)=0x3b1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @loopback}, 0x1c) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) 05:24:48 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000012c0), 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x5000}, 0x1c) 05:24:48 executing program 6: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) 05:24:48 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x122902, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x3f000000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) 05:24:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00']) getsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) sendmmsg(r0, &(0x7f00000078c0)=[{{&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000240)="d0cacb9c03893cdc013169857423833e39730754a2163355bd093d998bd8875c85220503c06ee8a24e6a402b0a14ce7b8d1e44040fb6558e9d018301e5255073ffa47a743eb5c722a5d5f8cf158e4efb83ae70ca2f29170268d15cf32ac28c7524c10e0424488aeeb3d61c6bb733cb1b44d56cc92a0dfadc75a5512293ccb0c537440e34c545f9ce7dd499cc23f611b07509fb00e0a9cc2b0809a80b9588f2806ede8b4c33904673b2736c832c66b68880b99e4613bf3d852996da576f9fbcfc01c3dfcaefdbaee98c6e06e01f23ca1b3ca85e7f5562243896ec78e7aee63999cdcb860749", 0xe5}, {&(0x7f0000000140)="9690b69c0fdf962ff1b3f3631170d37fe348e7ace6e261b63e985b1501420c83ad9a16175a566ffdaf6e219a07a2fab353106197bf1f", 0x36}, {&(0x7f0000000340)="7dfd897bcb56e8468010abe29dd6a68863b40831aa1cca0c472a266fa614158adbcbc047da31b6101b7a13d9e0531bf91fe7e8c5015b71977fc2660003b5f0a74226a13f94e5a76368cc2c3aa63e183999", 0x51}, {&(0x7f00000003c0)="bc5e7ce7ec20cfa215fefa868b3fb23ef456da52c0f47a3538d3bf3f", 0x1c}, {&(0x7f0000000480)="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", 0x1000}], 0x5, &(0x7f0000001500)=[{0xa8, 0x3a, 0x10001, "9f77fd2188bf6c8d884431ba35763af64f42a3cc75c06c295318ecc6eccbc5865a23ee153a71414884254c068cc6a9d5dd9c2a1615c600b4be20a947e9e298711d97c722a9dee17073f8b5dacb50e7f351c2db2eb1605d9ff046e9b32d59d14173fa051d6aa582527ab191b0fd1145d16627d39939a4646be1f0c3ad4c38c05fca445681fa2dad5f1dccc5f79b671b4fa5ea16"}], 0xa8}}, {{&(0x7f00000015c0)=@isdn={0x22, 0x2b, 0x80, 0xff, 0x7f}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001640)="3da116354a32c918b5219f76a8fd55498ee95cc383f229d7b417a41e1fcf8cf0b486e6cbc8475e7d1406da7fb9d8397460bca447da5674cf9dffa1641f63b558c2e031293096d43befab941b4e1e740a8a93b7c001431c6dc9579cf8d8b24d257c", 0x61}, {&(0x7f00000016c0)="4bfb5a34b0be60a5f6eec2c9faa7597669413ac4d7c381a89b9e04526f12d82ec441bce039d4171bfde562005fc0eb251c2a79b135dccac6b309ae77d67f4867deff245af7e2d82ab3dc0ec46aae670ee4a8b064d2b9b7bd2828b677ed28f3035c3f93d7eb4576ce7af03c08af308f80665c715344d460a26e8e7dd0b63c116b9093bf1501f5f08d33f8e8c77e13149c94ddac751f26cd3610904bebe85d70fbdeab2c68d84e889bdc6b82c9ad3f457439582eb496ab544b378ffb3f55e387e990692e00aa0425f305cf1b2d16", 0xcd}, {&(0x7f00000017c0)="ce2bd98251b2e89e494e6ca8c76f40ae80ae89a218736f63f343867b17c620e379b4444468318499536087b085ee10dac22cd5e78b7df3b494dc2ffa3e03a03d8d0de3e660a38e79819968eaf5c4276e6838b63ab4e6dbfd362b8c2052b89bb22eb7a05efa5a6856d719d25b12748d48056d38105ca8706a3eb02b3637420dd0ab0fb959d032d9276d57a98484d7d7bb27d06f9c2f973f11e0163df1e92e717829a8451f9e951a546aa50751cfafe44da10fa45b35dd457d3a36b126af97ad8563466d8a65e8e9414f0e279927db", 0xce}, {&(0x7f00000018c0)="7e90dacef068403116aeb6906bb0eaad705b2a7a1d1fefc2af05bc6e11aa2665fd067aed560b1e8f8e11f66d0343a4b55561ca67c653cbde1bacc8e5d2b9fdd33b39f2623e46a99f12d2e98abcf83199889d4bb617b60d27cca5c41d2dfc6b1543ccf96507a72c97a9a9159ae1b293cceb048aff2f9c138420cde48024cf6984eb8af8ec3a224852bb0ec8a6990c01c4dd07533a554bfa60ec844f0183e1cb4803f390098f75b7754b245deeca358e8c22db0168f9a1481c8cd5a70a241058cc05446a1831d8cf152f20a32bdd4d41fc62954660b13fdab0e468ad04c15d36bae6897f", 0xe3}, {&(0x7f00000019c0)="1839cda56612bad501771ac1d93700a3f887e8ad87a6f7ff8b8587a0656d3e129d1e5ed391478fea98ad93e3629386ad9069e78e9bde846f0c294047476ff0eb9adfffb8b4ecfd921182d6504a4f4df979ad0d5ec8337f6ed437746b62bf585387c4c6e32bdcf96e4edb80b059183075573aebfdbb46fab8d7dcc6f1759a3fb39279aa96530362a235c343f863a5b952dfbb92e9fef921ca42fdfbecae8e2423a1e29f4ee33c9af39d955e6edcaad5d9", 0xb0}, {&(0x7f0000001a80)="64d538e7488cb04e7f20c6aab93e3ee7689c1622665b7f8d475cc28e29c817fcfca94bfea4f8bb6109677e5cae35254c8613aaab629d65b0eba50da7aa5a697d1a1568524cb679b29d4a2c3caf76063c05bb659f738ced5b4484d95d0b87310c28b8dba003db6fb02b1d82a76be2a9b21fe5c9b3c8aa9b3fe07198466580f4c7e258691f4a12691c3013fad2978ea7a6d977c950fc99b56f60e6dc89445640e6518764d14b33202632852895cb33b05e330d60e005d11aa5ffd14ba999a3", 0xbe}, {&(0x7f0000001b40)="0b0690fe52cd6c5a7e498170a66de8a18e27f7e5654738f06b93ba2e75427f670465ae890732cabee5bab0d8e26dcc8957023dc57f975ec55474e2f001bd8f6833b6f597c7d8cf50d11af17e787e6aa8ef913019e2154e9a35387db8e10be3ac", 0x60}, {&(0x7f0000000400)="8d7b9e4c87ad636abac071c012968bfe9270", 0x12}, {&(0x7f0000001bc0)="08971b6f3256f33106387915e789f0a9d8df30effc167746c1af755411938106d89f783610628b8c063e476bbc8fe1eb4e144e1481d355691782112f8ffd4ab1931623f0876e7e592a09da0b94b0dfa9f9a270157aaf146a0e36b6614774fe6291c439ad47721054dd392786b77f3fee549b8ca17e24e64d63423ad2c34ee1ff6a86cc8e531c5ee5d9055f6b8a58bb0a6c0f5e46b701697da89af128ace5b0cfee04f712d98dfc83801296040fa58f7f5f5c7f550d74fa345302f7bf0cde82150e32b32a86f0cc95bcd67011fdf403c185acc869b4c8a0ba452d24447347882869018f49b8647c25efea4907", 0xec}], 0x9, &(0x7f0000001d80)}}, {{&(0x7f0000001dc0)=@nl=@kern={0x10, 0x0, 0x0, 0x40000000}, 0x80, &(0x7f0000003340)=[{&(0x7f0000001e40)="51bf96af2c66b64976535abf0cb755408f6cd06d7a2dbbbc52d2a4d76da12b17aa45f8cc54adb99c87bb7a4d7ea8f701045f12a2cd8259b674f8ca27a229a5a2eb4ad63daedc3d16", 0x48}, {&(0x7f0000001ec0)="ffb5162609eaf107b230f0c45916d4f49204d66b7870459c84b6a04dcb7ff8ca29d260826cdbfa12488fcd74afb48477cbb97dadb37412c4c4c7b1a714d38b4c9e29044515427379ff8212f1ae37053b43af8ccd0a07c9392ca3b274de3a7fe4c1e6c7e50391c816c3c9c19c85b98067734dd00f30b97e06755be8a1d595f4c58298254d2be03210083da3fee6dae523daf59cdc412ba3f4d40c2e466cff9f28abc1d52c7711dfa20771eb7236b7a1060a4de6cfaf4f2e987357efa36151b1f3a59c5d71737a1b7e7c69dc3f99b743", 0xcf}, {&(0x7f0000001fc0)="497dd5d8ee3224e25c1dbc79e13bd88d6339f2f07996c9e7452c311bf16369dfafc2d91752f948da4a3a3ac158a450f1b5b6214137d184a11897fd88ec90658ab3a997eda9dd0f494b5ff7af0905fbca7eeb530161ee7464e69049e1f63f8bd947b594005c01eae80704841140117e0a01e8694355fd12d816c628e729f464203a33d4128c250d15a502791cb65f654d8a9862bae67332cf14c8ef8e4ee9f2f89d292d78902ba888026fe4f7cad444ac7557c6aff96c5a11e88a1ffa7b4229c4d2", 0xc1}, {&(0x7f00000020c0)="c2327b8e0931510238cbfddf5408679ae7ae60e36b75fe6d681dd046b2fed85cc1ae910c68fd4bc4b325871ce3eade55deadf7cfd644b0d54ce546a8931d7d52fd308cae1d06c68983d89888315a7bcadbafb7d1abc5d185199c8006b2a7ac3a79a100cb778fe5969717525428b6b8811f162ebdc55a6cc663", 0x79}, {&(0x7f0000002140)="5dfd07e0d8e7fdea57610d51e2ab9c1de0f43803be16583d0407b1ca54e0739cf6969598fa2d42221d8317045c44bd34d149b9f312fecf6c", 0x38}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="b9c06d8d08945e66fbe55123d49bb8ac186d0d268421171b2802d00ec978850bd7be9cc629229aaa402539095a5b3b15adda1e2f45ce1df7747c536e1090fbc47fd4f447e6306bce5b4a5b402280c1581ec2783ae6a30a69917df12cca2a54b469b3cb039c0018041a3b9ede46a921647458e4774f1946818cd05417d8a1cf098046c8835316f788d519091bbbfe421a2720fcbd", 0x94}, {&(0x7f0000003240)="45f3276c37a0e24a162fe59387745914112578ecae49d3e854c97107e2cb3e85ac5c946714ec29d743541da9787ffea56d57e456d27a742b324a6ca6a5815ba1f6fd4bfff36f58a7f34fb856fa0e8a23647bee844215bb82d878f6c56ccf6643d67fe4bebcec9f9d6ff0e984387ae1c5308c0be92794234d3bb792128919bd58568fbf0b483c81b5e7cda97e1b06acf19df546b7113cebff6190aa1de040a1ac24f50b66c11a073e6064f78bf842669e10675816414d04cc9b4ef07f7402347f806a77b3a8304e25b1d2215b0e6f3639e1aa60ee", 0xd4}], 0x8, &(0x7f00000033c0)=[{0x30, 0x103, 0xffff, "80b8b41587067016474403a6f141a750086b1dab5a87f63b6a73"}, {0xa0, 0x10a, 0x7, "b2b0d42eddc88ba4c1e646e3e07235b81aedc2a87f9c3dee579d4fcc27b1f92cc29abc9e3d9108dc284dc4e4b0a44a5372dd2d6e71a1b2520fbe6268060448156934eae87a171f2e03e0e67ce0c1dc7ed09ab16b4e668bdebd938f5cf5c27073252d52af8ec4309df6ec001b3477d4b7e35e445c3945b197692590248d2becae111bf50651765755780025a6f7e9551f"}, {0x108, 0x29, 0x0, "ef5a0cb5632aff9730e8e715db21bd408f8d8ebb5ce1dbe49762c7d55a1f8323ff374e98865bbc7e8709619a7a65bc9a8743e8fb3e1fe047df2f875161e47a6fb8058120cae6a53cb30fb34931762ce5c94d5695668f34b74b3e333eb87ff95f52374ccceaf19fa16d27a639cf0c4e0d51cb0a61ba7908ec977839475a0995eeb1713894dce9831d8ac3c183b6788c35e4f8ed8c2651113aead6e4bf1ed9303f2666b4b924901cf5304465fa76cc5b2b7a61ab212b6911276140bdc00b479b3a81c9c7f7f0c212580e0b805f8b03ca6cdc62454a8ce17a08f991353a21c4050ad82af377ccf1605cde4202a79c96ee3ba0044fbf"}], 0x1d8}}, {{&(0x7f00000035c0)=@llc={0x1a, 0x13a, 0x20, 0x6, 0x80, 0x1}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003640)="bfdf7a2d2e2bfdac4566135e7927f7616608aab822858950196e46974461b7293a7104d609f8d0c8e79dfc4d8c212447a89c8caba305e3b17404867c55bcd83f3cddedffd08bb7fa5e1b2cf9b1dd44a611963bad5604e71bdb7114a4a1a626a446c0f63d9ff0bc34dbd4175ccdb11af2bbf723eac663609d527370372ab4127592e77f5065b1a2a1ae588150311ae8650f1bd790", 0x94}, {&(0x7f0000003700)="647f1712309bb727ed43faa57484fc62b2de1ae6553f094965cd2de11e613bfdb00bb0d5008da8bd4ee3a11a3804143e774e7c37a636223d174912c9ef89ce3dcb3ecf8eca50e4b4f9ab5551a3a60898d5df8c409f1768c77777833be8513f2a680aa7270155115e740e8d9892ff6d4d585387421af55c5c5b8aace09661a6ffb58fa4aa7098bed98fcb8b98ce454e71386234634ce9bbb90da23b96abcdf34eef63debeab7f612da93a9d8be7b858690eb00b356e636b97f9fc7d6d7a8d8be798d542b38ec08738632a359572fbef8a42", 0xd1}, {&(0x7f0000003800)="1d053c218c60e0483a259a2edc1423b447e31e13ff6c2ab0296ce72d47428e2780eb73e689a177b0cca6fa1832d565a4c08370d3675f6f6d0fdcfbbcc304208539d7d586343b504b717fe5b7dcbacbb15e8e876352fbbbde5356f617e633293a99c2105f36db18851326913b908888660d8bf641174789382fa342f3cde73400d3304a5a8054d7cfb24ec83401e606ee815cd8730e12b20405b04830ec7b62b53381b49d613f7a6afbd84afa2fd25b80d450307d206195840a89d972f016eb82ec723f5a6f7e062b9d1e05c4ca8d19d1b3f4312f5b620eab14f9b72c5b65f9e5697f16b227b370a737c49d86c3fe1b73cc9a210057d977aa", 0xf8}, {&(0x7f0000003900)="372dfee9a12cb6b7e99f6cd4eeb8f88540a3b01ef13d7fbd665cfd65b75133f6631679107040680865bc9bf8d6532e4f98a14bc90a7c3cc3b222678f7780585df4764e025e569ec816e5fe9a1dc413c417973418c527e0fe79cdf5328eeb623c1a93b0d2277e0fa9791f4a1ea6a4b6b693695aa460644ed586f11e5a69eac4c932e9e909d89828735c5132", 0x8b}], 0x4, &(0x7f0000003a00)=[{0x68, 0x88, 0x5, "379d7bfa4b54afb07a121ccd5c2e8aa53d403bf3d16640adf83c9c516343db3f0380035ab36f0f16c148ac0a02b7f68e47c6332b850ed9c6a4b1c0a4b6d2d0273806c4cfaad2a6b6daa456ceb9e91bbba8a7de9ef6fc5423"}, {0xd0, 0x105, 0x9, "b54b03a7a512f6da4b41366928f77d8a03b90d0b42a440c7d2a8593aeb9046b42a04a3330669bda3d8146adaf938cb08979310844481e5c6f438bcf0a195b2a05927df8eac975e49ad80376ee8d4bdaf9fd409040c40f6cab801911fddd62b401b930d18b39e06eff12d36ca63028ad9ad3d6db48690182fb665190b9d23a9e549fa47128be4fdd6f881254bd8345e2869ce270fe5dcfc084f8dca5c08fcdbbbc1a02ff762bd38ab936a343c71118c73eec76bcb39668c34decd2bebb5eef838"}, {0x38, 0x102, 0x5b, "543a76de99886dda004ba74ad112188dae38a58f506c5b2851cd948ce5c078e61d2ba88ddd94"}], 0x170}}, {{&(0x7f0000003b80)=@sco, 0x80, &(0x7f0000003e00)=[{&(0x7f0000003c00)="c28fcabb59e3a3a74485109c99b9bf7def193fcb3b20", 0x16}, {&(0x7f0000003c40)="9f41c935cc158799a518de2088c396e5b59556b25595cc7946ffc5bb56a2c139cb334bbda9c75e0c28942d1642a80a3c71dd4ac0daa23b0754bd6511005fa42c335b5c65204dd290e82c96264970ae90446ef4b35a2e48d6c6759715094c059df442b70de26bb688ca5e883f648ea0aae9a7923f27a5821303df45de1f4e76622486499f03fe620f8b56c6b7e04f806dda524a0baee468241fe1d956de6442bb7a556cc45891143beadf81a67cb3cd0854f93d07054b3b952e0d4257a2bffddef1c2edd0c53c39fbda2b9439027331a433359154aaaa40000a89d7af6ad35c9ef84079864a5c033e55c9238729e830a914", 0xf1}, {&(0x7f0000003d40)="0773dabcffd006af2a4ae4543dc1acedfcfd9bbcf29a4225ef8f56f2b3e7edd338840c15e16c4b0aa6979c5d8a6655fb692866f3b24cc49465294878136f8a197693e31ab5cf73cb0d3ffd2d5da8e1d7bc141e19921572b114a804b6220da79e9c8a75c90e73304f3355b253d10b409d0c9419d81d7aa09cb93d526e5a971acb78bd64ef53d3f61c50e9d32290b0", 0x8e}], 0x3, &(0x7f0000003e40)=[{0x110, 0x107, 0x9, "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"}, {0x88, 0x88, 0x4, "6d371f9bd42bb439cb63da2e691dd35416aa02ce636361400a7075a02e5858667ae5a488b4e87606b968940c237a772905b1acc0764e03f14db4db2205b3c3d748a324ec3d83f3768b14176f682567be6d58219fc420bb74b2e17f3461eb473303862bd21fb51b29dc211db06f43682c76cfc2b7f4"}, {0xa8, 0x12a, 0x0, "00d63aecc0111e2c01c70b363fc46ec2d72b5163ab2cc63dce9220278cc16de0a96b9d9672768e9b5bbfc753414607d8100563224343495543ea1f54a15309c144eae73e9832f6f6d29b8340214ee34c8be5bf7cf8c03804872df73a50af28c4ce3d2327bd9accc0ad9c779b2087f38a8d2cbfcb5777f27f5cf74df778c28883ece1b22d8a8b50b2b047dcc9e1d019fd3c11bb6fde8c7410"}, {0x110, 0x117, 0xa66, "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"}], 0x350}}, {{&(0x7f00000041c0)=@pppoe={0x18, 0x0, {0x0, @multicast, 'veth0_virt_wifi\x00'}}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004240)="6e6a042a3e08f496a5394bc3aab92a7a95f902d9c7b0f525817ca630af0166d6464317ebf60f2a8f1644afbc15ffb68cf5b1f006e93323f2523bfac5eccfafd03c31d3b1c9a54d7964a922dce8b401255991dfe215fc2b5dd87f725a3741fa26d1bd195f1507c3904a5fa4c0433b9a3d32c77ab38820744398eb0bdd4dc8cc33fa45904df6963188581f42e71fa7734b86eeaac528e1f780a7d349497c46da6fb273ac95119dc4e3f51d7f", 0xab}, {&(0x7f0000004300)="e090c865572ed0801509f0d33ca6d97873c8a89ca891d70869d386956b721d7619c38579b0c50e059e8827c82b36d401bcba2bc2cb406ca1022ec10fd9ef0fb5be89b0656d147c5c8495449341fc229dc7fff7a8fc7e30cb062e84f40f9c758795f3e99291c2c40ac9a1321cd56c4a9e43b8a655c45a50b930521cce741ef3378453b7f970a27747c1dbd7f20d918c2efcf39eb121cf925e44658605d09082af165b3f3396cd44876751cee9d865e8c0a3a6639f81c64cb6fcbeca43d44c7c0dadcdc74f7c08eecff152063a11c848661378d92207ab08", 0xd7}], 0x2, &(0x7f0000004440)=[{0x40, 0x117, 0xfffffffc, "9113ba1264a47b9e61dc22868e016452fa310f6a7300b356af209d64d4b0c9e58f6c646430112a4ca3"}, {0x58, 0x10f, 0x1c, "9f1b40853eab877124f20c12f040ab6cec9093f534f9b99e41d4d1ce05995e039cd2847499b240de95d2dfe1ad799e903fcc257f37a0a7e9f41f24cefd84854c9baba94bad"}, {0x1010, 0x86, 0x0, "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"}, {0xd0, 0x110, 0x2, "726c844243404dd0d9035ed99c8a4990770ae28c27adc3a3570ad04f94c6d31e19f2b0a4e08ea7668ac973c77a040a7e909b009c9e85910530663ca21131e6950c84c6e8c123bd3276f11c4e455059d6c323cf0c2ccf192a872c95dd919bf27416e302cdf99e3e19529fa7378cdc5611de26a4cf6d0228104d01ee206bd8b03016aba89fae949d2103efe8729dcc4f5696ea6c920f8b87ed66d142c33adeca7f29db094db3bcce13240e2facd28f5f0b5b04df258a13a3458626f297"}, {0x98, 0x6, 0x60, "618d3e143a034e6f13aeda8c904f508ec1fd7dac10891c49a84d2c2d3e74f40e733dd874f6a17318479551bd5d38afe590d1473caaa5ac0ed70fc69ae5cec0774a13acbb5eceea430ba57654a5799cdabcaa2bafefc6d84dcca475024c077dccc01db7930562a19fd343509df344816efc3d6ae61fa7da9f92de8ac37078e4bc39fe3fdd3a2088"}, {0xe0, 0x110, 0x401, "15f846a24e987eadd251280e0a6a0d005cf7f9823d54fbd88737a04df9fb259204bcd327c2b167d7e77c1ca06a9e91e21fbdbfc637a77a83669ff271b6fea045070cc9c78011005da62a737ae9b445a1769107a35278f80d58f8693930687a74e7856374e5aac19794a10b2245c62f760ec6f596d608597f523944b76fd79aed765767dd503d0a25ae0f24662e8cbf4abefa00efc43f45eac4d53fe1d7411a6340ec6194f5067198c577346dde82c23d694b39a8f87a40254c1e78161b1b664575da4259483533587e026e91"}, {0xa8, 0x3a, 0x80000001, "9797356427034ee0b2d504e7171f1075a0cc994b14b46b02d0d604095076e9640e5efcf18c3413be7de60eddfbb37c45d9f063543890a3bf69a041d61a587b0ad48014cc65153b5c9522cb189b2f049fb816df07d8c36fed0c08c752b85db103766c0e22d0d0db34f451a454d3bb6e62458a5d24e8a71aef8b57669f8ba3e00c8976449e01154a223211847bba367ac606f637828cd00f"}], 0x1398}}, {{&(0x7f0000005800)=@l2tp6={0xa, 0x0, 0xffff, @private2, 0x8, 0x4}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005880)="42a6bd743baa9d343a9612cd00cf83849cc57f18a048929d80a35305e670c636cf4b6cf0fae59623d91b79f305745921768f615118db4b6a13f50078a85a7a807928b26cf70fc0e9cd53fd53890de5d461f6de45ec8ac3d50b8c44d864dbc3d753491c2fac70cdd2d87c7edbe6fba8ac768313e1603d8449dc1e733ca0e1ce1c4bd052e9a02ad1eb538c", 0x8a}, {&(0x7f0000005940)="bc53af2f788fa3bfce7d56dcfee18c83cdce62f7c36aebde7fa193fd984d03162d550cb4e367e496e77473ee50ca5ccf10b96e14d9eb4cd6521d79c9e9ea69ce7430e7d1fab4380951b35db2844f080e16a61a2c93c1cfb60f02fea744307eb163146ed3eb9e26bbe3370d213735ba0229d40da0adadcd270617991f578c655ca4c619540a26ce749850c8a8b47fc712a145158c3f18f711ada18b07bad4bc805a574c99443017b1917a382efb6040227b821f160c6569ab982e84afcb65d71395d0d2e75678ef771cbecf0e34828912d3ccdfd550bb1d8bd74e9915ec6486f2c81c", 0xe2}, {&(0x7f0000005a40)="3e22a145364507455a019d2364f3e61e7b8d22858aa2c2f3398fa2e656a85ea418871df9a9d359e418ce4aa6932c44cc17ec395765158c4025e4db637fa466dfda89fb541f6e2c48ac016f18fe2c11be33decefbf6d270dfddff6f8d8da07df2d59fc81c2b0ddc1e217a0c8dddd029a8150cb3142633727eea64436babc8e5442ef0d455c818ddaf1df3ed9e701c3625a3fbd7bf5aa31b44080696361d26b1f581693b8a4ba1f6434034804b301d80f395caaf8022c70c46b5951135d4579907fa4e72d7b498c28a46a4cb325b1b280e983c66429611034a6ca8f5725d69963cb9e81aa4c5145b16", 0xe8}, {&(0x7f0000005b40)="20201378a5cab49a1451f86520018259965868a454685b661d75cf3c69f24af6b9feecfba4d9390738680f6181395f75f645db82476f94696ef09e98c36ce2ea1d66cfd111111096dde277275737a2dc307bf42322120476fd2d71a1d11889c09e3ad3ed820e87fac926f8eaab2493fd17c574af249f941c5245d3f0e41c7de03eaad870cfdb75c99a077f9a1b2f04365f3c0c48b84b", 0x96}, {&(0x7f0000005c00)="6b0232530a6d3112cda28c4f300c7076e9c5b12bb3332143aa24ff9e0a3ae34c3349f4e5a0d71650a532ff9d4157bb5903", 0x31}, {&(0x7f0000005c40)="ad0ea8b0330118342c9f1b62ded54b5b4fc4abb74f00ea5bd7b05e74d55cdcf308f808e0a02e06c63453209d4fb74938056fd1ca80fe17440ae0ee323ee56ce77be2685d3a741e9f743e4deadcfaace5e814249fabe4a7bd4c790907a97c8a102572a54e0597302cbb8bcb8170970bc2c25cdbf8165be8e8b11a2c97f2a069fd9a7f78bbf04e254a01882c54acf1aba9e14a76a8105044de409ddbc596435d05570a52dc4f72bb2ca5afcc300e2e3e45acc2b7620aac922ab1c219a7f508c62a74be6437e7097d8957f86e736d6163b3e979aaca8c81d85fa5852b4046f84257", 0xe0}, {&(0x7f0000005d40)="b1b6348267d92c618fe4160e5d2d224c1f6fbbe3337cd836d91ea428d2e50f65a3f02224d53c0a74e767e033ac5bb99b85815daa2d40dfb44196515336c0922f57803445194cab06268db30bf9e7f59678fcd754aac20c137b416afb513f9ca5eff032f398ae456a3ad43528ac1cfb2e987bba68b46923bf6fb2e941627bfa49f8f645eca20bbf51bd9f6b06d1b5f1a4006a2da6c86922cd619274e2776ab7cf3862ac98a1d0ccbff2ac4eb6f0c1319f98cf68f3f0fe9b9d7e4d1212ad2c3ae0ce10b4a5ad39a6bb5095d3ac50504ec450", 0xd1}, {&(0x7f0000005e40)="9566ace8354070b077a522b9fc3d8cf402be1b300a458d", 0x17}, {&(0x7f0000005e80)="5edcca06b81a8f99eed551ea", 0xc}], 0x9, &(0x7f0000005f80)=[{0x68, 0x105, 0x1, "b1e8c95be1f8850b84a4b790eed4f58787cec133f12b3912931ee083c7982a7bad0f884550c54e0f7c60f2004a06a47b6601fb62b09219d892c915f5021b111f43c8a55ea3f2a4fdfa0c847526bc21efec3edebe2d083841"}, {0x58, 0x0, 0x3, "c436509c2955ec4b21f0cf35ef699e6e4f5f16d5bac4ac629a93ee945385859e45fe45902727b199f9e1a0c352693426197c5f0ec9bdd1452f71f4da1c8ac01d19dbade8e63c"}], 0xc0}}, {{&(0x7f0000006040)=@nfc={0x27, 0x1, 0x2, 0x7}, 0x80, &(0x7f00000074c0)=[{&(0x7f00000060c0)="7a78faf7fac150d98bb3b871f22742ae64cc20e3d1c2f69dc9e8f977d320312d58cd4b3272d4801bcf572674a51debb322abaf8a65b28519cc192c031b17c6438242953e99e5cb6fba76038de4883fe2199b0fee216633d5d47e40d15c40bb0504b6c5146ef5a88d43be26499145e13f1f83733afd04b4fd3519faea49f9b97912ddcab4e5dc", 0x86}, {&(0x7f0000006180)="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", 0x1000}, {&(0x7f0000007180)="dbe2e81252db66b65b6920dfd1e52c3bb16f6adb163fc6142ec07564fde4cc8f38b66ac443ab37ed4993550645c5d0a7fbe1ba05a3dae3a9aef9b42a5d84afdba0eea331747ac3da87c6a8e9d752bf9fab6690237969c8c28bb59c39ec459c842adb03137c81fa81cf00c2b736123246f669297f5aed7b824a6375407c520ec913ba7abe4f1eca8964c014f826697b64b49509e8a4f9ec3184b8a6611181877d9030d39fffcf8108ab218ea84762", 0xae}, {&(0x7f0000007240)="3e1b2763ff17b73c06d0edc9ad11ab7848b1071c05babdbd28bffc9782dbcc6c5da7dbac320042cd1dd8bd0a9610fbda16f5d8b4bfd311dade4e10b7016a60a7d533e9153729be2607476748edf1ee71d851e2f362029cb3a8036c93b160e2fc49022bc839b8847e6fa1f954166bb5fbdcdbb302e993dd4eec9681d94c7f5e0d45767074e17862f03461621452339f36d4cc4e82257a007fd691aeb93ccbc6ff2d853c", 0xa3}, {&(0x7f0000007300)="1ad827ae4000bf61395e497f43", 0xd}, {&(0x7f0000007340)="6114e59c262f4857103ba1522035679e4e9f653c86b81f0c33c4b6e0c4f13dda34029d5452ba8d370e2c12f2e91839948d720e0d1d282213f1e68ac79cf317050cbe071f8aedb0bef4f31940b4a3af9ac4f2da260b684fe06a126f56b80ad206a22a139777bd0780ff0b77ed9212f2c35ca1b5132e0826b85026c647cdec179ae49f812be3a1b8ad8538049a726c7c3bb2fbf184d4c8145c7c56ac26ff2e95ae5c083196b95fe25afb94de8fb1400b9159b616f429cc8c66a36207e106fd174d6dd5b3f02aac69a6cff4086a3b67a35bde042ab6b1337a655d40c7910fad763bdaf63c1699ed77fe79", 0xe9}, {&(0x7f0000007440)="e5a7c596e8db9f1772c20aeaa6a8e740d81734916984f80780262dfb12a8c825", 0x20}, {&(0x7f0000007480)="dc18228a499a0afbd78fc6a56595cc6c55e8e2f46b814c88c608157ebc849fd5e7892eb6c8b2d76969d8fdd043", 0x2d}], 0x8, &(0x7f0000007540)=[{0x88, 0x109, 0x2, "ad4005bcda90c25a400ccf8934e9cff62dbc359e316ac5b4925c1d9a96d6d33cefb1a686555106a05413caccd194ba85353db0dd7b281db5ae3a98848a6de52faeebc6d8491f9d46e33c6528363eb60ca39a41ee84e6d38999cc37af2dffbb71d389fe454dea62d91e5f66718dd34345e5abb6fac84e"}, {0x20, 0x119, 0x7, "e28d38fd591a8aad70"}, {0x48, 0x102, 0xffffffff, "bc523a6db39edb0c3274b0a746d63562e13ea35f87de666f51f4b41348aa614991de0baa2423ece6f0ab120811d0b910d925f15b9791"}, {0x38, 0x103, 0x7a6, "e6895ae5d53d15da7744ce451c435780d47f28fddce1cd3faa19d66660bf6581eea230"}, {0x58, 0x116, 0x6, "035bf8a4d1212008d7b91408ef1eee765e816f5426996f8a22176224d3edd1cf013b4b7c2ace5a8db301e1ef81ba57ee5bf30ea101dbfda6ac6e4d77446bee362ad3"}, {0x18, 0x118, 0x5, "cce507"}, {0x108, 0x118, 0x0, "c0474adcb276c1f995011b1719406f122ade5c04e777fefa50dc67e671984a31d8f89d7a56690495a41cb164f97f9a47d6cfa4d3e2f99cb59111b36e419e85805c4e9a36ecb127412703810f1b31b95973de3df4323e9478f80341e2dafa4de0a6f41fd90318608508d8378bc64eedd1b10f205e3d8ec3c94f9dc53e61d70059bfe3cbdbf40f54bb693f9d4ce69aac674dc351b21ec58132dd44f7d2f8cccefdc775044002b1057732288bd949d950465b2447d4db7ae549838225a0e3c9e82d6d3c41e5074079c0f88b6b2cb56014f0b8e3ce7abbcfc53a8387d44232e4d84a38a0b7d60ae90eb60dca780bdad8cdea13d2298c60bf"}, {0xb8, 0x84, 0x9, "edd15edd5ca76266c99f5a210cec1f85b3f5e67b46772a5356b39cb1eeec7c5ec3d165b255ed18520e1aa9387b2b1e806e88d519a2731fb3cf3ca03cd1deae49339da7edf27f3f80f2f639e9acf8aa291b9e3c1f1dc03ac00d5fb2af0ed6a38de271248adf9517b3d85e75cfb51e40338c5cefe728858e7311b380905ec658d05fea0d7979c83c33c410592abf47c1e178ba1e8011b1628f281cde7858190e5d0e949a8615"}], 0x358}}], 0x8, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r3}, 0x14) r4 = socket(0x11, 0x3, 0x9) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r6}, 0x14) r7 = socket(0x11, 0x3, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) sendmmsg$inet(r0, &(0x7f000000c800)=[{{&(0x7f0000001d80)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000008280)=[{&(0x7f0000007ac0)="b4a0d7a51a130897d24d6455ed524b100df985e3df14c5118a9e2aca2f279cbfd8131dbb5806fd400fc6a689e2ba8d3c6aa87337fb6da873df5bdafc55431f79a2c26527b414e13f72a6a1b9f6c17cccd206e3d51dc5f490970e36e8d7c9d34c1579669fd2de6b0b7ca07d40b252200943480b60af1c843522d78ccde6cd4008d99ef38a2ce816acc98b79eb36698df5183c0f51df1a561305ee6a71657aef95debad0c22977ccef7de9cd6c3f760b02de90688f3f45e6680050182b2ad745502d1a338fc318790ff90e2fa003bdef73167ecd45787e9bc945c81e3013f10b3139f38a93", 0xe4}, {&(0x7f0000007bc0)="aa1272823b4c89cdc5a978fc29d347fd58902a667730e9237dea1998e858e111c6ad0c35726ecb328fa77ef0756b5874df972b0d4721c8475b65c863c4802bfb60bdf2ebee1ce24662410af061b22bffc90e0d8d1b8d22bc3f41e1da9bc2d4b781c426b6fe44291e9a5fec46e74c54f8ab27a014ddfadbc9bd4593ff6f41497b55a587c71ab65185a31250fded7315114fe4c6d81ef8885c0918fa55d6d9bbf65c030ceb5ef7722dff1108ad364a4b52e5946f784b4a14c634587e05afab002742338aa16057e1c067c03210845eda65b96cdcac9ed1f1cbf91b309e823878c0118680bfa1004479b96fe0ea7030ffea58bd4242cc47f1b06f", 0xf9}, {&(0x7f0000007cc0)="c37f622b94736fe3bd6c320fcb6cfa01e946593ad04da054f35fd76963dc5c505a9ea3fc1c99c3b6c3661712a80c5d2b4c69e840d81e7e6b207fe844fbcbdb4300cf9618bba179a4c865a2daf9bef5f180a2f984146e1a007f88a3f74666679c5584106d498a911e9d3bf2ac50d0520331", 0x71}, {&(0x7f0000007d40)="f106267423f4440ed33a379261fa54ebcbf98cf5013046ebd6b7ca76df84065a06f3d052f64153115db6300b56f4705520158b4fbad985c4c6b28b315143822ed6b8dd0941a217ecd0c2762f624b2c8ac48c35286e0cc7e0993b3c5422759f91be516a72792a2b2ed6e126d2e362c9e6e259e91d5ff0f2fa0f4226914e9fbdaee2e9134da56f404c5358636b175846acb3e4372e", 0x94}, {&(0x7f0000007e00)="e6c8abc2e750ded5763083dee049375bc7ee863dbc2a601248b8b91a0c94696bda47f344eb909f850bfc6cb1eee09bac673fc33fedee65e3f739e64d1e6fde6f5b5b799821bb7f6b5f5e83c0a9b7b970d414ec48889bac9ca39786f1564d095568a0bf6290709c8269fe73f1094e875e709669693b5c12f80142fd3c99e3ee26d3b6512aacfdba6f3482f606d317c977a2509e1a8ff70a7f6618f8dfbe6ed888b55368a691bd81f33a642da3a7dcdd96c506a88d27f426fb03f2fc6edc4d6bc1b14bbc095d7cb643d7b264a013234ad585262c3aab", 0xd5}, {&(0x7f0000007f00)="f53746188429cbb0ce4126de1345f87319cba8320815e74dfb120998fc6a09961ab1efd57245179c405d5b0699b562aa2c41225c83788dfc0a3f47b17193510518a9bb253f372af8c3872096c11b05c6cbb49566b9de853565f57892c724096097927c2b53ef241466d71fadaf1dee4f3cb57b291a66608ede0ef1ea5ca01eaaffd3cd677d16e9c93c410eee32cef5e76cf137dbe4b62472b844fc10bd2f13999e02c12ab5706599077cf494b6a44552d120c1695c19cb33229f92942b7c93d22bd6fb9bcf39b9a4706045909a32f08f94d533f95f4711d0ce1bbb05fc16ceef3dc4f54c41e2cf89e69559abbe0e2fbb", 0xf0}, {&(0x7f0000008000)="7191d0927994ec824f6a58d0a10ed03e5aa2436a35ac3cf1a2", 0x19}, {&(0x7f0000008040)="c7f7e808990ec57cdd0e8471313408b64e942f56f7ede19bac14ae9e3bea40ec386dd28ff916145c046d03d48b68e5e1ed6eb8764bcb8f3f6e96457b9cd4e633e3c369132d9e6a6259cea4aef37a24e5eca8259eb2c5aad08044a71b09e067e1b74281a5cad0c2307068be3b8ac408639b0320eca9a2503c47578ad0d93b3a7694da82b2adb0b571b1b7c27ecb1893e13e9f260c436f4e22feb9ac", 0x9b}, {&(0x7f0000008100)="5db51f950bb4b00a501ccdd8cbbce1831b883d8bb76ee0d83a88278e9c37b350aae7f230af96a55289aa8db85da9ce2c47ce94261bc68a47689d7a708e7e4c76999937edb0b5fe9ac841402050ff9408d10731fdea46b25480f7662fe5172f4c24c8052405d712716bba0c864b56809a24af02dfefc7c707e74e3231772b03efb6fcf0b2c1d2fdd4ca7760b3bc3bc62f103bf02b6a416b4782d50e4f2a0d3207", 0xa0}, {&(0x7f00000081c0)="a0d359896f1665c494c380263140d7281a0a8197576a1a319af482c2387397feb75157a7c8adf7cc924e401874eafdfb693256170fe85f71cec3c4d54027b290dc267d6f222f4d46869e3c426c8c408f3d96a7f1e4dbad3538d75940e61d5aadf2348dc522f58487f4323e500ca9bd4cb11236079f2f6483a5f8796cfe726bc4f207e1894738c96735808694546e54e7c6fd1614bb3b52e7cec64bdb9c212e3b855df7ab406bda56be6d9e3b7b89323739afda6a6e006148bc", 0xb9}], 0xa, &(0x7f0000008340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_addr={0x44, 0xc, 0x49, 0x1, 0x4, [{@rand_addr=0x64010100, 0x3}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @private=0xa010100, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10001}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x75, 0x0, 0x6, [0x9, 0x7, 0x7f, 0x5]}, @noop, @ra={0x94, 0x4, 0x1}]}}}], 0xc0}}, {{0x0, 0x0, &(0x7f000000a400)=[{&(0x7f0000008400)="7dee98dc2762a2807f0ac0923559473bb51e557faa54e7ae2bfc644f3f2bf12819f2d513b331097099083c615369c2514e4f72be1be3551a1f62a6bf90c84dcafd218a314f2436db7c8deb358d208f65f1c80c796b46f17ac7c3240f4797c4671842926f14b18ea4f732c5815a7ae54b9261f7dd34f82c8142a190f3c23ba85681d5422af3bfc2f9f2865d9d5b2a9597278c59b514ccfc41754d36658d583a27f16e82a02e78f3d258eda454bb4b832b9f54ad560875ece1f0b10159351ba5448ba2131aa696c50be053195d31723e34b6de92789dd4d1a47803162b331318fdf39924c288710790b705f53ce8995343ad66746f62e6309ec04ab23c1348876e816ca7ee51e716d7084983d91e9096544ed4e37cc845dd0f51490bd957427d7385cfa4ec87b947387f5411e267675b2221123b8641a59e3a314b34946d09ef6e12be3609bcf2a5ef5d2a44675d5c85bd1bdb411c8e1d2d2055c1c872d7ef3d2db1aef84f68f13d46f982a9698a00ccd040fc0d98c37d768b7587e775183e4dacfdf35afb1c9f6fe106454936bf1d1983de921e8a134c3801aca2664c22c456dd04d8d5fe44e12e4605e2983cf18abfcba26e195bd69545973de61c586498b991b31f5bf3fcfceb784775a7d455c019c5c562261319bd06ffa82ef60a1917e0ae124a2998be6dae6317e2356bc3ec62baeebd81c18691c1a1b0d99f57b852ab6ddbec7eb0c8dc627e685240e255e748c78352e136ab90f3c714e2f3f9416830a2eb0e3e2b9fd939e6b372b9a5a9ca4a11b73dcb5ba84d1559fba0f3ddfbd7b4102fd9432c75bcaf736de123a49ba818415e8776eb0fc035a4584cbe43d9524002acb4b7687f309eac2a1654fecc1f2bf24c062ea2a34fa068425dd2e8947b28e5c21610c1cacded1093b2e93bdedb909bfb6fb175df71b98f43ad04dafe0de817a469c36dae4a28b58e97d8f36db12948a611514145355cf50929f1e0d4b5f2d70d34de2e0c64393cc9026776d249e34bf2abfd90eb287e2d19d8696a10fe169a9b078d1ad3dcb6f98506cc5234aeaf073b6b003d64baae23b04e48c3c3fd145428705eb03a7a64198f552e5ba33c7d4bc188438725b4bd522f6aac75fefb2bd469976d87cc719cd31a2e40246b809de7817d86dc00717eb1eaca9decb8c1c73dabdbff54ccafdecd5ff0dddb774f1b6276a348a612a65a70be201d37ec22169aad0675c7d326983eeddb26ddd46fa68ed78f317fae5c40eff636efab404992b0c2f1f3b65ceb881fbd54403950f09e4af8fd9d526768071f5bc8465644ce4aa35931786d67856117b98715623684cb04f2e685528bdb6a7d76570aafe3aadfdaf79e60b932827b5678b3927be0a08532d41bcda1ac83f0afc4b1777fb520f6e13f4ca7192f5b098572630e28882a81f42cb992a0660bdd639bec52ee168b8cb3e0106a441f9301b306498a394d83c9b6c242cb34458011a1ffabad92f35ccd316a1d7c3f84112d05c8d73e013517c1f13690ab8745d27045011139593c4b2eaf32aa164449aed496941f3560d91b7cb5fb2c9d86e58d518ea7ff48962d23bcf64ff55310827424c2c3fe03731e35ea9aed8e3c2158c6edad21e0d467460412929c16bbd059e742f462afdb98758b5b4aee8e4c9b03724483c0b0313c100500cd233c2a120e16db74007f6ce2fe5d0fa82acf1d882e9d29b96478cbeeb5768677b8a94e048329889593ca55d7ce0f9d2be125400409d2ebbeb44a9c27f709864849e5dd976f99938361adec565b45bbf150f0c1868be9ea4c32773d0d367041265df02741eb8fc16cfb73e0c0a03fd432c53152af7a7c890adcf7295eee3f5bd7eba170d8997fbcdaa4672180dbd7a8bfdd68ae6867023e46dd31414f004bb25cf9c4aa7e64fccbf64bcd636e08eb53691b32e87bfff8d285e4dce2f95eee6fa5265adcd8004aa7e0e3d55aebd2ab6e7e7e927c79c53fc6542c6f73016e490953325b160992f59908db62053fe7e3ec930f22f3bb42d8992dbeff9b945a3dc90625eee2184be13fa4739d8ca98b2b6877716be33db968879a951db6580515f8bcae9f97f0afc6dc16948a559f5d5b055e06e929fc61c3197ecb8375962061c05f1dd5dc9def91f2a812f584ed1795537e46e63744ff76b9ef4ba8043124a5e81523c95e290bed00a4d447d973910174340ce343b31c550c37c40523c36a7f1acbd126eb8431f6d201be6f730aff74722ff2b8431c5b892e808c1ce7d7a0d2b8e70c8482ddc37087b1a9ec5ac9798140df168b641189425f67e29ebc79fa959f337a8677080e00abd8ce6f15307c28a432e7f28e225812eca78c91674d489fddd99bfad1018bf2448f2b6b71a919303a40e4dde25bdb033a9b1915bc418b16931e3e25673c6a166f2e4cf36075afd6f2c532c374c8a69c70e7a4bb33bacc4821b86cc47b65b1de2b4a989890d48eefafe54bebc0f0b69c73fdf769f19ca46feea174c2ba83e4a4b77b2da61beb227bacaeed6971df0f3415b259443195f2176377bb70f9455bdbebb96eb88a028e344e13e540528cc634a6641c9f358eea18792dde5be7c6dca5eaa0021adcf2d307abfcf1122af5571cb5864c5b966b1385bdbb15cf50b2b6ee0d8f2e7873421c5cc408d8ce0a0dc7aebdba28e7f9903abba79ecf3ecc4fa04bae5adbc25e5cb9cec76465cc35f284970b88d0f8ce0470d7ff90d358ca28a114ed900eae114324f05fba4249633903c93822c06cbb71f5cb8c33048f5b4658a7fa86697d83c42cdf7faf5127a167343c9c530a2fecbf631e7c191f0f9b74124d7d54bdfea705653bc7a04ae93e41a5783258ba0c99ff1e9743e14062f453e550a54f60fca9d97f9003fdc4687dfc5b7ed1757bc93a7628eb81d29ccf81bcc14fd9884fe5edbdc05b8ed4e29eadb3aee37680d624118f1786f0fdb27d310152a24b3bee723e93eaf07680160757488af624b52378b0fd549366c8d1cdaf1a8749c5c77bd048ad01670403a24c1450286fdd593832a998e80572e7d236f716fac7529102025a8a92aff0b48113f1e9a5ad827360fe86c9dbd399998b515167e85799caf74403cd79e207f149167526b2cf9579acf685b216ddd86b3ec42726a98b7be20e1b3635f335aaa3bf68a1e589b80fdc2425f77d59cc12fa35c830af67e0156bc3206069e70850630cad31f387fef509e5244cf0a54314639b1ceac933ea075dc42bb5b32f59d727be23bed05720ebbf641c3e34ef13af41232ca5e813caac1e69db3fea4c1bb0b4951097275932367d44839fba05e213fb995e035f91d92d0e1867f89f7fc76c3ce8736ee79ec6a043a4e00ee303d892eb42d18b3ced4271525c3f63d3790041543143adbe4e9cfb1e0cad653bc564debf749b91702c13294c11c33538cc3618582824c2be4ba12c6e30389045a20bdcce0f69d9cd8f8f4e858d3df059d086d08babb546a8849ddde5258daf1652379e1cc199c82c15c05fc4f21f38a20edae6b03949d2efd46645a4c907ab71f09bd47ae18cb842303713ea9f8382b04b213078c66abab4477368e6649125d040e69824bcd6d6d208748f04b7f76871e105fe57acfe55ee936c0cc8ca7f9daa7ebc8ddbb71a6a167751a6553ce7e16a136fc20069c493da24b01eb74d569ba308c934cfc33185aa75d686f37ceb8905f5cd835ee4d79fa9d8c432e81ab2671636c2a9ac9edcc75338431500404db98e7406d65653c0cee6babeb8ed1c97b58bbefbd2de23b3ff6f0d28254b04f96a26965438c15d224f4053a294007022524cbfbd33cbd55926156196dc1ae16fcb7b35198bf3d667b264c4b34572fd3e3a44ec374fa1585ad0cef2496559b66d3bb07e573b4168d6eaf09cf31997f69cb721a781c1b8e6315fccb626f847a624923e20e14f558ed2755defb3ab73e8264c5d84e5babcc917d1a30be03d5f2b675e9fb247d8e13a31fd88a19eed3bfa3ca97e4eb9703d1bd425ff7a0f4f1ae301b491e0295f4c4458fff3ce872ecb7b34653b372669f7c89974fbba3a1be1d7adc082ac592c407df4240ca86ae06c18c8dc2e490a301e7acfa0d293e022f613d065976f0de968d05cac1e732303791d7e82a8a12348fa83f8a8e1b166dc21c95b8102a66faf68efbada59a144a569cea4b37009a94fd11f6182e01a81b1ac6869c1d1142bf91b3f4341c5db02da81faef53ce53c705cec461a39fa63605a1b16111b3452e8b80e406181f6aed6871061ca800155d16afddfa461604c53f2a5a2cd48457c0d9eadda9efaa6ee395287f376a3449fdaf5fbf67a004ed3e3838b0d97f1ce45470657210c05641e9c562edda7db1d65164997b025e12490062df5b32dfb8583469aa86edc4f965c0b318228f72a52db4a440d8fc9a302be171cd4efde4b15d689e2f62834ebb6e22217f73fd7e0068447de91754c72d80376e9763813abd334761dd1dd0bd343ea0a9ed75b17be454fce9a0823a73246f1a793f61ffe995176324b1bf16d2cc91cf1e297864ff8acbdb3f72997464502f2737215558a9a93d8c0734a9be0a5ba54c69cc5fcf80f794bdd798f806977908f0021aceb47dc7d4291e588e92485e5d5e23213967edd0ae170dae33e47526478f396c6b71433f544e1e73d22c3a99b998c5af4cad7893418b8caf4404be51414afd76984bb2a04ed5f085c671cc64b732b03676eb1e6c5433f6c9c042deb29fa6437ccf288bfc081192cc7065f3fa056298597c135387391aed50dce6ba7a205d075a3db4cd93867c0a32134e5a89e3d6555af39a5a69961824684734265a9bab824ce6d19c31484126b71b14dd68cb6e7368d40c008976a4847cb142cf38438dbb8cee2a435b0eb3492df9822e41ab9ee5f474c63a20bc815bed4b33128d07adb1f5d738e6abe3f81cbd67be810dba0f9350ea3186f3b46dab82034a919e3cc7437d9cc467ef057d25a8f5a5250b9d0c6a2098515c1feb1c24a2513674f9c53a80ed7dba6994405e7ffc690e3d166aecf908111fe24ce9a4203dd5540c551b6a452d180e7f8dbe3ba7cbf285c99a531ccbf866eb19066853a3b4e76a11729abdd46197879e639bdfb4dacfd86148a008184a997829a1591ec16fc6b67cf8bf448cf3855097ab471205cbfacb90285eb6868791a8e9179035dcc99ab35347c81c0e053373b73fbe077e9678078a6744610e702764837282acdba1ba792626692e4ecf9bb3c458bee04f0b6a753b35f8f6a6dd1c61cf7010b3f4222993b259231c6c34f1597798885bb1bd7099ef80b0282c24f255394ff061e134112eeb024529a7f7d125efba3b154ac852c17ed03ee5b4b82f18a9bbecee1ea8e268c99526164ccb1f82e7748310cee3b9240306c9e364f8517c44356f7fd11871ce5e6d3ea10e4f60bbc81fd9f0d8c9fce0afb2a18436a4fd9805134a96d39fd28afed28a55369aace4b3ee3087ac32472fc86fd0bede0dc885584d7aa88ee8bf44ffa8d8d97583bbdcb77eef7792939b0150359185f3d9a0fee4d936d4c149cfb81cd2735b2d1fd3444837ed80bba23b66180b7a785285f152e00c73b4d13ed856b92a0e87dede99b3618b8415794b07ad742c880288cae3ef3afd73ab312bf124f05c930051e491eaf555ed1be60770841d963078775fcf4cc20eb0acc3f8f197f48a2c327513f68e8681911618fd48ef97b770b9927c03d1ae655fbf92fc0a21f9c15ef972a3e27274b86f361b172a11a975330b0ac0915aa2a3f6defd1916cbb10ab37bd93b303827282d8c3d39d6f2dc197cd2f2f980e6ae7d8d8473dc", 0x1000}, {&(0x7f0000009400)="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", 0x1000}], 0x2, &(0x7f000000a440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010100, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x29e4}}, @ip_retopts={{0xa4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x44, 0x5e, 0x3, 0x0, [{@multicast2, 0xcba}, {@multicast2, 0x20}, {@empty, 0x6}, {@broadcast, 0x3}, {@multicast1, 0x1}, {@broadcast, 0x7}, {@rand_addr=0x64010101, 0x1ff}, {@rand_addr=0x64010102, 0xffff}]}, @timestamp={0x44, 0x10, 0x45, 0x0, 0x5, [0x4, 0x0, 0x9]}, @ssrr={0x89, 0x17, 0x1e, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1, @private=0xa010101, @remote]}, @cipso={0x86, 0xb, 0xffffffffffffffff, [{0x6, 0x5, "e0460b"}]}, @timestamp={0x44, 0x1c, 0xc5, 0x0, 0x5, [0x4, 0x3, 0xfffffffe, 0x1, 0xffff8001, 0xfffffffa]}]}}}], 0xe0}}, {{&(0x7f000000a540)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f000000a8c0)=[{&(0x7f000000a580)="4d83534201ba073d7f2590888deba06e962fd404f1ad5cce056f83d5b16d61947fd8bcd3d09e2fcf94af89b18bfc31e1d976758e05b00783328eca14063faddd9fbb87c23874c9819ef6b7409cfbf3a89cab2c7ed9307a55785c345480eab720cd5a9b", 0x63}, {&(0x7f000000a600)="001b8153b35e5ea20d1d21d09aaea1db1452f14b7e6bb5bccbc49177ae2ac80e7d1c75ce2f54eff34f920b356cb751be2c9bd192a68f6628d76443f431370bc1fd6e33fec5bb9842ec343d53ab2114d37f86a01a13a575d5d0426df024bbcbce", 0x60}, {&(0x7f000000a680)="672635a949807158300dcea3725cc458d75dd9f9aa035e2440e6b50fec44a17a4c215e7821b84a73ac0f20d3839e6ee61b6cd239426717661b9ef285f8b43a87228bc853748497cc9cd1584bd5bfab04a1eb9fdcf6f138c3c67b615e41d1dcdafe06e7d6c69a524d5b098a62df30f5f83f22c98231587fa39377f18730924339fbe569b780460567f42e4eb689996f5559c2d6786c23e7433401f72385df6488d9bb6b46c1ff7ce9a53bfebd3c5fbc8fd06a04bbb8ad881308a87a654d6bd6bd167c0d3a7be0a296ca2124da1bc58b528ca53cdb117c17", 0xd7}, {&(0x7f000000a780)="4f49cc3d622e6ec2550fb242dc5202d9614f2446b68e741e642ddce4bdabe252e5ca67ef9d44c4d13146d3f84487844aaf05eb89933c88daf29228c7b8e6d3e96f7df9acd4bbc057e30ab8c79c0896501298df082f9b280b42eb845cd15fcb508750bff47ec39a8d40206dacbc7b95b3b673db3ec5e3e9616b0e5f34778473af7151e7", 0x83}, {&(0x7f000000a840)="bbbec42640cdabbad1cb25fc1886065536ccf365d73e5624cd7413a74e97cdc0492b6b033e036e8c8a6018a5430b5f667c01575959e39488bb362f09", 0x3c}, {&(0x7f000000a880)="94e6e14fc118dbb9171839f3a48054e4d40baf6dd8a7567f55", 0x19}], 0x6, &(0x7f000000a940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x98e}}, @ip_retopts={{0x58, 0x0, 0x7, {[@generic={0x89, 0xa, "834de759805e1e8c"}, @timestamp_addr={0x44, 0x3c, 0x10, 0x1, 0xa, [{@remote, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x5}, {@private=0xa010100, 0x4}, {@empty, 0x4}, {@private=0xa010100, 0xa392}, {@multicast1, 0x4}, {@loopback, 0x5}]}]}}}], 0x88}}, {{0x0, 0x0, &(0x7f000000bdc0)=[{&(0x7f000000aa00)="2eaa957d67614fbd0ce11d0b9039ce5bd3964e3c2d61e4a485d8b99a240bed655bd0459598d63f0215f1af19ad9f517f8499eb152c091e0bb58f", 0x3a}, {&(0x7f000000aa40)="924153e4adabe2eb9a94b86f299ef1eca187da1141b90153769545151e21b20334ee489745bd7de82d1c65ad6a56698a2a7ce5115a7e9381f24454ccddf0af315a138205c969ccbb8085be46b3519f80927a9835765c2ee2dbf3853373f9a3db5e30dbebcee204338de20327596d3d1a767a1ddebeb00b9a4af1e20393edc0748c6c43e43213f2bc44e044ae5bb6fe4dc49cc9e25f28aa8f7bcd09043f43bbb572ecf6b7210bcf97", 0xa8}, {&(0x7f000000ab00)="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", 0x1000}, {&(0x7f000000bb00)="27b8d4f29b5322e3d26271d5ebb70b73d84704db62c5fe", 0x17}, {&(0x7f000000bb40)="3af54b062579e4b1b3a13287092a5f755ad90e3923cb5f009140a66ce040dd27013fd6331eef2459282f7a80e71aa4d20c1c7e38bf3fd7e82caa5e3d3b299225158dae712da25aaa4ee8fd0ba03b0f771419f4d50aabea2c0e3a40ce26eede8fffc4da52a671198db9ca6a720a1dac212dd458491d7aacde294250bc7e58f17a276c5bdeb58ad0b1a721d99ce1d832654a76938fa7e7c171d2bf82bba2", 0x9d}, {&(0x7f000000bc00)="987a8fd897175fc36bb6a73c104c5ba09647f808503a01935619b6899948ebbc676d24750ecae731ecf853df9735c1e7ba4496da0711f431f8227e37c95815c41b561ba7bec461ef3eff6fa04af7561ebc4ef43ea249336722d14ad8028e3d886293e6560fa28d0c2bfda7d33229bb23f3691baba742da00f6d30afae0cc1b063a0e7a66dc56770ee8860e86d98855537ca6b0f534d8a2f1087c5c55e9a0dfb15d632fda596e3b083c9bafd094ce2301976c638dac09", 0xb6}, {&(0x7f000000bcc0)="53d4d757cb0bd7671e237075a3511c5bfcd5895f4799c210b963038c5dffacf96da6ee5ded0affde91982218ff9528b035e43ba660c0feb8ae567eee58ead9b0c74844050dd9188f469cef2684ad5dcff8d87eb66202cbabb0874760b9b32fa4152a3bbade106938cd40d2e39c9bce605eb02d48bf121b77cc45bebd9eba51c6d75053d896ec95087e98060623a1843a34a160c071256e1b4354dcddd3c0541a4e9726162444567278735745923f05155c87de10a86ef0515fe78ba4585c17345b496524d5ed56fe4958ae88af321cf696876ae0d2eaa7ef8acf931d188c7ee0e4707ed526028c0aa770440c5c9176e4a3", 0xf1}], 0x7, &(0x7f000000be40)=[@ip_retopts={{0x70, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xdf, 0x1, 0x1, [{@private=0xa010100, 0x9}, {@remote, 0x7fffffff}, {@local, 0x7}, {@empty}, {@loopback, 0x8}]}, @noop, @rr={0x7, 0x2b, 0x79, [@private=0xa010101, @empty, @dev={0xac, 0x14, 0x14, 0x19}, @remote, @multicast1, @rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @rand_addr=0x64010102, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xd0, [@dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010101, @rand_addr=0x64010100]}, @noop, @noop, @noop, @generic={0x89, 0x7, "7c75060fc3"}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x2, [{@broadcast, 0x2}, {@empty, 0x2}, {@rand_addr=0x64010100, 0x14a}, {@rand_addr=0x64010102, 0x2}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4}, {@empty, 0x5}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14}}], 0x140}}, {{&(0x7f000000bf80)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f000000c740)=[{&(0x7f000000bfc0)="7fd35a0f03ed4cbefadb4e805fcabfefb9ad8db1f866e14a6d547963f667e76352b809a990c81739e4aac87b3cdcfa48dd4ffab1b3d3c4b48a87ecdb11323144a49d19cc1935aacc95bc000264f6043271428650445831d076eb2d93a002cf087cce7702c6e6c5a8484156dee59c344e91595d51fb7e44b5fc547f8469f6691e725cbb29ad1089cff8b4dca7d4dae8be55518152e032d0934eae95482010e1f62e7c1be631937f222dcb870e7e2d8ff360808104a26f4d05e390be524a1ed2813e40869c7ea5d84418c13a39d7e1033e7a155a573eba2b989173fbba6ce380cdff", 0xe1}, {&(0x7f000000c0c0)="9033c90f3afffe644c0ca365a2f59d9fbe1882968e87aa51dcf3f42f0f3fa2134e2fd4cce8442b5b0db98fe26bee0a36cb26968736ddac914b6945bb6b11df90d716b9a6115956b7cb", 0x49}, {&(0x7f000000c140)="168097177fc71846506f040eaa280a4b4751a6f044cae9dd3351828b970295d83d19b452c8479364c24e5c940e2eaf02b3fd99cdf14cf57e1d1eace72dc28f54dea4c4fce9ab0e5e941d32be0955ff54dff5376a9163fbf4b746314d7b7a7657d9cbe6949c5d2be4712c9a745f9df083210cf5a6c7e0ff9908e7f38327863228f0ec023c12cba35fb90a6008197e4607038eac167376f68fcb9a844db09d728ce3fc9d2a42b5abad02ff96f7776890fbcad71898f9f2987a53e8f070c17ca77860f51952549fdc392d7ce590a94ce0f98cf6dbc3a6dd27e1bc470754c5", 0xdd}, {&(0x7f000000c240)="381884f8c1140e22d5ad3920f9e24b3a854be0e6fccd5070d49fa29eed40f21223b74add53a2a437e90d2a114c1bba985d572362a7ad4a8b154651fe911d7c2cde641efa31d8dda6e064ac5ebc4ae415ac9729b84015058d3f11cebc5ece1d68af41af9134d29662d29782a24e1425e20ce84e54c500e4f3095c996e9a039edda3d9a6eb3d5517867ba421437facbf1bf4f398ffc94629c1a1712fff6b64d061c5a75c39fef8b17684367a9485f78faef767efc922d773eca010e946a44dccd76060dfa894b82bf2e34a1eee441abce4e99f264b3acc85", 0xd7}, {&(0x7f000000c340)="a76bd15f26e54c4b29f8cbca85e728e9301080a272d6f57bdb4ae5d3c20905b48b63be394041790efb7d33f4e30b727b9a517298a75918beb4039e9a5927e40fe71101fd21c64fe0a21ea12866e1e4cf590f826d0ef2c40800da111cb2de36e871761df0815c8dfaf6e17a2a44d812c0982ef1854d8c6c81786c2a05a5c6eb0cc0ba174c2c4f03b6cef4ded69c3b6beba31926a489897a8fd287a7ed79a7bc284e4ecefaf23c62a4ffcd1bdd4734620e6b4396a54fe52e4acaebb526334bd7fd30b9461585fd35a94660465cabec0ffe053d2e1a66845f5e754e85f476ce95", 0xdf}, {&(0x7f000000c440)="56154b6d53bb63d87430360709d2cef29ca4a2abcd98cb700b90ade33915979a68bb7196b0cf33c2a866b1f6d0fc540608c1e347f242f2f0d9ca648ece1c6c5896b3cb62c2f7b8ee1589337b1366bda4e2054044cf26246ff32983aea5f6c84befe5248a56b6e9f7b849475b267b075e7991f8eb9d68789c1039a2b9c9d4401a8b29e66ee7dd5a557aed56df5b1c781ac3fee90e5368bd9dbfa20b001f19155d530d5d86a5f179", 0xa7}, {&(0x7f000000c500)="287b74242cba9c6386b29ae39dcbc22e4771da0e8a915a18b7ad41c46c262a4b2463b5e63a9b6988934f938507a67b65695d7bb40cfc6113d1", 0x39}, {&(0x7f000000c540)="45fbc493cd13af845cec032a2a31945e6186764ceaebfedeba640c4c8316c50ef0a9211c56496618d36cbc7cf85855a11029d959244064a24169f63a814685748308c6221629885b59174728", 0x4c}, {&(0x7f000000c5c0)="48cffd09d2285268fffbbf6bd923a8ef4f7bf1e98b41e8c449b0f24f2662c2c9b2c1dbc68975d48cfcac62f2afdda1a5afceb9271f1c67f8c4e50d65acca0e2a7c0124c43eeca83bcde6d8be9f774537c76143679621cba2fae5c0bdfd00dbeac32840293cf75c93e67f3753043f631c4ee5f192a2ad7d7bb96b88f5fa6676455af417d5da600c8a5b36", 0x8a}, {&(0x7f000000c680)="29d5923d023ef328102b41341d0dfe690a7bb5429e7e42dc2a5b4b265d588beae4204a8a6782d1c03e7b1e14e2fe82aea03eaec3b97000695ab81f6f3e743830792de76353405d128755d6a2f8e10995d6fda5989697969ac41371b566a267aeb85afd556f2b06208e874ecfe6d80e451faf914f5f392ff96dee27b9149f2ccc250c0fd0a91659b5be38506e3d29dad15d8207649d01e5605ad619e1f107089b93b57d2d8b360cfc917fa65bef4806955baa3a7020d949d502557d905e", 0xbd}], 0xa}}], 0x5, 0x80) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x80801) 05:24:48 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000f21}], 0x122000, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000070cef1fcecd404de25095417"], 0x10) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ftruncate(0xffffffffffffffff, 0x10001000003) sendfile(r1, r2, 0x0, 0x80000001) 05:24:48 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000001c0)='./file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x1d3004, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00') mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f6465762f83673000"], &(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)='reiserfs\x00', 0x8, &(0x7f0000000200)='^},\x00') 05:24:48 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x36}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x181060, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd=r3}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r7, 0x0, r8, 0x0, 0xa1, 0x600000000000000) io_uring_enter(r8, 0x4dd0, 0x318b, 0x0, &(0x7f0000000080)={[0x4]}, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000004, 0x30, r5, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000b0000)=nil, 0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x1, 0x2004, @fd_index=0x7, 0x0, 0x0, 0x0, 0x4, 0x1, {0x3}}, 0x0) 05:24:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x6, 0x12, 0x2, 0x5, 0x0, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x80, 0x9, 0x4}}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r2, 0x0, r3, 0x0, 0xa1, 0x600000000000000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', r1, 0x4, 0x3, 0x6, 0x8000, 0x10, @mcast2, @local, 0x7800, 0x7800, 0x10000, 0x3}}) sendmmsg$inet6(r2, &(0x7f00000019c0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x401, @mcast2, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000280)="cdfb28cc2b3ec6e0", 0x8}], 0x1, &(0x7f0000000300)=[@hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x3b, 0x10, 0x2, 0x3f, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0xe0}}, {{&(0x7f0000000400)={0xa, 0x4e23, 0xfffffffe, @private0, 0x1}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000480)="bcd80f6debae4ad5b55d83160ec7e04f8558b9258d56020c83d146c6de76f382ec1b2987c65250a6b1dcec4daf3d367a4c92bfaaf7d55d2d2175e43c2b4b5654cade976fb80a74b40e1aaeddd0e82e9b63b3ff3b4e61440255825cfacd8b1e4fd4f5b6bc6574068908fa1f587530326a790636e02b216edadc8b9df95b4c39b9c7e169756fda12c6a40c76d7d3c17c44888ecffc01337f59700c4a5d52bd5f67e53dd60a9f7078680501c52d3b2cbb6238d49134e3b2e5295eed7920e09eda407259643eca1ca7daa39f79b2fb06f4f95feff8eb1b6960df22f5ad7ea883e530e487", 0xe2}, {&(0x7f0000000580)="177cf5fd2660c087e1a25152bc897876393e24e6c0c7e99cba610bae646364c2676ad925e795146fe880e42c31cbd8b6305eb463b28469713a50afab4bd315342251951ff4a0402e15baffcb81d6766afc07fe502c25e5855764054bfb96affdffd878b3d544d9a5109f1cd435027c1c4a9078", 0x73}], 0x2}}, {{&(0x7f0000000640)={0xa, 0x4e22, 0x3f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c, &(0x7f00000016c0)=[{&(0x7f0000000680)}, {&(0x7f00000006c0)="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", 0x1000}], 0x2, &(0x7f0000001700)=[@tclass={{0x14, 0x29, 0x43, 0x4}}, @hopopts={{0x18, 0x29, 0x36, {0x3c}}}, @dstopts_2292={{0x110, 0x29, 0x4, {0x3a, 0x1e, '\x00', [@generic={0x5, 0xc0, "b16823f215d2fb5233e5ff093afc878e85afbc2f564f08b61bd9a14f26987df6d09a4c5929c97cbb6c747854f6de7c30bfc8f157645b6eacbd17160183d5909bf1102240bce680627c7aa4af74300519541a76974a3452cc26327dd1b16524ad14ea67e373827a62945d128d2e9517f2aced99b1031627007050e95d234392a0b77c3e102c688c466584e4c2b55f44357bb0108edf29be6e416b4f16fdeb3375644bdbad5e1853b3299225824599155ce32adbdf2bc07866031ff7945dd715ac"}, @jumbo={0xc2, 0x4, 0x7}, @calipso={0x7, 0x18, {0x3, 0x4, 0x8, 0x0, [0x400000008, 0x7]}}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0xd5}, @pad1, @jumbo={0xc2, 0x4, 0x2c0}, @enc_lim={0x4, 0x1, 0x7}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40000000}}, @hopopts={{0x100, 0x29, 0x36, {0xc, 0x1c, '\x00', [@ra={0x5, 0x2, 0x8}, @calipso={0x7, 0x20, {0x2, 0x6, 0x8, 0x8001, [0x7, 0x1ff, 0x741b2e2e]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0xf0, 0xb6, "f4a5a524ec60bb63af22a0f9e7caa36a05c0f1edb7d65c4294622c123220f9bf1ef1debdc2ab854f1186a90bdbdfb17885c4cbae541da58a5345ad4369fdd7b8c5124eb8358ca57db5155db86859ddce825291b794461a8ccbcd864586289dd9bcb827dcab3db2f9884045e76d4bace84c5d031bff386b7185b66f86592254901dcd56b1640966d1cb3939c0c52671215070b373b62591bf76d6f99b6912f1074a1469133c2537c164c44766809b5420177c6dbe8f04"}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x0, 0x6, 0x0, 0x5, 0x0, [@dev={0xfe, 0x80, '\x00', 0x35}, @private2, @private1={0xfc, 0x1, '\x00', 0x1}]}}}], 0x2a0}}], 0x3, 0x884) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="bb8678c44121"}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 05:24:49 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r1, 0x0, r2, 0x0, 0xa1, 0x600000000000000) clone3(&(0x7f0000000440)={0x280288000, &(0x7f0000000240)=0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0), {0x1e}, &(0x7f0000000340)=""/101, 0x65, &(0x7f00000003c0)=""/8, &(0x7f0000000400)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r5, 0x0, r6, 0x0, 0xa1, 0x600000000000000) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000001640)='.log\x00', 0x240400, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x15}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) io_submit(0x0, 0x9, &(0x7f0000001a40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1000, 0xffffffffffffffff, &(0x7f0000000040)="f1a21a2fb47b6beb36428627f086958a7d3ed9da9d9bfc1f025e21f3d9c4f554d3d7ec7ec352c4c7a1bc6b4a0494e4befad0564da41b7a4a5926d326835332f3ec73f54d5ead551c4af902af94debb1f864b4b7ac1f7739f6d525035cb2f9138d5be", 0x62, 0x1, 0x0, 0x1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x7, r0, &(0x7f0000000180)="20b9e78801a4c41f5d725a6c0ea3f1eb507e076ec77348c5e2237754fec0eef58960b90447277a1ad3c2b079e1a7bb1af9054f9801061263b215a96f587d209aa20f15864c567ab3dc3cced868db2df1b5a78c14f789558e6d4da9179d94b817285b9e912e6495584ba143952414e23b1727", 0x72, 0xf1a9, 0x0, 0x3, r1}, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x8, 0x76de, r3, &(0x7f00000004c0)="0c79f35e4ece5a74de149010f7e39b8e59bec11badc59ea76bf176c2925f5fc69853f398d7924528ba54e7d2e4979d1cfe17dd07c1226f51ef4f4c49033fb6340f0aa105005abe364f730f457518aa6c7aff3abe09dac49b464986f6e42f84476ff48af3b515ab246b0c6161b55564f984ea331de2e7fe23c16bcba4d2a2a5327b9eada244df33fe9934457ee9b52c2b9ad42a9be1122d691056b22e1256b2e56004c3ddd97caf928a6a6dd094059d94d9e2f4400d8dd170a2c04feaadc1b7257c397c10047ddff92c0abba5847325f5603ea94421afbad750a3c441041dde526978f699b8d59e097c66687f5918a4da86aced53eb36bda20378d96c4ca51729b41a1688ca28f9b67140beea9158fed10d219bdb73cd5236087dbc860e7c0195afc2212fbcffbb12579b9c4a872bf6b581cfb55c265873f970db68f630e5f5792ea622a6a41707fe8f6c03a6849865fcd8401122f4f0d9831e5fcbf3980de6e02a131b9aec7dc9d56bc1aa06eddb87a77bbde5190a83c237cb2933a3d0b95f95b1ccc9573cfd1e032b80242fb09573c60e25b1619157f4922367c500a6e5e046381668d0f971f6f89b0e0bf8cb6e322efe59e8b7c37e06080bb8effc75f74ebb366ddf33bb5dd92f3ad0b535ba1f788ec99267499070b19f471a641e032c8d0d6ed4719f7a233f511529e415432d77fd9964936ea8f9fbf35254876143b5cd98e64b57ce696dec749b4c956849c1c36b50470b2fafccf735720a98912eda78451df24ce599c1b785ef27528b395cec77938411af4beac8894e0be47f375394f9c0e3866559abdd6ba7ce0278bf111c5a49f2ae24465e2f90c8300b0ffede8e7176cc9e60f14e65b898af70c2d6339c409eeb2ec85f8a2435c6e1843d654da220fb6e55bdab4fac7c8cb3fc173b6dd55dac8ed48b7aac4f0d5277ca286e66c982d0af2bb2bc4f8d430533ac3b1950515a4673d571aabe0d3d422104ef284fb6a223894d9ecc6ea372156c19a452daf0d2a5698ac21bb9809b9a067588d75f51f42d7734ab29c36e4ad48d984dd32f5828e2986f52b1a88c50a8c857f66cf613d8015d416deb588c865ebf251b66e04aa67ada8c655c3bde8e34ea36422a01e740a4cd570fac8ec523402daf1d0554d0d884c6376e9553990728b46856a917af56ef8a1dc985e9f345efb78b3d97db2e1ba5ae37719b174de1e3813b4e1ed73ad074607b784d4014a1d1861a9d68fcb09c9311a7122d43856d3655357e3fd8c94b02bf1bebc81b9d7cd0622c0c685c0323efb0cb7c161e491c58f5a92dfd30e70404cf3478a282abdf79561d4ec1d463a2c3e2d21fa395d3aba3d127454900307b6e610dc1ef749378feed28f2cbb0f7315f09a357228fa66f9c4810e95eb16fa29f6fc1c7c039bdab1cbf35251d4a265f1adfd8c5021e5592b29a8e3e33b376903e4a6969c4a8a1275fb3c122659e241232ea1405ecf160973e4dbc9b13b49b80135a0e47c2356b185fe91ff162a290b0d20c16e7805e2e0d3da44cb34993623eacf565b191d5a4ae300cc9ac84211448ba83f9c6c380dc469a7719cef364731466fd7ca1de888ce82d78ea840fe2438b187f8f2b45447687ab69184978e042cd8edff740d3e4c9759589e16fdb2b4f5dd0146f66d591a4ec87b4e1635ffd55c30775162527f48af0eb5a6d693e1a8b30f7b2f37bd7d212731085661b2d5045d96e6142c36e084e6c5b1394fd78e540cf679d2a6d4c13a95a5a832a8e3f6dd0f2a0b4c74fa7cf0b322298604b57340f1c3073fa3c7410471022e7e7a48be7cdf60f459294158f625bc65ed5a78f840ebc0313bc1327d1e5e34964a3e9721b40489c7f89e1738f64750458f20e75048741e99e1c2a0143d1061fd471f751b397bd2807b740abefa9039bd6f21fe3a2bb44d71c47175a1d254c76880235a298fa16a5fcf0e41e4f063a06bf937faf3d0beeeff262d8dcbc17c0d363bb1486f622e858708f3cb90a67b6b45b871e9d48b9c693c54d8c946cecf129fee08a868b813fe7edddf450c9d694a413f2793f8d19fa723ee6b13c74d56d7226a88c4178eb0091722b40bbec74e3f92b23cf18deecd9eb15747007f37684c19092d3d54231438e8288f288ea907abc868f93ea4291c0a36c30dd6ef0ec6427ccc65e7c3e3813eb65ec9dbe1fefc1664036a878ef8990d8e165352ae83b052deea41ea8c0007c1e11d5ab88bb49e4d071566e9a694d9f5240d7ac701afe00be154251c0e5a626b0ab66dd63bfefeec555f98f427712b29d00cdba5e01815b9d291526d35a32fa8f40850cbffb44850038ab68d4c7aa2c00ba01dcd67fe74588c25aa6344bbd1e48fd3a240e48d576aaf3551db716a7f5f46f58109ae818a45b010fd1b1ff8765bbf977de61381b1dfdf3aa65ac9bd33bc2e1b3a0752c0f710bbde1e5ddb3a17ff8eedfc539c85c02e65cabb86e84030380209d70853173204d12749cb05aab7bb8e3564755d0680b0da2006dff259f0158fde85d842dd6182f9eeaee903f069835b99157d1f8e1d7be95360478076f2fc6dfe0c36fd092ff47cc5c63f8bec8f7f21ba4d33d78549718c1eb1c04e88f6819487e22bf3215a367faff96db6a5cee54198f7e7b7c4c20991e609985cf01d799abe7daedabcf12d6adf98576106e22f82f95e24ac05d48ba73d0a4abe217360e4c54addda5de8de9a3211e83140f47ab8a9c756b3af5ec9e7bd1d0abbb8ca7bd65273b68e04ef54b1beba6d04fd4d0fdacaf03ff43ecb37a4e20f3736d445f820310d1fb878592a500294cfda6b17938b2c5d2f07c6716309e3d9122e8a190725ac7bc8250893066a17131af916d5c73105c577bece8287cd43012e569213f410670eab441c19109ed2d86f8806487ee35f238265bc17a2b2117297ca93a78d61c6bcecca76653fe6722777d630700a2f2209cafe3b48c2a6a9c7441e597b30d668bacc6b4fc1627aa95c15f352c1deaa13b070c4facd12af78ee9d86c2aff5a84f6fe6f68e073ec5f7ddcd8bee3ec3c8648a5fadd6c36520c567174ffa146035d64bfcb86c58a365e917865ab5e3547e4f7dc68278aaeff4011bc88d1b4618782360c8f6a3bb302e0cc91b552e23d5223438bfa57cf144a45aa2d1ee30171d0ca660d04819e89dd9074f44da567d4a0070fd0cc400d86ca5168fd14a8d2b234398f9c51d8c2f0d88b4571dce007ea8eac7fd60557c73323bcbf2848578661cbcb20f740949144298ba5e2126dcfdc38b8e5d123d05ebf85b452d922ccbc2768a2d6676536cccd380d07f5dd1d293267b6e1a59729aa4db0aa2090fc816787214062a5ce2203019f9f074ccfed61509764aee07c2fbf0ab8281894e6ff36841bd3ffbf34e368db7015e51e28df0560b9ebdcc8f750409f092263f5e448edaacc1d4ab8768cddb403ae704f303df79362a831a238201dde4b227b9561f413787ec606b70e7dcbf2a9fed6ed26e4bf097b1701b289dc8bd4d2627a5161b7297ce93afd3036ca69a5c244ca213e8c05f9a065adb0ce62ca59fcad3420d665dc7620f5b4ed75abcef629ec70ec1223ef7e3dd0affbd746c5606baa5cf02d6987c450b6e8e8b7534d124f0e628f781c27830d7bcf1f3a2c480b93497f194f57cc51e0498ae059a96204c0ae015080d446f5da2e75c7e4cd4cfd6c759e2ade7fae9c8d2f7363f6205911ef21dccf2269dddb977d97de91b74a7fd6d0b2ecb5f02ca256074e63213ec1c9f7e6af11154b8725ba0e0c251bf65e93fd883f61c86358db7c24baa8705ea43e072b9ae159ec48909cecb9f99b2a19081f9f23b235c7f104faed54f85635364589e1e3daca8e12fe1abacd1307bb4ef5e937e8af5a51e41a8e7215711b695077334f3f530f45a4650231e0f70ea300bcb119b63f20dfd309570425793694ec00b78e269acb359b235a18d21c14ff59cd363ba8f8bec785760173dd3e6512fac741373b124210a7dae79341e33f86689858fa3c8073798df74e7488d4a0d9b6259b083ecdbfb72b6d58f0195621662f2c5529ac15f853877a2e69cbc69fa6bd2489b1e77b0ae6693d490d0578bbbd547dcdae4a2427a9cba9a6b774d87222fb740b7cb2c45984cd655a3bd972337ffe467d4ac0d1ded273f0c89175715be7c496a1057e1c7ff195c0925ec951d11aab55e927bc9662c07369d0fe92881c9f2cb8a726ebf29f96178868a9cdd027163fef6da275cada01132ed1197a02f66f97bf0bce56118f5fb19d066a3a0cc15b08599a9745249bfdef70824ce95684eb57036a2168e67c177335b188a65d99537238233224888edfad19e960cfe199e0f103cc0d28cedc7dd0018d0226661bf0e7cc2abc899dc96c8c9015e5c478aea92b2adc221b7b0d79732e5dfb2456366a32b3d3d02814329b2d4c620ddd8f01ef5d5918c515be39e7d1c44ade65a20d650629cfe5a215e492aabaf331f5bccb08d0a48c303ec2414e2dd82476d7af04ba2e8ebe8a95021b26d5adaee51c321c9683bef57e9a40a624c74d1f3d58593fa8e5300c402f5c9b2e8d22ef05c1bf722b2c9a77c5f7de00409b0be768dd243f671f02885912a0e3cc386e8fb70def0fe8df37d61cb38b166126cd3cdd3f95f8550395484a301f74e73b2ec1c013ab6a669a108435799e10e48d8b5d3c4685819ef376a38ed39dae6d1c6d220580fd92d099fc19070def17a1dec7d4b774d69ce8d6db3bb4bc8220c0975e73a37341cf6b681b1c6a0f99e26dd18ec1f5ddd21bae65dc4493623c5ae082cb3383745beb236be941f96bf44acdbf8764342af28f5bbd9494c0bed485bf5ed238281dcbb5072c48600af7e4258b6c924d3415354334a1289ec8b1b23ccf467b4cad4a7888badfca96fc5755b947932e9ec83c3e994cc2d9e8a19393942d9ef6b7ea03f800fccd6ee1f3bb3a43056bd730f57d7d7dc7a8fa48c1e91e87cbea42c35c404f473adb2b7e3b1e6c25b03193aa682a416f0d2f5d8296ed925d8951ef5eb24f9b7dbceba49ac666af1009a7cd8c8b12e5c615bc833740ccdc5f844e5e8aefc56225ad569b9d8e817334c5f68417f0d6a813d2c0069e8fd2e7f02ad0b0e14eb96b4634a8e1a992c64be1d25d9dc8aeaf359cd8c403b2618eab97d1dd54dbab4c62bd73b2cffeac79de53cd163354dae10eaf5d5b8f1c6682f9d3f8e7a9e83415c3d3815f89a1bd8f9a5155c0ecd55e8e38bc9cd45604eaa7c050b11b817812acc3de6e5f7e4bba44be2bb0fda477710480e3bb6db39bbe118af0e693f63c7c583d2ef7a5db9ffe5fcd7a65f2e9d41d8c115d06259c5383089fccedbf5f0825b249864e6b342a87842a6db4a40eb89a0b450a76c999b6143d3a92fb5ee078c79b46d7f3cc24db1cd794b625d7702cb70c8f4362edf7e4ca2301de9e2c96d34e4b8510f2b033482f1fcc1cfb8f35c6671304ca45b0dff4b02f643f6d34853c24e0e691f2099622521ae84917f80c8e20e4b1c049c9f02bdab13a331c001f5edc591a9c36e849382c009e8f255d3a912131ce00b1ea555dd14a274c6f3b3939d4d773de485a75962a55999bb2bfbb605c0bb2aca95c9a3e5d3faf5be9b4338f499f5ea324b7f1c013848a2d2240dd7755e4c872434ba311adf69e9fad7b3027ebcdefa34fa5afad06b25b57b06df82a666fe799eb8b3a9c5dd2e58cd9382a12f1e84218894f86a64a682d2b39800d931e5af57e27760afddb39c1f9b32ff0bc03139400ea4060960d69f6812629fca9b40535929accb4c56fb06cc2551b8f5b30af0c8c10d0ceeb9f0566074a755d", 0x1000, 0x9}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x3, 0x8eb, r4, &(0x7f0000001500)="b130341ed4a19f70b5298e4c5c8564f7389819a0f4d99c7604f5415fcf5c5123e1788995b6b3d0a10eaa9b5d1213ff94882e622dc19baef02818ceb2e53619bd5d47f45cffcaa790f2d57fb7b9fdffb4362aeb83", 0x54, 0x4, 0x0, 0x2, r6}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, &(0x7f00000015c0)="0620abc9e55c5fd47b617a6db5166dc1cadeec96304c9de31346b27d9339631200bbb1b4e682091686acc796769a7280ad45ae28ab1ee22f6956176c65af3c1548e1ff12ab04", 0x46, 0x80000000, 0x0, 0x0, r7}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x5, 0x7ff, r8, &(0x7f00000016c0)="771857d99e", 0x5, 0x800, 0x0, 0x1}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, &(0x7f0000001740)="0902158485c272f9d5675bbb66e9e997420640f6f07e813d61145a79c5908834a4b01928849990e1072d6e0812ca11d2b862b2d04c0efc36ca56ac7e12af5e6bede04d9b3e53e0694454c15d77f78604b8e58d9b2a82a5aaa5d2b5cb36837668831ff18a7cd4c6a1168b90f2245ca3cc44a0b200a0f5e64ba8061ac7ad6f9eedc42a20bb6ff16b35f95707b03c753b8a3a8f53879b127fa061cba25032c8253aa81ef8", 0xa3, 0x7ff, 0x0, 0x2}, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, &(0x7f0000001840)="03785a84251669cca60b8d687a1ec55b0426694de6929648319f3b222ee9766d3aefe88df0d2690cb121eb4d232a81ff8934f93cc55fa09765f99d12b1a23a2a66aeb66d46be6ba4b7da8b1e667fcdb92174cc2470bcd10e605f65b1136bf749b0f9ff2924c7659029fa24d1420c438647b445acadf8c093f7e18407f604aca8c019d3fe8ab69f6e607642d16ca159c253348f2eb1ccb66d1079f61c6b3b2faddea647100f75d2143d44bd133424a21a6541", 0xb2, 0x5, 0x0, 0x1}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000001940)="fb631a80224a15c7d2501f65e396e4f6768887d5536e3ba4eb5d1c8a7d85c4825cf2e64d3bbf6700fc459ea2fdabb48bd4a24cc0b77927626cb2fa1ea325e924da1d12945c2b05cb4e2df6365c43c1605970961c734e65be0364b4e749c8f9a8845f27a71e3c89b000635bff5c8e5afd266d61cb498b1eb475477a386bd7c13868d2e167ff77417ba003d5810ed7a01912e957", 0x93, 0x2, 0x0, 0x1}]) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, 0x0, 0x108) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r10, 0x29, 0x8, &(0x7f0000000300)=0x8, 0x4) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 05:24:49 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x101, 0x0, 0x0, {}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x1c}}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0xd35, &(0x7f0000000200)=[{&(0x7f0000000000)="eb5da33c906d6b66732e666174000470000000f8012329cba896ebec5690de7af5ac", 0x22, 0x61}, {0x0, 0x0, 0xf21}], 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16, @ANYRES64=r0]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x846e2, 0x0) write$P9_RREADLINK(r2, &(0x7f00000000c0)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) ftruncate(r2, 0x1000003) sendfile(r1, r2, 0x0, 0x80000001) 05:24:49 executing program 7: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/wakeup_count', 0x122902, 0x0) copy_file_range(r0, 0x0, r1, 0x0, 0xa1, 0x600000000000000) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000240)={0x80000010, {{0x2, 0x0, @rand_addr=0xe4010105}}, {{0x2, 0xfffe, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000000)={0x4, 0x9, 0x8}, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/209, 0xd1}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f0000001480)=""/200, 0xc8}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/8, 0x8}], 0x7) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8914, &(0x7f0000000140)={'lo\x00'}) 05:24:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000440), 0x4) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000180)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000080)={'veth0_vlan\x00', @ifru_flags}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14) r3 = socket(0x11, 0x3, 0x9) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r5}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve1\x00', 0x0}) r7 = socket(0x11, 0x3, 0x9) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x0, r9}, 0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="68010000", @ANYRES16=0x0, @ANYBLOB="00082ebd7000fbdbdf25110000000c00018002000100", @ANYRESOCT=r2, @ANYBLOB="540001801400020076657468305f746f5f6272696467650000000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e657665300000000000000000001400020067656e657665300000000000000000003c00018008000100", @ANYRES32=r5, @ANYBLOB="140002007767300000000000000000000000000000000200767863616e31000000000000000000001400020073797a6b616c6c657231000000000000280001800800030001000000080003000100000014000200767863616e31000000000000000000005400018008000300020000001400020069703665727370616e30000000000000080003000000000000000300070000000800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400e974", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000300000002000000030001364146"], 0x168}}, 0x4000000) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x5e76, @initdev={0xfe, 0x88, '\x00', 0x20, 0x0}}, 0x1c) [ 3209.658516] FAT-fs (loop5): bogus number of reserved sectors [ 3209.660064] FAT-fs (loop5): Can't find a valid FAT filesystem [ 3210.365171] FAT-fs (loop5): bogus number of reserved sectors [ 3210.366533] FAT-fs (loop5): Can't find a valid FAT filesystem VM DIAGNOSIS: 05:29:56 Registers: info registers vcpu 0 RAX=ffffffff83e34490 RBX=ffffffff84e322c0 RCX=ffffffff83e1bddc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e34853 RBP=fffffbfff09c6458 RSP=ffffffff84e07e40 R8 =0000000000000001 R9 =ffff88806ce3c12b R10=ffffed100d9c7825 R11=0000000000000001 R12=0000000000000000 R13=ffffffff85672488 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e3449e RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055aadd7f8788 CR3=000000000d44a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000410721c000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff83e34490 RBX=ffff888008570000 RCX=ffffffff83e1bddc RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff83e34853 RBP=ffffed10010ae000 RSP=ffff88800857fe78 R8 =0000000000000001 R9 =ffff88806cf3c12b R10=ffffed100d9e7825 R11=0000000000000001 R12=0000000000000001 R13=ffffffff85672488 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff83e3449e RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff34fe36010 CR3=000000001a486000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=f228676599c93702ccfd5a5a8b313089 XMM02=fe4c6fe508a81eaab79dd63bf6e75861 XMM03=9290e9c5d01b38c353712004cd38c9e9 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=0e0d0c0f0a09080b0605040702010003 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000