0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000008000", @ifru_names="04707000"}) [ 389.414654] attempt to access beyond end of device [ 389.419707] loop6: rw=12288, want=12296, limit=20 [ 389.444615] attempt to access beyond end of device [ 389.449714] loop6: rw=12288, want=8200, limit=20 [ 389.482993] attempt to access beyond end of device [ 389.488513] loop6: rw=12288, want=12296, limit=20 20:06:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x9, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000480)=0x5, &(0x7f00000004c0)=0x2) r2 = socket$inet_sctp(0x2, 0x3, 0x84) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)=@random={'trusted.', ':$\x00'}, &(0x7f0000000340)='mslos\x00', 0x6, 0x3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="7600000bd801705562743a416456183197816395f91f05de2509cfb9ed93e98dbdbcfe7cce81721f5e7953eff908e07383a46b31d95691e70568b8723f40a07b8ce6aa6d6cbe3fad61a17859f4a30a1610cb5b95eb02d9f85ac059f0382286060e14000000000000000000000000000000000000000000000000"], &(0x7f0000000140)=0x7e) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r3, 0x80003}, &(0x7f00000002c0)=0x8) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000580)={r4, 0x8f}, 0x8) 20:06:10 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x71, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 389.566469] attempt to access beyond end of device [ 389.571547] loop6: rw=12288, want=8200, limit=20 [ 389.581566] 9pnet: Insufficient options for proto=fd 20:06:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1\x00', {0x2, 0x4e24, @rand_addr=0x6}}) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000100)=0x37ac) setsockopt$inet_mreqsrc(r1, 0x0, 0x2f, &(0x7f0000000040)={@remote, @multicast1, @remote}, 0xc) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 389.611173] attempt to access beyond end of device [ 389.616328] loop6: rw=12288, want=12296, limit=20 20:06:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x100000000000000) [ 389.682584] attempt to access beyond end of device [ 389.687735] loop6: rw=12288, want=8200, limit=20 [ 389.741198] attempt to access beyond end of device [ 389.746302] loop6: rw=12288, want=12296, limit=20 [ 389.804925] 9pnet: Insufficient options for proto=fd 20:06:10 executing program 4: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000100", @ifru_names="04707000"}) 20:06:10 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0xf, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:10 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x5000000) 20:06:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) chdir(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ptrace$poke(0x5, r1, &(0x7f00000002c0), 0x8) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x0) r3 = dup3(r0, r0, 0x80000) renameat(r2, &(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00') mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffff, 0x88000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x100000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100c}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r2}}, 0x18) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") shmget(0x2, 0x4000, 0x4, &(0x7f0000ffb000/0x4000)=nil) readv(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:10 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x500) [ 390.259897] attempt to access beyond end of device [ 390.264966] loop6: rw=12288, want=8200, limit=20 20:06:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="6e65742f6d6366696c746572001e0bdfa4ffffffffffffffff467a821f30606246ad8dcf938128a8000000000000") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:10 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x7) 20:06:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000000ffffffff00", @ifru_names="04707000"}) 20:06:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) [ 390.324662] attempt to access beyond end of device [ 390.329725] loop6: rw=12288, want=12296, limit=20 [ 390.349949] attempt to access beyond end of device [ 390.355151] loop6: rw=12288, want=8200, limit=20 [ 390.385313] attempt to access beyond end of device [ 390.390365] loop6: rw=12288, want=12296, limit=20 [ 390.470275] attempt to access beyond end of device [ 390.475357] loop6: rw=12288, want=8200, limit=20 20:06:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x400000000000000) 20:06:11 executing program 7: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast1, @in6, 0x4e24, 0x4, 0x4e21, 0x0, 0x2, 0xa0, 0x20, 0x0, 0x0, r1}, {0x4, 0x81, 0x2, 0x2cb6, 0x6, 0xfffffffffffffff8, 0x0, 0x7ff}, {0x3, 0x9, 0xc5, 0x5}, 0x7e11ba01, 0x6e6bba, 0x1, 0x1, 0x0, 0x3}, {{@in6=@ipv4={[], [], @multicast1}, 0x4d2, 0x3f}, 0xa, @in=@remote, 0x34ff, 0x3, 0x1, 0x5, 0x1, 0x81, 0x5}}, 0xe8) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 390.533935] attempt to access beyond end of device [ 390.539052] loop6: rw=12288, want=12296, limit=20 [ 390.589084] attempt to access beyond end of device [ 390.594194] loop6: rw=12288, want=8200, limit=20 [ 390.646040] attempt to access beyond end of device [ 390.651077] loop6: rw=12288, want=12296, limit=20 20:06:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000300", @ifru_names="04707000"}) 20:06:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) gettid() getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='stack\x00') socketpair$inet(0x2, 0x7, 0x7, &(0x7f0000000040)) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:11 executing program 4: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x80000001, 0x3}) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000040)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:11 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x20000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/3, 0x3}, {&(0x7f0000000080)=""/126, 0x7e}, {&(0x7f0000000100)=""/171, 0xab}, {&(0x7f00000001c0)=""/224, 0xe0}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/128, 0x80}], 0x7, &(0x7f0000002440)=[{&(0x7f00000023c0)=""/101, 0x65}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:11 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) shutdown(r0, 0x0) 20:06:11 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)="1cdbd17b2dbade501cb48788db63368403141d29bfb23b0942b0eb432d7e2aea8aca338a3e21d906bce1dd0b53e1a4b4b439e45a3b7abda14c9fba68fc3408a8beaf679c0ae2eafc11770ed91fb4b22a1d66e30b642a1503821ecf02b6861eb46bea1e13b34b0594202c01e417bd443d83884796f27a2890c60a375d73983b6ca3bcc49c2cd274ca2d09499609f89f7f04ce3f3481c639d56270adac46d1b0d88e2e99ac85dfb79e1db60f0b638a06432d7f8961788c6a008f75ab6fb4d1cc0d0ff1bfa2244d49c3", 0xc8}, {&(0x7f0000000280)="9b45151a93115c11d3b9574ddd797a2025e653f8615be6296b9c1e05e828696c653395260ec1042eb1c97ccf64927ea267165711cb78a708b45ceb048e7cb01549fe68b0e74452d0a037a7dbbf2f87c70f2fa4e83b2d2547641a028779e962fe87606db3fe8a9e0a2fa7000db34342415ce951335281c093236aa9c9f6c58388ad43cd911d7ca76fb7916857216ae397d4ca4b35480de966bdfa2501e1a2c60c0ca88863b5d27963ab4d27c885ba9bb8c2e612d1425b2e544af0923895742ea1d5ef716599b2dc023849e29acd4f0be2be9e7ccd84903bb0f77da48bef95691542d3b469", 0xe4}, {&(0x7f0000000380)="5a7faa8ff4f511d284efc0068341b1660648cef5c2bf49a5299644f1c12a458729e78bfd225403be8c2089d85b2d61526025a0aa2f111ec844cd28cd14694c6497656d1632fead781d22f6e5ca778c6514ce25d72aabc6c4ab819b5aa274608af3f3804ec7741612f6614bd02763efc3cb15339805d04b105e92f43268938ece5ac3efe3", 0x84}], 0x3, 0x0, 0x0, 0x40}, 0x3b}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000000040)={0x0, @in6}, &(0x7f0000000000)=0x84) [ 391.148206] attempt to access beyond end of device [ 391.153272] loop6: rw=12288, want=8200, limit=20 20:06:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x1, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x2100, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x1}) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) 20:06:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 391.223217] attempt to access beyond end of device [ 391.228301] loop6: rw=12288, want=12296, limit=20 [ 391.253649] attempt to access beyond end of device [ 391.258747] loop6: rw=12288, want=8200, limit=20 20:06:11 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 391.277161] attempt to access beyond end of device [ 391.282286] loop6: rw=12288, want=12296, limit=20 20:06:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x5, 0x9, 0x108380000000000, 0x5}, {0xfffffffffffffff9, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x4}, {0x100, 0x4, 0x7af, 0x800}, {0xcb, 0xff, 0x2, 0x2b58}]}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000100)="6c059e1ce76e8adc8e68f6a903bad9b1434862d29cfd7d5405bb11b44d09c7fa15f81dfb3235c755c2aabd83083947071b2eeb66d7894c2cca9062fda02db8c02a3c79d8191101f798accf748b6a59179e5b6f66a24a6f0ea76b673ee8ea314c75d5b26708d6748485e00cfec0ac245563cac33423517229c84e08becf9a44ac4585933a1d5c1d08081b6a904f3a6f91790367f20bd27464de965b7c05d10e18961d59b34b2cffc6e391d65446067c7d8e563e44b7800813f40738044aec214a930a67fd623a2c69dc2e1772e79651280601525f30801b8853a3bfab59ddbca015a7f8", 0xe3) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000200", @ifru_names="04707000"}) 20:06:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x800, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000480)) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) [ 391.355448] attempt to access beyond end of device [ 391.360623] loop6: rw=12288, want=8200, limit=20 [ 391.389181] attempt to access beyond end of device [ 391.394232] loop6: rw=12288, want=12296, limit=20 20:06:11 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffc, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 391.455087] attempt to access beyond end of device [ 391.460212] loop6: rw=12288, want=8200, limit=20 20:06:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000100)="6425dd9a3f73b63d6291eceade2dc53354049e574760ce3d1344bb05edd43a1564be6ca6f5ab77e262976c6d5d3fc0085d605b5dc7b1bf296371b80d69d5f1cd91c541bddab82697b960fe3813ed663bd12f5038ebdec9544e8dcd9daab73e66df84c3cdb0a610d1cb558405771f4bb3355f3210fa6180398b247574ddd2507d41abdcc96be88fd123e1384bb8af6aabd6d2ca70e33ed43a72d1670ce572", 0x9e}, {&(0x7f00000001c0)="f357a20a38d89ab151e7b8a469d4f3802160e36eff36fec30e486345004113a03c5ea6949e09249fe4e47ab04013f500ac97c5499f43d63edf14286ca214851cc812be46d80ca0b5b4c54cf90ffbde3d418a6ea26343277627eab5ef24361b", 0x5f}, {&(0x7f0000000240)="967866de4649a49d1a346622878237eb6decd8b03791b26f975841ad89eb493c8e4ca573764b35149d90e8cf7d3737b692762cd1322550fb74986406090f3494c7b972fc222026cbaee0c7b5d53d2fb57bf68e32af6a8d9f90d482bdf3fa64fc7d53a59cb5a1fe78a000f666f8bffd367ac86f1336394aee28728d0e938adc0270cfc389fec873455d99d953732dcd8312b9f45f8841431c4fe0fe2e4a86bff2dd4f48ff3a7d19f1f3da7a", 0xab}, {&(0x7f0000000300)="aacca9e079ec9e424097138b13228197ec6568b7b20b7500885df48f64ec99a401bef91a1b47aa4501622aa2cd979a5ebb2ab1c28c9987e5dc843c55281a3771e465f02827dd22794ff2ac2b4ec6323839b3ae32543724fbed9c7207bc206ff28cf1fcad039fd5c5007da244ee064370e72b1623661ae8d76e82b19bb603a4a7dcdf0eb0be178d9658ad8b63425b1ffe8ce39d7588b4b62b71a17c0f0a6589eab2ead34962b759cf233eddddcbac373773a15493163601e9eccc1e8b7bb3af83274e699ad59b066af2b54334a5edcba10e23bba320bd1b8b189ce15b95d0ccce9be83c5ece967448272ce4fe6b", 0xed}, {&(0x7f0000000bc0)}, {&(0x7f0000000400)="be92c4d094ac8520fba31a88f3ec958557ee42153b27c98fcba7bf9184313f538a506dad2a93ae140bec98918b42cd4a21c59ac7ad6cf53a1382690341bee921", 0x40}, {&(0x7f0000000440)="d5e3862f3a16254362ee8647040a92fc7c3370d75b1f4f55a3610d8dffd1d8bd93335fb6bd2aa1d964d0b89b25b85a1392a1536d22befce5d54cbc628293c950a342a1a9f965e4621cf52e19387193c2dc6d055ebf164e97d90758172ac3a4f1cdf696232e4b0c72d85c", 0x6a}, {&(0x7f00000005c0)="fe3ccd6d0c18ecf8dda1998b32fe2e9ca4795e814baf41fea373c0581243ee34b96f5f0e416bc76e939b5b6477cd283c9acc64ddb5404811519f0753d41d746a03d9c4b632d0f2ef41dc141079bf9bdadb0330b0f6d0ca", 0x57}, {&(0x7f0000000640)="6ef3dac5c521d9ec73f63a895203431713bf8c789d46e7e6fa82d541e7b1f1c9c8076ca7b6f77df13c8a0419dcc160ccf803335f259f1ecca94d91945d51ac356880711c4356b5ecb7a45524ca420f717d337423611dd0cdc4fc6f4cc533aa547411432f1e62fb38cb7ab83780d1a2f6543e2cec87514f878b2012c69d1654f680b38b49c2e66063418ce36bebece7ab5c8f8730b3", 0x17e}], 0x9) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x28800, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00000007c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000040)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:12 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0xffffffff7ffffff9, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 391.577265] attempt to access beyond end of device [ 391.582963] loop6: rw=12288, want=12296, limit=20 20:06:12 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:12 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)="620355a6fc", 0x100000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x10000, 0x7}) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) 20:06:12 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000300", @ifru_names="04707000"}) 20:06:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:12 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) 20:06:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000180)='./file0\x00', 0x10000000000) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:12 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0xfffffffffffffff9, 0x800000010002, 0x8005, 0x3, 0x804d, 0x3, 0x80000000, 0x10001, 0x0}, &(0x7f00000002c0)=0x20) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r1, 0x578e80000000, 0x200}, 0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x101000, 0x0) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x80004000, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x3b, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000300)=[@in6={0xa, 0x4e22, 0x1, @local, 0x3ff}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e22, 0x400, @loopback, 0x2791}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x1f}, 0x687}, @in6={0xa, 0x4e23, 0x0, @remote, 0xb62}, @in6={0xa, 0x4e24, 0x3ff, @mcast1, 0xc8f5}], 0xac) [ 392.047741] attempt to access beyond end of device [ 392.052962] loop6: rw=12288, want=8200, limit=20 20:06:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)=""/195, 0xc3}, {&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000000400)=""/97, 0x61}], 0x3, &(0x7f00000005c0)=""/183, 0xb7, 0x9}}, {{&(0x7f0000000680)=@xdp, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000700)=""/116, 0x74}, {&(0x7f0000000780)=""/11, 0xb}, {&(0x7f00000007c0)=""/10, 0xa}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/207, 0xcf}, {&(0x7f0000000a00)=""/166, 0xa6}, {&(0x7f0000000ac0)=""/98, 0x62}], 0x8, &(0x7f0000000bc0)=""/26, 0x1a, 0xe0f}, 0x2}, {{&(0x7f0000000c00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/77, 0x4d}], 0x1, &(0x7f0000000d40)=""/139, 0x8b, 0x9}, 0x2}, {{&(0x7f0000000e00), 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)=""/214, 0xd6}, {&(0x7f0000000f80)=""/20, 0x14}, {&(0x7f0000000fc0)=""/92, 0x5c}], 0x3, &(0x7f0000001080)=""/58, 0x3a, 0x71ac75e}, 0x5}, {{&(0x7f00000010c0)=@in={0x2, 0x0, @rand_addr}, 0x80, &(0x7f0000001340)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000001140)=""/26, 0x1a}, {&(0x7f0000001180)=""/38, 0x26}, {&(0x7f00000011c0)=""/126, 0x7e}, {&(0x7f0000001240)=""/226, 0xe2}], 0x5, &(0x7f00000013c0)=""/250, 0xfa, 0x10000}, 0x2}], 0x5, 0x20, &(0x7f0000001600)={0x0, 0x989680}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, r1}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl(r2, 0x7ff, &(0x7f0000000100)="83745c539fdc164cf61b7b71cf197adb149bcdcddf6afe2b6a95303d73f7e676393ee7861d61e259231adf48868cc6d67912ae2a99dbd34cd1a672fc594c8ec88950bf54ec30e4324a072b4cca0f35631cabdced1ce37f0b3b129481998b15f82d25d7f84d7968da5ec92ff16db9b4e6ab5f2ad29ad3614d7edd1ff39bf6aa496925b877c8") ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) 20:06:12 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x801, 0x100) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) accept4$unix(r1, &(0x7f0000000040)=@abs, &(0x7f0000000100)=0x6e, 0x80800) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000280)=""/233) [ 392.094353] attempt to access beyond end of device [ 392.099530] loop6: rw=12288, want=12296, limit=20 [ 392.115675] attempt to access beyond end of device [ 392.120733] loop6: rw=12288, want=8200, limit=20 [ 392.126579] attempt to access beyond end of device [ 392.131633] loop6: rw=12288, want=12296, limit=20 20:06:12 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x70, 0x4, 0x7, 0x5, 0x6a82, 0x0, 0x5, 0x9436, 0xf, 0x5, 0x1000, 0xc36, 0x101, 0xfff, 0x4, 0x5946, 0x58a3, 0xff, 0x100000000, 0xffff, 0x1, 0x2, 0xffffffffffffffe1, 0x4, 0x7, 0x8, 0x9, 0x401, 0x100000000, 0x7fff, 0x1f, 0x9, 0x4, 0x38948e6d, 0x1, 0x1, 0x5, 0x0, 0x7, 0x1, @perf_config_ext={0x1, 0x7}, 0x10000, 0x6, 0x7, 0x7, 0x3, 0x9, 0xa26}, r2, 0x4, r0, 0xb) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 392.177804] attempt to access beyond end of device [ 392.183240] loop6: rw=12288, want=8200, limit=20 20:06:12 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000300", @ifru_names="04707000"}) 20:06:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x10) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000002c0)=""/151) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000377ff8)='.', &(0x7f0000000140)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") fremovexattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="735f6375726974792e6e65752f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d707000000aee7977312195df3ee3fbbebd2e05987ff84724fcb2afd18c6392a8e79541d6509cc71ea64dd7c2ae36709c73c1343fef9e00eece4d2bc29fc8edceff898ea43"]) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 392.230439] f2fs_msg: 104 callbacks suppressed [ 392.230448] F2FS-fs (loop6): invalid crc value [ 392.297605] attempt to access beyond end of device [ 392.302646] loop6: rw=12288, want=12296, limit=20 20:06:12 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) [ 392.361583] F2FS-fs (loop6): invalid crc value [ 392.366379] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 392.415506] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 392.422648] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 20:06:13 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:13 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x8, @remote, 0x5e10631}}, [0x1639, 0x5, 0x7, 0x100, 0x5, 0x4, 0x5, 0xba, 0x7ff, 0x40, 0x7ff, 0x400, 0x7, 0x100, 0x5]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0x2}, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$setlease(r2, 0x400, 0x2) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$intptr(0x26, 0x1) seccomp(0x1, 0x5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x440000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 392.466991] attempt to access beyond end of device [ 392.472189] loop6: rw=12288, want=8200, limit=20 [ 392.478365] F2FS-fs (loop6): invalid crc value [ 392.483666] attempt to access beyond end of device [ 392.488831] loop6: rw=12288, want=12296, limit=20 [ 392.502821] F2FS-fs (loop6): invalid crc value [ 392.507533] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 392.609391] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 392.616581] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 392.680379] attempt to access beyond end of device [ 392.685419] loop6: rw=12288, want=8200, limit=20 [ 392.690746] attempt to access beyond end of device [ 392.695804] loop6: rw=12288, want=12296, limit=20 [ 392.702182] kauditd_printk_skb: 63 callbacks suppressed [ 392.702195] audit: type=1326 audit(1534277173.250:79): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=21137 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 392.704185] attempt to access beyond end of device [ 392.712464] audit: type=1326 audit(1534277173.256:80): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=21137 comm="syz-executor3" exe="/root/syz-executor3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x457089 code=0x0 [ 392.727165] loop6: rw=12288, want=8200, limit=20 [ 392.727694] attempt to access beyond end of device [ 392.761528] loop6: rw=12288, want=12296, limit=20 [ 392.777308] attempt to access beyond end of device [ 392.782328] loop6: rw=12288, want=8200, limit=20 [ 392.787660] attempt to access beyond end of device [ 392.792705] loop6: rw=12288, want=12296, limit=20 [ 392.799311] attempt to access beyond end of device [ 392.804305] loop6: rw=12288, want=8200, limit=20 [ 392.809582] attempt to access beyond end of device [ 392.814602] loop6: rw=12288, want=12296, limit=20 20:06:13 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000400", @ifru_names="04707000"}) 20:06:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x6) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000640)=""/4096, &(0x7f0000000000)=0x1000) 20:06:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) socket$packet(0x11, 0x0, 0x300) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0xa7, 0x40, 0x2260, 0x9}, 0x6) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xffffffff, 0x9, 0x5}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={r2, 0x81}, &(0x7f00000002c0)=0x8) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:13 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80000, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xe80, 0x8, 0xf1, 0x1}, 0x14) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:13 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 392.944158] attempt to access beyond end of device [ 392.949258] loop6: rw=12288, want=8200, limit=20 [ 392.954816] attempt to access beyond end of device [ 392.959879] loop6: rw=12288, want=12296, limit=20 [ 392.977508] attempt to access beyond end of device [ 392.982595] loop6: rw=12288, want=8200, limit=20 20:06:13 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1ff, 0x2) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) 20:06:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 392.994649] attempt to access beyond end of device [ 392.999720] loop6: rw=12288, want=12296, limit=20 [ 393.060270] attempt to access beyond end of device [ 393.065406] loop6: rw=12288, want=8200, limit=20 20:06:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000600", @ifru_names="04707000"}) 20:06:13 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xd28, 0x10000) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0x6) r2 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RSTATFS(r0, &(0x7f00000000c0)={0x43, 0x9, 0x2, {0xfffffffffffffffd, 0x9, 0x5, 0x80, 0xffffffff, 0x3, 0x68a1a390, 0xc5, 0x8}}, 0x43) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x40, 0x20) write$P9_RWSTAT(r3, &(0x7f0000000240)={0x7, 0x7f, 0x1}, 0x7) r4 = socket$inet_sctp(0x2, 0x100000000005, 0x84) setsockopt(r0, 0x8e58, 0x3, &(0x7f0000000140)="6d0e8db1befb19702f1ebf26c830b6c28a68f892cc23c1f2618dfeb253c80a1bd9cf570b3a1289a72bc2db94a7cb4997348ae683b309b74551ff5035440b19619def25ac4f4ed0e557d68535f74f4770ffb82423d7080b1361e57731daf5c0e1bb9ca15a957831280df52aaedd9d3bc44a8b943f61444bfe249968e6f63bfac2991b6f74a17c7be8d65ad8125fb8a00837", 0x91) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 393.116649] attempt to access beyond end of device [ 393.121768] loop6: rw=12288, want=12296, limit=20 [ 393.137871] attempt to access beyond end of device [ 393.142934] loop6: rw=12288, want=8200, limit=20 [ 393.152621] attempt to access beyond end of device [ 393.157683] loop6: rw=12288, want=12296, limit=20 20:06:13 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ftruncate(r0, 0x101) 20:06:13 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 393.346382] attempt to access beyond end of device [ 393.351479] loop6: rw=12288, want=8200, limit=20 [ 393.384224] attempt to access beyond end of device [ 393.389324] loop6: rw=12288, want=12296, limit=20 [ 393.413255] attempt to access beyond end of device [ 393.418326] loop6: rw=12288, want=8200, limit=20 [ 393.427222] attempt to access beyond end of device [ 393.432379] loop6: rw=12288, want=12296, limit=20 [ 393.450210] attempt to access beyond end of device [ 393.455279] loop6: rw=12288, want=8200, limit=20 [ 393.460717] attempt to access beyond end of device [ 393.465789] loop6: rw=12288, want=12296, limit=20 [ 393.472540] attempt to access beyond end of device [ 393.477623] loop6: rw=12288, want=8200, limit=20 [ 393.482704] attempt to access beyond end of device [ 393.487784] loop6: rw=12288, want=12296, limit=20 20:06:16 executing program 3: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r0 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x9, 0x1, 0x2, 0x81, 0x4, 0x6}) 20:06:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:16 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:16 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:16 executing program 2: r0 = socket$inet6(0xa, 0x1000200000005, 0xe1) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) fcntl$addseals(r0, 0x409, 0x8) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:16 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30fffffffe00", @ifru_names="04707000"}) 20:06:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) [ 395.595925] attempt to access beyond end of device [ 395.601045] loop6: rw=12288, want=8200, limit=20 20:06:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:16 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) umount2(&(0x7f0000000080)='./file0\x00', 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x8000, 0x0) 20:06:16 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000000)=""/68, 0x44}, {&(0x7f0000000280)=""/112, 0x70}], 0x3, 0x0) 20:06:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x8) readlinkat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/211, 0xd3) r2 = syz_open_procfs(0x0, &(0x7f0000001780)='loginuid\x00') readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 395.702287] attempt to access beyond end of device [ 395.707387] loop6: rw=12288, want=12296, limit=20 [ 395.751264] attempt to access beyond end of device [ 395.756433] loop6: rw=12288, want=8200, limit=20 20:06:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300400", @ifru_names="04707000"}) [ 395.816884] attempt to access beyond end of device [ 395.822280] loop6: rw=12288, want=12296, limit=20 20:06:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000000)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x121200, 0x40) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0"], 0x15) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:16 executing program 0: socket$key(0xf, 0x3, 0x2) r0 = gettid() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x80000000010000, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) write$P9_RLCREATE(r2, &(0x7f0000000000)={0x18, 0xf, 0x4, {{0x0, 0x2, 0x3}, 0x3}}, 0x18) io_setup(0xfff, &(0x7f0000000040)=0x0) io_getevents(r3, 0x0, 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000100)) 20:06:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/228, 0xe4}, {&(0x7f0000000200)=""/245, 0xf5}, {&(0x7f0000000300)=""/7, 0x7}, {&(0x7f0000000340)=""/108, 0x6c}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/143, 0x8f}], 0x6) 20:06:16 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xbc, 0x20}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0xe06b}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 395.874938] attempt to access beyond end of device [ 395.880062] loop6: rw=12288, want=8200, limit=20 [ 395.885633] attempt to access beyond end of device [ 395.890757] loop6: rw=12288, want=12296, limit=20 [ 395.897177] attempt to access beyond end of device [ 395.902273] loop6: rw=12288, want=8200, limit=20 [ 395.907706] attempt to access beyond end of device [ 395.912771] loop6: rw=12288, want=12296, limit=20 20:06:16 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0"], 0x15) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="17c68e12c4ded29bb5de916aa48376f6cc0dad5aaaef22a173779bf4c39a4d30116548b70afed583632589fe81617288aee72bd2593ee755681096faf66be9890a118335281b83b1933366eb96934763778ba7c4be3a5698e2854057466ed675359211162d720e39ffc4370e0d6911f5a5d114525d34d07da0570866bd57d606ed0cbc753b485219ffd1edca504aaf939a10ebc6f4a1c28e583f54803617d0912189a4d231f9c47e42daa146dded0bd25c3450b9a3c3dfeca47e6509177d27fef3e6da51d3") ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000200)="0024c3fbb2e376fc342ca3e7c0dfa49d4420600b117aeee06ae11f9b70819390b526337080f0fed3399c7dd964788e8cfdb5fb7d78167eb8abdc0bb403b317672e78eeb8a63dbb89b994821f976a9143f2a32cc68d72559be9aa5bc57242b0208c205b6c35acfb82d7b8259240cc1c93e0d727fdd1afea1c5098d1aabcc06cda35f1e7f423890ed4dcaf54ec80db698ccc3874d15a66b5ad782cf61ff20be06a4dc0f99eb9bbb9522f2c1ea5807c2a5399bf530e4807b1d627578dd80c23010306d3f6a0c9c1a73764dbba3b3aaf8c10c5f352cfbbddd5") 20:06:16 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x2, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@mcast2, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000500)=0xe8) bind$packet(r2, &(0x7f0000000540)={0x11, 0x8, r3, 0x1, 0x1, 0x6, @dev={[], 0xd}}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) fcntl$setown(r0, 0x8, r4) r5 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0x40000) getsockopt$inet6_opts(r5, 0x29, 0x0, &(0x7f0000000100)=""/209, &(0x7f0000000200)=0xd1) r6 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x4, 0x12002) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000080)={r1, 0x100000001}, 0x8) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f00000002c0), 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000280)={r1, 0x1}, 0x8) accept(r0, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000380)=0x80) 20:06:16 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) clock_getres(0x6, &(0x7f0000000080)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0x101000000000, 0x4) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='./file0\x00', 0xfe, 0x8) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) sendto$inet(r1, &(0x7f00000002c0)="23b7713d93b26be843a97987d04dcac2dd7d268ceb6285575e0d62d321ef9ad74100fd0ca88d954018c2b05aa169a00e028d4cf9de82627f7b006adfd963d5ab1a4bb13c9451d3fba321976d86710d514c64ff3afe18b69f0769d4fda99877", 0x5f, 0x24040041, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) write$P9_RSTAT(r2, &(0x7f0000000340)={0x5b, 0x7d, 0x1, {0x0, 0x54, 0x9, 0x100000000, {0x80, 0x4, 0x4}, 0x80000, 0x1, 0x2, 0x0, 0xa, 'net/route\x00', 0xa, 'net/route\x00', 0x0, "", 0xd, 'cgroup.procs\x00'}}, 0x5b) clock_gettime(0x0, &(0x7f0000003f40)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003ec0)=[{{&(0x7f00000003c0)=@alg, 0x80, &(0x7f0000002a40)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/203, 0xcb}, {&(0x7f0000002740)=""/240, 0xf0}, {&(0x7f0000002840)=""/226, 0xe2}, {&(0x7f0000002940)=""/223, 0xdf}, {&(0x7f0000000540)=""/111, 0x6f}], 0x9, &(0x7f0000002b00)=""/4096, 0x1000}, 0x7fff}, {{&(0x7f0000003b00)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003b80)=""/69, 0x45}, {&(0x7f00000005c0)=""/47, 0x2f}, {&(0x7f0000003c00)=""/130, 0x82}, {&(0x7f0000003cc0)=""/219, 0xdb}], 0x4, &(0x7f0000003e00)=""/188, 0xbc, 0x800}, 0x3}], 0x2, 0x10000, &(0x7f0000003f80)={r4, r5+10000000}) ioctl$TIOCSBRK(r2, 0x5427) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x0, 0xd246f1fb2f922e3c, 0x9e94, 0x0, r3}) [ 396.165284] attempt to access beyond end of device [ 396.170376] loop6: rw=12288, want=8200, limit=20 [ 396.234564] attempt to access beyond end of device [ 396.239593] loop6: rw=12288, want=12296, limit=20 [ 396.271126] attempt to access beyond end of device [ 396.276144] loop6: rw=12288, want=8200, limit=20 [ 396.289151] attempt to access beyond end of device [ 396.294240] loop6: rw=12288, want=12296, limit=20 [ 396.333707] attempt to access beyond end of device [ 396.338739] loop6: rw=12288, want=8200, limit=20 [ 396.345737] attempt to access beyond end of device [ 396.350789] loop6: rw=12288, want=12296, limit=20 [ 396.359618] attempt to access beyond end of device [ 396.364650] loop6: rw=12288, want=8200, limit=20 [ 396.374251] attempt to access beyond end of device 20:06:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000600", @ifru_names="04707000"}) 20:06:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0"], 0x15) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:16 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/18, 0xfea6}, {&(0x7f00000004c0)=""/149, 0x359}], 0x2) 20:06:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) socketpair(0x0, 0x6, 0x10000, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000240)) clock_gettime(0x7, &(0x7f0000000000)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) r2 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7fffffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x13}}, 0x2}], 0x1c) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) 20:06:16 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000400)='/dev/qat_adf_ctl\x00', 0x80400, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xffffffff) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)=""/222) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) recvfrom(r1, &(0x7f0000000000)=""/185, 0xb9, 0x62, &(0x7f0000000280)=@rc={0x1f, {0xfb, 0x20, 0x1, 0xfffffffffffffff9, 0xffffffff, 0x1d}, 0x81}, 0x80) 20:06:16 executing program 7: r0 = fcntl$getown(0xffffffffffffff9c, 0x9) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x2000000000000, 0x0, 0x1}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, r2, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x80000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1f}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x46d}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x101}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 396.379391] loop6: rw=12288, want=12296, limit=20 [ 396.442372] QAT: Invalid ioctl 20:06:17 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\'', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000080)=0x4, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) r3 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x200000000000001) sendmsg$nl_route(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_delrule={0x34, 0x21, 0x200, 0x70bd26, 0x25dfdbfc, {0xa, 0x20, 0xa0, 0x5, 0xb04, 0x0, 0x0, 0x5, 0x8}, [@FRA_DST={0x14, 0x1, @mcast1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 20:06:17 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x20, 0x7ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x8, 0x9, 0x20000}, 0x10) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1001, 0x84) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000040)=0xfffffffffffffd4d) [ 396.505728] QAT: Invalid ioctl 20:06:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e"], 0x20) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000200", @ifru_names="04707000"}) 20:06:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="6e9a29cfc00d22fd0eb0231836f7275e290b45e19991062fff3ee40a5b5d25999a9991d77ead05c7f6aac7ef7852770438c861009e96dbb6158bebd2cb7fb84161a7831d8f42107afb360321b6be52ee3521644b5868d75d64d065dbc80ea4114843482c4de2f940512e46804c9904b7fb915b3c1c5e2f9028c941dcd6a08df6f8d08ea4b5406aad57758ad59e7f09aad44008b9941d642b2b581572286db5e6f0a098569f93b72353acf3d786a0a34bb229edf3aa100b8a8e1a3c70efb65f53d83ae313cfb502f87f000d854eae588a8089af92848a3baf1ddda14867d1dfec", 0xe0, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate(0xc, r0, 0x0, 0x0, r1) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x4, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:17 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0xa00) 20:06:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r0, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000100)=""/67, 0x43}, {&(0x7f0000000180)=""/129, 0x81}], 0x3, &(0x7f0000000240)=""/114, 0x72, 0x400}, 0xe}, {{&(0x7f00000002c0)=@ax25, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/98, 0x62}], 0x1, &(0x7f00000005c0)=""/4096, 0x1000, 0x7ff}, 0x4}, {{&(0x7f0000000400)=@pppoe, 0x80, &(0x7f0000001940)=[{&(0x7f0000000480)=""/5, 0x5}, {&(0x7f00000015c0)=""/248, 0xf8}, {&(0x7f00000016c0)=""/61, 0x3d}, {&(0x7f00000017c0)=""/222, 0xde}, {&(0x7f0000001700)=""/45, 0x2d}, {&(0x7f00000018c0)=""/128, 0x80}, {&(0x7f0000001740)=""/9, 0x9}], 0x7, &(0x7f00000019c0)=""/126, 0x7e, 0x800}, 0x6}, {{&(0x7f0000001a40)=@llc, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000001ac0)=""/60, 0x3c}, {&(0x7f0000001b00)=""/17, 0x11}, {&(0x7f0000001b40)=""/123, 0x7b}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x4, 0x0, 0x0, 0x3}, 0x8}, {{&(0x7f0000002c00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @remote}}}}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002c80)=""/174, 0xae}, {&(0x7f0000002d40)=""/4096, 0x1000}], 0x2, &(0x7f0000003d80)=""/50, 0x32, 0x9}, 0x2}, {{&(0x7f0000003dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003e40)=""/4, 0x4}], 0x1, &(0x7f0000003ec0)=""/208, 0xd0}}, {{&(0x7f0000003fc0)=@hci, 0x80, &(0x7f0000004100)=[{&(0x7f0000004040)=""/190, 0xbe}], 0x1, 0x0, 0x0, 0x1200000000}, 0x200}, {{&(0x7f0000004140)=@xdp, 0x80, &(0x7f0000005640)=[{&(0x7f00000041c0)=""/65, 0x41}, {&(0x7f0000004240)=""/35, 0x23}, {&(0x7f0000004280)=""/21, 0x15}, {&(0x7f00000042c0)=""/250, 0xfa}, {&(0x7f00000043c0)=""/134, 0x86}, {&(0x7f0000004480)=""/4096, 0x1000}, {&(0x7f0000005480)=""/171, 0xab}, {&(0x7f0000005540)=""/250, 0xfa}], 0x8, &(0x7f00000056c0)=""/58, 0x3a, 0x6}, 0xe}], 0x8, 0x10000, &(0x7f0000005900)={0x77359400}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c1faa11d05c4a958255fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000005940), &(0x7f0000005980)=0x4) 20:06:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e"], 0x20) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:17 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x20000) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x4000, 0x10000}) r2 = semget$private(0x0, 0x4, 0x114) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000100)=""/169) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x2c0001, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000080)={0x1000, 0xffffffffffffffff, 0x200, 0x0, 0x7ff, 0x8, 0x401}, 0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00`\x00', @ifru_names="04707000"}) 20:06:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000140)={r2, 0x3f}, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x400, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:17 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673c0", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0xe2, 0x4}}, 0x30) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000000380)='.', &(0x7f00000005c0)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x500f, &(0x7f0000000540)="1caf000000005bf55f14e9437e02bfe75fe579fedafa0ab8224cdf3fa0a93ab70d0dd69d9938ff4ba1a5b684daca17407057af4173166f77aef3496ea798e0a1fb4293cbab") getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:17 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x20000000, 0x400, 0x1, 0xff, 0xffff, 0xe3, 0x9, 0x37a, 0x4}, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x20000000480) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040), 0x4) lookup_dcookie(0x3, &(0x7f0000000380)=""/4096, 0x1000) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = gettid() write$cgroup_pid(r0, &(0x7f0000000100)=r1, 0x12) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) clock_gettime(0x400000000000, &(0x7f0000000080)) 20:06:17 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") write$P9_RREADDIR(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a6000000290100050000001002000000020000000000000007000000000000000407114e86a8de7aec64e820002e2f66696c6530010000000000000000000000002c335a3a000000000207002e2f66696c653010010000000300000000000000090000006c6530210300000000000707002e2f66696c65300101000000070000000000000026000000000000000107002e2f66696c653000000000000000000000000000000000004000000100000000"], 0xa6) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) setsockopt$inet6_buf(r1, 0x29, 0x1b, &(0x7f0000000280)="24b0546fda62bb1aa000b560f28f2d29162946d7b24664e3494cbff24c82c6bdb76a2d44570e7730ede55e85135509c5df9cc7bcb66933db976e58004c0007c98fb4b38f079fcc26126fe9e9a4162f9ec759fe8b389afe6cb069fd84beb08a22ecdb0ca6489b7cc2e704be86800bde5199ba9ea5552c25e9896c226c2c810bfd118b9060daabba33f7dfd81fb578dec99f69cf63631b34904e08cd084ba578993b94cb8cb785c05074aa8055884ffc405270e6417d95a9f2e9f1b1c2a53b9f01721050d381753988552a199e7b422d", 0xcf) 20:06:17 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e"], 0x20) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 397.395857] 9pnet: p9_fd_create_unix (21426): problem connecting socket: ./file0: -111 20:06:18 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00@\x00', @ifru_names="04707000"}) [ 397.479341] f2fs_msg: 98 callbacks suppressed [ 397.479354] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 397.491040] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 20:06:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0xe2, 0x4}}, 0x30) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000000380)='.', &(0x7f00000005c0)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x500f, &(0x7f0000000540)="1caf000000005bf55f14e9437e02bfe75fe579fedafa0ab8224cdf3fa0a93ab70d0dd69d9938ff4ba1a5b684daca17407057af4173166f77aef3496ea798e0a1fb4293cbab") getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:18 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r1, &(0x7f0000000080)="d5d2263396d7b01dfc32a8a71540baf738fe87ac89cef53cec77bb9362649c369ae0bbde3f3db0958b25efd2a060633ea4644912b426ba709f9cea1f492db80f0914cac24ad5a1a345904d93dbb2d7abc1f22b61422621fb7c08bc1e1fb6652acbcd06cf3d757b90be0cb2ef31a71866cc0cd7fbca14f9701fc558f8c1ede016e96041debb84886c89b24e73b14bbdc216283bcee1fcb9985710a866b837a780bc23471110c5c1af55c54850751b776c4d02ec18ead9c9697916c54321c3a0b726677514edc4f5f1ecb18d2415bcf0fb5502a00c41165cfab0c893f77c1a0bba1420fb01a4a0e657a8294843a2e9173dfc04fb25ece0"}, 0x10) 20:06:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)={0x8, 0x9}) 20:06:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @broadcast}, @in=@rand_addr}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000040)=0xe8) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000200)={'lo\x00', 0x81}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000280)=r2) r3 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11"], 0x25) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 397.639121] attempt to access beyond end of device [ 397.644214] loop6: rw=12288, want=8200, limit=20 20:06:18 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) chroot(&(0x7f00000000c0)='./file0\x00') r1 = fcntl$getown(r0, 0x9) ptrace$cont(0x5fb974cbc39f4045, r1, 0x401, 0x8001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) [ 397.706174] F2FS-fs (loop6): invalid crc value [ 397.732799] 9pnet: p9_fd_create_unix (21481): problem connecting socket: ./file0: -111 [ 397.744526] attempt to access beyond end of device [ 397.749659] loop6: rw=12288, want=12296, limit=20 [ 397.785313] F2FS-fs (loop6): invalid crc value [ 397.789993] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 397.823120] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 397.830218] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 397.838330] attempt to access beyond end of device [ 397.843369] loop6: rw=12288, want=8200, limit=20 [ 397.848236] F2FS-fs (loop6): invalid crc value [ 397.852930] attempt to access beyond end of device [ 397.857886] loop6: rw=12288, want=12296, limit=20 [ 397.862777] F2FS-fs (loop6): invalid crc value [ 397.867409] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 397.885459] attempt to access beyond end of device [ 397.890482] loop6: rw=12288, want=8200, limit=20 [ 397.895377] attempt to access beyond end of device [ 397.900374] loop6: rw=12288, want=12296, limit=20 [ 397.905800] attempt to access beyond end of device [ 397.910811] loop6: rw=12288, want=8200, limit=20 [ 397.915751] attempt to access beyond end of device [ 397.920753] loop6: rw=12288, want=12296, limit=20 20:06:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11"], 0x25) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:18 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:18 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\t\x00', @ifru_names="04707000"}) 20:06:18 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000080)={0x80000000, 0x45c}) 20:06:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0xe2, 0x4}}, 0x30) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000000380)='.', &(0x7f00000005c0)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x500f, &(0x7f0000000540)="1caf000000005bf55f14e9437e02bfe75fe579fedafa0ab8224cdf3fa0a93ab70d0dd69d9938ff4ba1a5b684daca17407057af4173166f77aef3496ea798e0a1fb4293cbab") getresgid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:18 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x30001, 0x0, [0x8000, 0x1, 0x120000000000000, 0x5, 0x6, 0x4, 0x80000000000, 0x7]}) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 398.171651] attempt to access beyond end of device [ 398.176728] loop6: rw=12288, want=8200, limit=20 20:06:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000001780)='cpuset\x00') mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xe3147b564035db63, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid={'afid', 0x3d, 0x4a}}, {@access_user='access=user'}, {@fscache='fscache'}, {@cache_loose='cache=loose'}]}}) 20:06:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x1) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:18 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='(\x00') r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000140)=@int=0x1, 0x4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) connect$vsock_dgram(r1, &(0x7f0000000180)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000001c0)) bind(r1, &(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x3, @empty, 'veth0_to_bond\x00'}}, 0x80) 20:06:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11"], 0x25) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:18 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0xe2, 0x4}}, 0x30) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount(&(0x7f0000000380)='.', &(0x7f00000005c0)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x500f, &(0x7f0000000540)="1caf000000005bf55f14e9437e02bfe75fe579fedafa0ab8224cdf3fa0a93ab70d0dd69d9938ff4ba1a5b684daca17407057af4173166f77aef3496ea798e0a1fb4293cbab") mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 398.213176] 9pnet: p9_fd_create_unix (21504): problem connecting socket: ./file0: -111 [ 398.238354] attempt to access beyond end of device [ 398.243481] loop6: rw=12288, want=12296, limit=20 20:06:18 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300200", @ifru_names="04707000"}) [ 398.291168] attempt to access beyond end of device [ 398.296171] loop6: rw=12288, want=8200, limit=20 [ 398.319422] sctp: [Deprecated]: syz-executor7 (pid 21527) Use of int in max_burst socket option deprecated. [ 398.319422] Use struct sctp_assoc_value instead [ 398.377302] attempt to access beyond end of device [ 398.382324] loop6: rw=12288, want=12296, limit=20 20:06:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f87"], 0x28) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:18 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@remote, @loopback, r1}, 0xc) getpid() fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)=0x0) r3 = syz_open_procfs(r2, &(0x7f00000005c0)="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") readv(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 398.422732] sctp: [Deprecated]: syz-executor7 (pid 21545) Use of int in max_burst socket option deprecated. [ 398.422732] Use struct sctp_assoc_value instead [ 398.444249] attempt to access beyond end of device [ 398.449261] loop6: rw=12288, want=8200, limit=20 20:06:19 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) statx(r0, &(0x7f0000000040)='./file0/file0\x00', 0x1100, 0x7ff, &(0x7f0000000280)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x84084, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 398.475437] 9pnet: p9_fd_create_unix (21541): problem connecting socket: ./file0: -111 [ 398.496550] attempt to access beyond end of device [ 398.501582] loop6: rw=12288, want=12296, limit=20 [ 398.581498] attempt to access beyond end of device [ 398.586586] loop6: rw=12288, want=8200, limit=20 [ 398.621269] attempt to access beyond end of device [ 398.626331] loop6: rw=12288, want=12296, limit=20 20:06:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @broadcast}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f87"], 0x28) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0xe2, 0x4}}, 0x30) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='9p\x00', 0x20000, &(0x7f0000000480)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:19 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f00000000c0)={r1, @in6}, &(0x7f0000000000)=0x84) 20:06:19 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00@\x00', @ifru_names="04707000"}) 20:06:19 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000040)}, 0x10) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) syz_mount_image$xfs(&(0x7f0000000280)='xfs\x00', &(0x7f00000002c0)='./file0\x00', 0x3, 0x3, &(0x7f0000000640)=[{&(0x7f0000000300)="903d1cb92f852fcdb7dd0e062bcb02c84baf7e919792155414b300fc306808941146e8248d431939256e700a198f39bb51f357301a6e5c0bd3864d2e9fabe03c95401436ec7fd31ed2f9df9f6386dcb8169e845ec893fb83630e8488e2ae3ebf3a6a70b4b4c10f7410b1607e4da37f39c9cc5b9a53ae79565db71d1ff75df4a464d20f656b8d53aa069240fc0da2b6551e442dc0b75b1bdba26091a7afdfa4cf804d8b4d57aa3c760067c7c6663037273ce4a2810dcc109ac854f61c49f2d6144898", 0xc2, 0xffff}, {&(0x7f0000000400)="d352f49c7c25f2e568b9cb4688adec3009fc1ac1c3a898cf2d13ced53ab07da57d041929664e50e204e7217fa90b770093ee6448e72b459b8f096ceea90f1efa1e92fdd021b006e1503fc0d14c8f5e2df57c57f6a0fa2f67e5efb5633a7f2e948a8ccb4e4f715668aa62197c7d6e48fdbd5dd69f049740eee6382f19f85e2ff753f631b4365662a4a8abed67c0adf310c4aa0495f7d5211c4a44a79def6d22b7bbce0133af0bad27f393182f938fb0fa66a45ea01c152c2980ef2e50deef5a480d9db250f9f5676b780fedf05b968e149a8abc6788c4b1b4cbe4e59931336759b49c302fb060e9bf7677be4bb243023eacb1b1", 0xf3, 0x1ff}, {&(0x7f0000000500)="f674e1c847b3fe715b9f85d0011188ce95d1a9bb8c14825e39af37c4975f52e5f08895665afcd5d0353f18b4e5195301967d17f7bb5d1bb7b62b9bd3f44e8891eb68118a2d75fd2d5b80f558d110ef4ffa21314c26d3073ec140b4bc47eec7a42d67dd6f184f8a778aff890f1b4b1e0edb4e5aca77af8be95b7959d9276e31f54564df2180e0502b3bb58024c5cabe248a75a8f9edb4b176b276c6937e5dd8311c35778b0117f075075d4385a0ade2d6bcf1042022b3eb370ac8c152954b81d63169b8fe21048034985b6e08845a9a5d8a5c", 0xd2, 0x36e2}], 0x40000, &(0x7f00000006c0)={[{@norecovery='norecovery'}, {@uquota='uquota'}, {@logbsize={'logbsize', 0x3d, [0x65204598391b7bea]}}, {@allocsize={'allocsize', 0x3d, [0x6f, 0x38, 0x39, 0x2d, 0x30, 0x7f, 0x7f, 0x0]}}]}) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000700)='./file1\x00', r1, &(0x7f0000000740)='./file0\x00') r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000780)={0x1f, {0x3, 0x3, 0x2, 0x7f, 0x81, 0x10000}}, 0x8) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 399.037795] attempt to access beyond end of device [ 399.042849] loop6: rw=12288, want=8200, limit=20 [ 399.062996] 9pnet: p9_fd_create_unix (21577): problem connecting socket: ./file0: -111 20:06:19 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xbb1, 0x400000) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x137, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0xe2, 0x4}}, 0x30) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f00000000c0)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000040)=""/20) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f87"], 0x28) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 399.094135] attempt to access beyond end of device [ 399.099174] loop6: rw=12288, want=12296, limit=20 [ 399.129387] attempt to access beyond end of device [ 399.134397] loop6: rw=12288, want=8200, limit=20 20:06:19 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000000ffffffc300", @ifru_names="04707000"}) [ 399.198644] attempt to access beyond end of device [ 399.203778] loop6: rw=12288, want=12296, limit=20 20:06:19 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x39) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x100000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="b2000000d7c80acf63170e278788c6cd8af2e9cefcf14203b2a6f42885299364c500a928e0099bdbd1b951d05ade47d722f8a8a88ca82fae985641705138cd88ee1b4e0019096273ab70231b50f3bc617b1834fd9c7353a00d81ef39a1c6a5a97e54f4a9b91bf66de92b50b1a7040b83e9e85286a9e00c8d0aa95a195fcc48cca1d342b1aca2b2737ec2cad0e05682625b068aedd8f01fe9dd4aece5f6aa9db1097d55c8bd8a4c000000000000000000000000000000"], &(0x7f00000001c0)=0xba) [ 399.283476] 9pnet: p9_fd_create_unix (21611): problem connecting socket: ./file0: -111 [ 399.296045] attempt to access beyond end of device [ 399.301087] loop6: rw=12288, want=8200, limit=20 20:06:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x800000000000) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f8724"], 0x29) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 399.376156] attempt to access beyond end of device [ 399.381229] loop6: rw=12288, want=12296, limit=20 [ 399.460250] attempt to access beyond end of device [ 399.465350] loop6: rw=12288, want=8200, limit=20 [ 399.520865] attempt to access beyond end of device [ 399.525879] loop6: rw=12288, want=12296, limit=20 20:06:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x8, 0xffffffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={r1, @in6}, &(0x7f0000000000)=0x84) socket$pptp(0x18, 0x1, 0x2) 20:06:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40000, 0x0) 20:06:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0xe2, 0x4}}, 0x30) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00`\x00', @ifru_names="04707000"}) 20:06:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f8724"], 0x29) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r1, 0x101000000000013) 20:06:20 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000100), &(0x7f0000000440)=0x0, &(0x7f0000000480)) syz_mount_image$jfs(&(0x7f0000000000)='jfs\x00', &(0x7f0000000040)='./file0\x00', 0x57a, 0x2, &(0x7f0000000080)=[{&(0x7f0000000280)="b56e45991267fb1bb3ce36accd9993a31780b28198637da7e4be1daa7eac93a4817e6fe716018daa6a906246103c2098abaf7f39877c1e29fcf865fe549fb1b5bb7edb1f382f9c5cefbc8ab356e98ca8c99ea8617fe9ee33de288ecc4f6e023f5418b893086d41bbad7bba31674e3f4dfebae3cafb7a9d12beed8c5acc5e70bd5c081b997147ea8825a248c76b3ba71aa68319fb565b686fd1f0546d71b7ceecd6854489aeda408247d73cb0df343384aa9432dc65d5ee80dbb8f2bcb0810fbb2b703348e1c735e7a2554852c8834e79197fba1a8f8a40cb9fb2a1302f5ae2", 0xdf, 0x1f}, {&(0x7f0000000380)="caf976e6a996c241af094de59f8b52e77d719030af716183885d64337ee0eb7dbf8a659f7b18b1db0955b29ca01a08bfcd2ca31e30cdffe5ba771fbe73c24c1fc496ab624b125b1bacf40bf5f9e69f11a9f6899e3e946b0798473798dab3e05546982dedaa6233c131960caa16d4b8546226ade01429ffe2795d7a145bd7467d6d91b759ab02c6f90356458ebff04bf2e269905177236b6f6100e9f1ed92bccc325e3fc4bec3855d92c2dc", 0xab, 0x82f8}], 0x20, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, r0}}, {@integrity='integrity'}, {@resize_size={'resize', 0x3d, 0x5}}]}) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:20 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 399.935822] attempt to access beyond end of device [ 399.941068] loop6: rw=12288, want=8200, limit=20 [ 399.949979] 9pnet: p9_fd_create_unix (21646): problem connecting socket: ./file0: -111 20:06:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f8724"], 0x29) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x3, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 399.998657] attempt to access beyond end of device [ 400.003756] loop6: rw=12288, want=12296, limit=20 20:06:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@empty, @loopback, r1}, 0xfffffe1a) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") getpeername$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:20 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) getresuid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f00000004c0)) setreuid(r0, r1) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) geteuid() openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000000)={0x101, 0x1, 0x6, 0x2, 0x2}, 0x14) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000280)={0x4b, {{0x2, 0x4e20, @rand_addr=0x9}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) 20:06:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0xe2, 0x4}}, 0x30) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00`\x00', @ifru_names="04707000"}) [ 400.054641] attempt to access beyond end of device [ 400.059707] loop6: rw=12288, want=8200, limit=20 [ 400.115187] attempt to access beyond end of device [ 400.120425] loop6: rw=12288, want=12296, limit=20 20:06:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_bt(r1, 0x8906, &(0x7f0000000040)="ebd69096be55ac6db864d89cc30ac43e9c6928158770c47fe54b0de7fc8db719faad7f446914f6ca19fda8c6142e016846d94a961e631993f53503be0507697d3ef300ef0fb500be33cc91eb456fc77ccd6602feb63a38862e6419c4e99b9301ccff5a7108b48b2dd609ac90fddb57ac5ebd2c0cc0de0f3f4b05915f1c2ccfbd5c") getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f0000000040)=""/18, 0x12}, {&(0x7f0000000100)=""/149, 0x95}], 0x1000000000000090) [ 400.226670] attempt to access beyond end of device [ 400.231740] loop6: rw=12288, want=8200, limit=20 [ 400.253424] 9pnet: p9_fd_create_unix (21681): problem connecting socket: ./file0: -111 20:06:20 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000300)='cgroup.procs\x00', 0x3) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000440), &(0x7f00000004c0)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x800, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'bdev(-em1em1lolo\''}, {0x20, '!bdev'}, {0x20, 'cgroup.procs\x00'}, {}], 0xa, "7c8202b4118789397a40f36c6333e576c7cfa5b5755fc1031ca94562cde391682f92cd94dfa29e3ef0ccaa0bb33d6a92ea91"}, 0x64) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x7e) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r3, @ANYBLOB=',debug=0x0000000000000002,access=any,uname=nodev&,mmap,\x00']) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 400.272228] attempt to access beyond end of device [ 400.277274] loop6: rw=12288, want=12296, limit=20 [ 400.310377] attempt to access beyond end of device [ 400.315452] loop6: rw=12288, want=8200, limit=20 20:06:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x400000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x6, {{0x2, 0x4e23, @multicast2}}}, 0x88) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 400.350855] attempt to access beyond end of device [ 400.355908] loop6: rw=12288, want=12296, limit=20 [ 400.380682] 9pnet: Insufficient options for proto=fd [ 400.425502] 9pnet: Insufficient options for proto=fd [ 400.469331] 9pnet: p9_fd_create_unix (21707): problem connecting socket: ./file0: -111 20:06:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300600", @ifru_names="04707000"}) 20:06:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) fcntl$getown(r0, 0x9) getpgid(0x0) r1 = gettid() r2 = syz_open_procfs(r1, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r1, 0x101000000000013) 20:06:21 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x480000, 0x100) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x1) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) accept4(r0, &(0x7f0000000040)=@hci={0x1f, 0x0}, &(0x7f0000000100)=0x80, 0x800) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in=@remote, 0x4e22, 0x3ff, 0x4e24, 0x8, 0x2, 0x20, 0x80, 0xff, r1, r2}, {0xfff, 0x9, 0x401, 0x3, 0x20, 0x0, 0x3, 0x8}, {0x1, 0x1, 0x2, 0x701}, 0x1, 0x0, 0x2, 0x0, 0x2, 0x3}, {{@in6=@mcast2, 0x4d4, 0x33}, 0xa, @in=@broadcast, 0x3500, 0x7, 0x2, 0x5, 0x2, 0x800, 0xffffffffffff8000}}, 0xe8) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:21 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x204002, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001380)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000013c0)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f00000014c0)=0xe8) getresgid(&(0x7f0000001500)=0x0, &(0x7f0000001540), &(0x7f0000001580)) r6 = getpgid(0x0) stat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x4, &(0x7f0000001680)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r9 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000016c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f00000017c0)=0xe8) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000018c0)=0x0) lstat(&(0x7f0000001900)='./file0\x00', &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getegid() r15 = openat$kvm(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/kvm\x00', 0x141001, 0x0) sendmsg$unix(r2, &(0x7f0000001b00)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000100)="db1cbf829ba89805dc7eebaf8d41d17270901b2264bdaf5e5ae687aa81ed9c1d57002d147134f9422ddfc037dd9af87512b6c707e877a06fdac281cc", 0x3c}, {&(0x7f0000000140)="0d2cfa50061eba", 0x7}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="cc787dd4cf28eaa808958ad7dbd5dfb6819bd83c2c72440af646ab2c2c327edd1d6ad3f71edb753d7aaae152788be277e26dbc09145ed16c2dbcc01af61b2255d0f41356649dc4833c30cc8963b7d68a4176a07a4805ede1d748fd035562be7c9b723192642e78266131a55975656b25cd0a1959dd9f9f36f5638fc02c5fe464839bf0e0c9db6d53fd49a8ace4488e87c7e2b6bcb5e678dc54d49e9287b4b5a66eb5e26775e5aa767b1f32c5765b8d0ffa005f4ae50245940d39e26bec6f0b5e9f83447d6aad1b76be76", 0xca}, {&(0x7f0000001280)="268bedb12abbb596c1d86d5713", 0xd}, {&(0x7f00000012c0)="3fcf09ff", 0x4}], 0x6, &(0x7f0000001bc0)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="000000000000000001000000020000003c1d11b7117eccc9e9bb95a324d23cf282e4739ff40335ca398d549c23e0fd58550524a058988676a9542e9da8b917db062cd18429193a61148d1d817e8d5de6828a9d3546e0529db8a67fca77c707c3eff86d4cda861198f41acc21416eecc4f86ace2b622bc66d8cac0c4ee5e1da4ecf11beda38ab7e3de5cd6306b2c6b5ba57586eabe995b3672be4999523", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r15, @ANYRES32=r0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x20000000}, 0x0) 20:06:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:21 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 400.810486] attempt to access beyond end of device [ 400.815562] loop6: rw=12288, want=8200, limit=20 [ 400.822546] 9pnet: p9_fd_create_unix (21724): problem connecting socket: ./file0: -111 20:06:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x80100, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140)=0xff, 0xfffffd87) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}, &(0x7f0000000080)=0x10) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@broadcast, @loopback}, 0x7) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'tunl0\x00', 0x0}) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f00000001c0)={@multicast1, @multicast2, r3}, 0xc) 20:06:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 400.875783] attempt to access beyond end of device [ 400.880962] loop6: rw=12288, want=12296, limit=20 [ 400.912713] attempt to access beyond end of device [ 400.917925] loop6: rw=12288, want=8200, limit=20 20:06:21 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x5, 0xffffffffffffff00]) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:21 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f00000000c0)={0x2f5}, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x10001, 0x7, 0x3, 0x1, 0x8, 0x3ff, 0x4, 0x7a00000000, 0x0, 0x40, 0x8}, 0xb) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x5, 0xfffffffffffff000, 0x5, 0x200, 0x40, 0x3, 0x1, 0xfffffffffffffff7, 0xfffffffffffffbff, 0xffffffffffff8001, 0x4}, 0xb) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000180)) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 400.970549] attempt to access beyond end of device [ 400.975627] loop6: rw=12288, want=12296, limit=20 20:06:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\t\x00', @ifru_names="04707000"}) 20:06:21 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) io_pgetevents(r1, 0x40, 0x2, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280)={0x7}, 0x8}) 20:06:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:21 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x5, 0x448000) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 401.087778] attempt to access beyond end of device [ 401.092830] loop6: rw=12288, want=8200, limit=20 [ 401.105495] 9pnet: p9_fd_create_unix (21761): problem connecting socket: ./file0: -111 20:06:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0xfffffffeffffffff, 0x6}, 0x8) [ 401.152195] attempt to access beyond end of device [ 401.157283] loop6: rw=12288, want=12296, limit=20 20:06:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 401.215115] attempt to access beyond end of device [ 401.220260] loop6: rw=12288, want=8200, limit=20 [ 401.233212] attempt to access beyond end of device [ 401.238349] loop6: rw=12288, want=12296, limit=20 [ 401.338426] 9pnet: p9_fd_create_unix (21788): problem connecting socket: ./file0: -111 20:06:22 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='cgroup.procs\x00', &(0x7f0000000080)='vmnet1}}eth1&system[.nodevproc@md5sum\x00', &(0x7f0000000100)='cgroup.procs\x00'], &(0x7f0000000380)=[&(0x7f00000002c0)='cgroup2\x00', &(0x7f0000000300)='selinuxposix_acl_accesssystem^():\\\x00', &(0x7f0000000340)='cgroup.procs\x00']) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) pselect6(0x40, &(0x7f00000003c0)={0xfffffffffffffff7, 0xfff, 0x1, 0x2, 0x401, 0x5, 0x9, 0x80000000}, &(0x7f0000000400)={0x6, 0x3b70, 0x3, 0x1, 0x100000000, 0x3f, 0x1, 0x7}, &(0x7f0000000440)={0x2, 0x9, 0x4b0, 0x4, 0x7, 0x4, 0x7486b568, 0xf8}, &(0x7f00000004c0)={r0, r1+30000000}, &(0x7f0000000540)={&(0x7f0000000500)={0xd739}, 0x8}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:22 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x8, 0x7ff, 0x1000, 0x8, 0x2}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x9, 0x3}, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40000000101000, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:22 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r1, 0x101000000000013) 20:06:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) flock(r1, 0x4) 20:06:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30fdfdffff00", @ifru_names="04707000"}) 20:06:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:22 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 401.741608] 9pnet: p9_fd_create_unix (21799): problem connecting socket: ./file0: -111 [ 401.764263] attempt to access beyond end of device [ 401.769322] loop6: rw=12288, want=8200, limit=20 20:06:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:22 executing program 7: r0 = socket$inet_sctp(0x2, 0x6, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000040)={0x1, "81"}, 0x2) [ 401.801888] attempt to access beyond end of device [ 401.807054] loop6: rw=12288, want=12296, limit=20 [ 401.837876] attempt to access beyond end of device [ 401.843037] loop6: rw=12288, want=8200, limit=20 20:06:22 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) membarrier(0x1, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, "6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae"}, {}], 0xa, "2552ddd1abfbc9390aa9edc3e0dc1b6cffb1e88e47242d4611d14241ee8fd665edf283786b91af2cb2bf239ec6851492f8cc948cef1239c66c4646fe8deae4829031b0dd4489510bd47d6c63af47834981bcf432cfa3819210edef40aa4891d614cf404b3cdc66325f88ae3c37cf626fda3e6c3d81713f03f220f8dce08761ef4d7240"}, 0xb4) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100000000000000000000005e04d7a4"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00 \x00', @ifru_names="04707000"}) [ 401.910831] attempt to access beyond end of device [ 401.915966] loop6: rw=12288, want=12296, limit=20 [ 401.933699] 9pnet: p9_fd_create_unix (21827): problem connecting socket: ./file0: -111 20:06:22 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x9, 0x44202) faccessat(r1, &(0x7f00000001c0)='./file0\x00', 0x80, 0x100) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000100)) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x88}, &(0x7f0000000080)=0x8) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x200) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000280)=""/101) r3 = geteuid() getgroups(0x5, &(0x7f0000000200)=[0xffffffffffffffff, 0xee01, 0x0, 0xee00, 0xee01]) fchown(r2, r3, r4) [ 402.001246] attempt to access beyond end of device [ 402.006328] loop6: rw=12288, want=8200, limit=20 20:06:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:22 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000000)={0x7b, 0x0, [0x4, 0x7, 0x401, 0x3]}) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 402.065593] attempt to access beyond end of device [ 402.070666] loop6: rw=12288, want=12296, limit=20 [ 402.098647] attempt to access beyond end of device [ 402.103673] loop6: rw=12288, want=8200, limit=20 [ 402.192232] attempt to access beyond end of device [ 402.197311] loop6: rw=12288, want=12296, limit=20 20:06:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r1, 0x101000000000013) 20:06:23 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @remote}}, [0x7, 0x4, 0x20, 0x77, 0x3f, 0x0, 0x2, 0x3f, 0x8, 0x5f, 0x20, 0xae8, 0x1000, 0x5, 0x7fff]}, &(0x7f0000000180)=0x100) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x101000, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={r1, @in6}, &(0x7f0000000200)=0x1ca) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r3, 0x7d5}, 0x8) write$P9_RSTATFS(r2, &(0x7f0000000380)={0x43, 0x9, 0x2, {0x1ff, 0x40000000000000, 0x1ff, 0x6, 0x80000000, 0xd939, 0x8000, 0x8, 0x7}}, 0x43) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x10000, 0x801) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x3, 0x0, @pic={0x80000000, 0xffffffff, 0x10001, 0x7, 0xff, 0x7, 0x100000001, 0x400080000000000, 0x4, 0xfffffffffffffff7, 0xfffffffffffffffd, 0x3ff, 0x3ff, 0x3, 0xfffffffffffffffc, 0x80000001}}) 20:06:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30fffffdfd00", @ifru_names="04707000"}) 20:06:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sync_file_range(r2, 0x6, 0xcb6, 0x3) 20:06:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0xbe7, 0x1, 0x1, 0xff, 0x80000001, 0x800}) sendmmsg$alg(r0, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="6d67c0d312b3dab5afa733fb05819f53fc7118dd607c7abc22cbaefecd7f5248bb73384f714a289b5b9f6148fba7e0f47b5fbb3e4fbb4b457b5e603cb7299498663876de56f1851759604fa4dba5da", 0x4f}], 0x1, &(0x7f0000000300)=[@op={0x18}, @iv={0x20, 0x117, 0x2, 0x7, "028396473e687b"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x98, 0x117, 0x2, 0x84, "1ed1fe8ad6ea75fca5c84cbd463e92950de965b518bdbd45fe04b833dbac1406e0794127bf6d75412eaac2e5181fdfbe425b45e3020f1d301707010fbe69ebb0065fcf88aa66bed5c4caaef675746d05a2f3de78a87dc8d5f4c4155135e428822b140837daeeb0ac672c758856afbc203f26792db737d0ab5fed633a38f27081392e6eb6"}], 0x100, 0x20000000}, {0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="a5d407addd78f00b3973bf458a5fb8329a967ccd9793343b3b587d6b900b926386", 0x21}, {&(0x7f0000000400)="da48bd75d60e20e11f5820a8b307d1fecae24c1e88ac443fce89ba79b1165295a27b865f5abf5084fc87c4781c61a062786f4ec6c130100188e2346c3be1c3b5342e18a28ff39408ed513fe2d96430877cb821d143c0bd8c3eeeb6d19d9c3d2a63a81d21b74f931a6796a526ec1c88465e06756dc21c6138998a8c82be3536a78e9a73266233a0fbad160e9ba877b01da4be59a8df945087f9bea5d3de242f200264793210430a4460566f24246698fcef7deae9c1c585b24733b380c08cd7d69fbfc800d53f34b20b8e966a060a03a397629fd2597ce49d62f11f", 0xdb}, {&(0x7f0000000500)="e9325486dd1ee981b6a4fbdd421bfa5166f214f976b375e510c08266f0886797862c5afa8e73db54186e98320383a875d7453367a95e2d00c71d0c8bdc1749a840aed308873490423fae0478b89420584535ddd7ee46699f7f880e06271502e75b668bd7c7ddb6879443c3dc3d92db9f37e64454882a89ba6d541082aa730b91d832afdac573950a923207b5da4a5532e598e50a", 0x94}, {&(0x7f00000005c0)="7cddf59e4e66ad11038729d3b1dbf76caee4a17253beb0e4edd26210db818d8e67c36724", 0x24}], 0x4, &(0x7f0000000680)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x88, 0x117, 0x2, 0x6e, "ec90bbf8280bc55f4102fc2b86834b319b1af4ba5dfb3771e1acd78f848ad34f77dd43708d32b739f46784eba59f4141fdfea2284cbd412deb23238256a4fa173c7ef4bb930927dda4a79b3f37e47eb80a610abab307e6a947dc6781ff18a7545db93d4a3ce54d7de9bc10837db9"}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x401}, @assoc={0x18, 0x117, 0x4, 0xfff}, @iv={0xf8, 0x117, 0x2, 0xe2, "78a04489c063fff9ea9c291c8eb6c52c4ce2ba50de52a2133fcd9865df479c7ed733226afc19f1e012ae54e8cff562f612c18d12fe0198db4e7369a353271362d7fc9226e3fb424ed200906f53fb6b857a3a6190b77e3c2d799bd62a252e64278b4c2129be2edff4a3fb35f21c20ce951845099a301d5a586f1233f196f2f6627732d1bbcad1b52b78ceaaaef9a8619d6c66a449a73a9ac4b6828a5f83e854f9280bdd05f24df0b1b077cdfc0ff0ed6f9cf61f5ecb0275e2f8abb836e765b9de08c7e2dcfe848f68c478b26167e84b0dc5aa00b96af5c1c24fc2612ad82b4c4244cc"}], 0x210, 0x4000800}, {0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)}, {&(0x7f0000000900)="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", 0xfe}, {&(0x7f0000000a00)="62490df919d3516f3f38514a1c808da3b6f79b40d9aa006f8cbf8bc5bb664aa821775cdd44241bfc89727f807f87764f23f074957b763562e12b4c7baeaf7be62bc026fa1fc346711519221ca0e1e2a46e4a5f8ad95b4f7a1e2bdc24bc", 0x5d}, {&(0x7f0000000a80)="1c88ad43fb9e19025370e52d480ac40f8b859adde0617b684329b71f258d7c6847db55", 0x23}], 0x4, 0x0, 0x0, 0x4008011}, {0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000b00)="a133c98b61fdd6ce1017d226d5d00d6708bd31b26976677fcc35bcc6d922d2960fce0f8ba125a578db40922336e7c39dfcf070b10834e407764702b2a9d3ea4754cbc7329d74cc2dc17792cb925d3a6143d2b8776c4455b8b3cb20e7d9abf89bf7c3c07ccca1c85d8a428598e9eecf6a9a65886496b3ad3ad8bf9e5f465e426aa346b6423505f6d943bc2fea02c1ea7d9d93a4673736f909cc7202a18471749d310dda5665a427001a8018da43f831e9dd386ffd393f7c2f9f57a2ed9b3d10d9531277026ac6042f2f4c82f3321c11e0a04a479f1fe5aaa7cc09e5441a22a7a26c8e42cee4", 0xe5}, {&(0x7f0000000c00)="a85c967271f92a51c1225b737a14dfdfdedb85435a14ed6cc17f26f80d1ad4dc8b68cc5d0001e250f5b21802926433bf6c15614932a01a82e5f84d8bdadce3e153bfcbfe71adb27253830a36d0c180a96c30027b837681a0e82da83111145a5d8d02cd45c7ee2896d674625592e60188ca0d083ab58412960130ff296e52d9118adc9e56cf51cc689f981f8de98f1e990dae5fa66dcb1797c46fc6f382e70d7276015defd772638ddecdae57deed3908408d1aac92ee71e99d677fe7a2b256baa7cf5bdb9b662ed245664b63494d076598d186f138ff0099ee10a462bd062a7001333be87ea5a55d6d3b9d20701b3e17736e689ecd0f", 0xf6}, {&(0x7f0000000d00)="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", 0x1000}, {&(0x7f0000001d00)="8cc4ff18c0132c7b746a267547b4bbf4f04e0e320932f10bb746597a99b04201b3a1b5a0f01c9c7aeb884f685ec4118a6bd792cf79b59b53c4dfef0be19f79a1a172c6051cf147771dc466a4d8860bbf044b1c2773f0756a5ca2a3b1854d0b3e5cf3153901d4c4e21d207ba637802139f905729083f8ca23aef71322894f9691794cdf1df56dcde5ca4c74f2e42375fbe9a2438ea4487bc4ebb90b058caffaeae2b3", 0xa2}, {&(0x7f0000001dc0)="3d1ce64ef9681722dce0e15643c8a2c1b2f3e959fece026c7b2e824c23", 0x1d}, {&(0x7f0000001e00)="eec38cd121df412de18a436992ccd205ebe8429910bbbe3240769c29b422776b977e55e6b27995900aaf75d3b9c2e81a3294073eb623e1eee7f29bcad7d989b3c276b38d72489fedc692ff6acb8c2c8954d418ae3141b8fdb3f6ba45c72f521cf95fbf5119be8cb11f5c2dab78b920f828ffc1e2cdcefade1081e82029ad5663917ee887033770a20fd6731102d909d1e93e", 0x92}], 0x6, &(0x7f0000001f40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}, {0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001f80)="426b674d2d4ea58bb5a584f03fdd2312cccb9098d04f26db237bb77356ec170ee1", 0x21}, {&(0x7f0000001fc0)="2777eef2b2d0200e3ff739108602dc766f9e8a13bae1a9c5719e0203071df7a1b479b319cf20f726504e45a9fa4d291e38359dc67d7a7584d7e52adaeeed01c46f4f7412c6ef5464a63fa434041b0ecb1bf7c30146584204e4de", 0x5a}, {&(0x7f0000002040)="e1dd017d271b8c71b7", 0x9}, {&(0x7f0000002080)="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", 0xfc}], 0x4, &(0x7f00000021c0)=[@iv={0x40, 0x117, 0x2, 0x26, "2759d950ac256ba5c6a3df772bc32789b0746810771f98ee5bcbfa85fafb77c3b0219336f26c"}, @assoc={0x18, 0x117, 0x4, 0x3f}, @assoc={0x18, 0x117, 0x4, 0x80000000}, @iv={0xa8, 0x117, 0x2, 0x8e, "c4b2f966c36fff489e4a48a14f6cf27d235b32d69c3b9b6635fb1bbb8c4756c277a1f23bb7aeb1fe6f401e05287d88b00a556dc8605a3b4201b1b45f003f9ce29724d837de2c88f8161d87c7a2ca502df5abab9c143ae04396dc2752df3fb729d534ea59f7929d048b6de0abf9b0bdef6c7d8f0319368d3a0cc29cad8daf52332e3097c6022375b1b275bebc72e4"}, @iv={0x60, 0x117, 0x2, 0x46, "5274307fd3b14f563e49ca7e4ab98b9298e0cf6fc561f7c2bb507f9e6f68a020fb4323f2de62b09402f1112d05adbaa5fbab2c25f329e851d5ed4d56205e5aa8a2c2fc9770f7"}], 0x178, 0x810}], 0x5, 0x4800) ioctl$TIOCSCTTY(r0, 0x540e, 0x5) 20:06:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:23 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 402.644398] f2fs_msg: 110 callbacks suppressed [ 402.644415] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.656251] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 20:06:23 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10000, 0x101) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x121240, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000100)={0x0, 'sit0\x00', 0x4}, 0x18) read(r2, &(0x7f0000000300)=""/124, 0x7c) write$9p(r2, &(0x7f00000003c0)="4b1dcf11660515b0602e211dd037e5df1aa95e2010fe066f9566a1410d4a46c8c961b1207b36621d62b6438dd81e46b6f847d7df9400eec0c5c0559b94acb2361b133d8b33cf1a20fe831c19c807a7168841e0a15b776c6d0fc8c55cc9c87b63df6897e15ad772a5ad45221de4e69a2a2587fcfaabbb3e80c738f47b29e180e44a0e5c580bb4c412406f37e47d0833a5338725317b93ff3bf0aacf57535d4ddd9317cb20ea112b74db3109465e644ed8a9b7561a2b45f420649e0b1ebe0a", 0xbe) getsockname$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000200)=0x1c) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000380)={0x0, 0x1a6, 0x9, 0x37b, 0x2, 0xfffffffffffffffd, 0x4b2e, 0x8, 0x1f, 0x200, 0xffffffff, 0x80000001}) keyctl$session_to_parent(0x12) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x68) 20:06:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a00000029010000000000"], 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:23 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000100)=""/38, &(0x7f0000000140)=0x26) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e21, @multicast1}, {0x0, @local}, 0x10, {0x2, 0x4e20}, 'bond_slave_0\x00'}) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x1bc) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000180)) 20:06:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000000)='udf\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x2, 0x1, 0x9, 0x3, 0x2}) [ 402.735634] attempt to access beyond end of device [ 402.740690] loop6: rw=12288, want=8200, limit=20 [ 402.812794] F2FS-fs (loop6): invalid crc value 20:06:23 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 402.844192] attempt to access beyond end of device [ 402.849319] loop6: rw=12288, want=12296, limit=20 20:06:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30feffffff00", @ifru_names="04707000"}) 20:06:23 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x100, 0xffffffffffffc25d, 0x646b7178, 0x505, 0x1ff}, &(0x7f0000000100)=0x98) r2 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="8e66cb07038a0969219deeaacfaeb8b9137549b6df75a2c9dd5edfb75cea307037f24e042c45b6be164845cbcac8f7a90750469656bfff1cae7923b5b894dc430aeecc1c98e23f668f81501ef2f90d9043d8f02eafd8164e1c5825a4f6800af7923c503587a546cb6ee21d580668f027c588d09b63204067ae8ed9b2692a808f92fe3ebce0c668b0e5fd7718f0bfd8630e8a047ed44d6b10104b86ae36be6cf5f3bdce3feecf982b28fc35e8ddfc3fb875a59fe4a85867168e8e59e0a7b6e14866c84f5cdb73b6aac1e318b4c9947d64791b4048c859986cef179214e4c16a878ee3c478934d51860c7aa3520fbf6ff16468e85347733da31a73edcdb5d2ea45441d68eb3dcd1d5c9ffbedb04fa44021ad8d1562a3f9b1ef7229f534a8a74885e89ea33aa56a00c25bc73b7415843ce750e0db45affef3a79b87ef85ddf5827b516f0f91b425d16621c32984e3dab2ac7bf0cee6c6f6034f6596f0e685933a1bda8aa1ba9061f992857f76885b3a0de316d8f2497c5f84dbcb5da3e3195b0484d478beebafa0ac7436c8aed736864449963914c6fec068c428526b86e0b51ba22b8aede3e66c2fc6e883f133f358dc50dc8de8f4c7eac944e6667cfc20d278689af58aeaf304b072cb52a19950df9a5e50996e83e301a5323ec01e085e99ecd1c2c6f9d45f947a837d1a8c6e46ed08c9ebdcbb6d30ea677dcb019a08f11bde2efc668e4c394f9a309de16f5ea2b09f5b66fcb944e063230154a62faf26e39fb37fc16aac10779ac806f675fc9d65fd1895e49cef74821555551b463dd8142c7c99d86a2c0e2e19af6c846c7a7dd6978ca1f89e1e920d143c15007e97a0e0f0401346f7d171cf6025ed5340c0943d4c4e902440802f332ad6f06437d3728caa45d664dd1f8e321d9a2311296eac10050bd51a0f15abaebc5aed597e676b12c94e376256aca93d27f84578715d80ee465f7b1cb99dbcfdbb4b1f0e27e7b3fe506f8c2cc26f9a0db5382704bf836510f93ef16a90ed0b336b5f00a4050bc4d16f2d5d8e564e494cb18b30b5d80fc837fcfa5bc644ce21cba58bcf03c8c32db2e3fb87ba1ca93dc815907901e9780530d353d39b4a36a4a06629bff7c1171584f90623b65994b8970ee4e46c5bf944a44718cfc00a3306a9e389df990b59be08ec8cfb595d2f3cc60822cff96e56fc480691e4812bb29f4cd233235a51214c671cdca909e3dbecb069b43802b0ce3be0029dcd28a99acb23bfd24fe287e967dcc235ec345ee5ea30f5869e2bd94c57ae73fa26b1a98c1d82d9b821139706642f8c567be4abc43b7d15de1e16de62411dbf453e05491ca2ad8d8c8e355ef6f0ba0920e91cd64afeb68f40cb96968322c1e267487f763fcf1ee88196cae8d8df6a94ceb7b0563f8eb7a8a128af7c3c91081a05667155540eb111dadd9b3cb9c5e4da288549aa2b3a50928d0ec036bc1c0903bf886faee393070dfcf6f6fe094a7d996e485d853e3a5513317b619112f7afe249a091393d955ec94da50374ba9330750adec8946ac7812c61a36c075147c6d2d768b7c68d19a443d4246a016071db7603f772ce65023a7c6f1492b8f4d2ecc282d8624ec33f0fb1be5a68b2d6b1db94815f38d4b91265ecc5c8c4df254e65f558198823d36700854ba2e569b261842b0cd390deb7bb3732463d8d8d14ddfcbb2e4e1a033ed150ba2ade9cae7e42315ed28c35d7bbec02d37ae0cff5f3333c099a45299d067d298d7fa50269090fcc07b8cb259e0471ecb90c93bf3994e9e47569e8c6c502ee4b1196fba616e74e5b575268bd1dff9136a956524ef8bca80c4355443fe66728f69cb29b36a8e9bb6c7990ec4bdf48f1493f3400b579641a44bb8ad8d94b9171a6b513d6816c55e366dc3fd8f6df838947e9f9027e133cf1902bd1d02396b5366d0cfb646c2f35042ac25991856004562e34bdd60de20690452e4a9e42a9720668633b67d6aacd78cbf2e63831f7065b4df4962ab561f77bf9f36341696cdb62f6eecb5ed31e9e2d3af1f0b177b85f996f235444103b66fa68160f8eff427e038d6a55a08eafda7bf9d8653731f6efef3b04f22d8f6aea5f44cf2cfa36d0a3dfacd5225d68b95dd0f672f6cea30f883673b02bab7e4fc1b882c72d6a75b2bc874ba4db202bc69dc4753af14e948a017f042930adda0857050da09558b2d9c0ac1ec2388cb145e877b12c2c721b89e51db736674932b9caab9dd4c10f628aae67dacbd6ffe98d58ceaf12723a2f18d9481a48ddc352bdfd5efd6c43b12e4aee359a21c7953f37d921ccb8b11a7b4ed106c8fa1bbb9a284b3f07ea4bc93f69f40b632a2ab3d4172c832ab377a82480e4c8199adf9df8e8a17d5b159377726e8d64259a999a9f6ff428f103d22bd6d3335c8f57923766256664ff115aa77804d203dd4447bf4570ad41716b0d825d6445b880fd7fe8598382c63e7cb0c886f535ffa1f95f5ae0661cc5f3c62e64cfefe208cb719de73d8d07c2c54e8c7ef1767688bbbf52111430b146e38f9abe482d6ef3b992e269ad3fa4997fa3890b51d35c513a2e08cd5c594b8963e02dcb2f6dc6c37f99a30881a47825804b71560f22060faa36db6ab23bc897b2569fe7ad67fc9a20e65e95387e763c4418fa39003107245ab04384d93a0c58b550d400ce2ddb24dff174158dfbdfe56422fdf001e276c7a27b96516384e3b8b897d796a9885a3e4b972be02d3831713fb48c50f3b5f28a7d2d7161094ecb085a9bee8957f5f8d54e1e9d17aedc618453c2d4f5c28b09a1698abbff679c29902659a3df087c5b01379a1a55a14c01f26fbb0a502bd06aae1cbc65569226fc4eb924b5e2c08c5182f3382414bcd7e115b9570897d0ab52d9f797d07106dbbb42b4b5ff03375010e6ac1003634c7a2a195cf31e9a01c631fc5e0f32701887bb9d71e5dbbb0141c297562c5c983746b88f588fdb639cd24d7298a1f70bc2df746f98761a156597597abfd6e259b974f44b5ee0c014996aef483ffb06895cd642ec7735678fc401b10b4e8b5e1d8d314019f94aa886da8fdafae7187d255a7672911291951979e7002dfe0ac4c90b2d30818c79a63a2157f034092196156e8607e183b2efbb69cdfe0dd25bf0c31e06acc9749e4d1dd3462a93f715b4dc4f87fd2e3d05dc50439491d29c85455627b2db307a7223e348fc88bf2c624eef6cced02ca6e6632fd10f988448fb595e3e34a458644c9c27514df1761d8dd2c384b1ffd2198b83de6b0408e1308acf37976c40bb540f5d78080954ee2bf3cf49d3fabb9b856a757bfe467fb1faddf78bf49b4dfa1a22ad61b037406490b5873cfe540cac5687f4ab537fdb18e436893499c9a23abd24f50b8cdc20143912e7f6896abad7daf99e0942085da9da2164b4c90070c2900041b8622052eb3a5758ba76d8baa4fa2716d8f4a15359948a20ffcad39cf2dd84e7a43b80f6ab64d9747705d4c4e2d72c6054a11ef2101b67b7cf93e5c34bf97eecefed70f159be16dfc9fe2a5f6219489e1c4aaf6b0a856b2b41d72f6d61503af5de33b95c344e33d6a9db0b6b94c75109cc6ba33ad35758427c279e3f0fe0323757e4c49a15b1ba5d62ac0a3cfef352d5f41d49223f94baa481a0e5365395ee80466a75a5716beb8936d3c0fc6615f7ee66f4640b8b8845497195d5ec2b578fbba14b69f49c6e5f348ab2f0e9071ecf056dee01b9349cb4c94314e06ac5045e1fc556a658d3b0b5a88f10540c56efbd272c5c9dc3cc253d753470b48417caf8939fd07304bcb80d927d3b859ee2a76cbb43f925b7a91896ef8f002f681334d58bb2ab4213ebfb8b96e3de3f423469f7994d3c94fbb68146332eecf91f23c29841fabe9166320c22f113a5d5d13a80610db0f19f7c40e41c346cfb3e4459adc2cf79ab24aa5222029186b84ac07ff3e6536fc533e75a3e12fce2d70b8df70d6e8b2a245bd744f4ee6db0022e7fc3c2d0eea024e3d26c70a27e7b6959d4b09c4070a93a48dd19554997f4089d137358723ec3dafc4842f6b142b1e8aff177d938da37637c2337edd734b54066019212bbbe8db1e3ed3d98c7bd73be57494e53bbf656bbdf77d7c26f784ef514b38350873d8ac95e87885d7fec3ffb501060654d353036b08beec0f587482e2b500981407492e54f25fe99b0998718897fb80455cd6c7a3a89485ea0d3ede40ddcbe9b2880de31865af82284c02fac817900595e03262a5ca934c8693dbc98a6d0fa1d61a183031c3a405470d6bb141597623bc21970d0448bb7973cd6ab45b6e33e80c39ac31afe7e3edd43025b59543d9e04da8a8ff0bcde4c34b38a01b69cee64236ec32d48166cf3acacbd0095c57a7941aec0db11153c9083506c7ca6c9bbeef83b5cba58a5526285808a6e2376ff64ae4e50717d37309675cd5b1dbd5343b9c9e20446db9e4f7a8f2f535c548075e2c44912a3524bf99ff7f52a6a7dfb563ca028af13a0dd1f0c9267f018332b674872d1cda7006fd0f374e6b5c0fff7b7255854b32994413b143409671d1e1b57a8993ce1bffcdaec935ecd3a4c7802909e8709c2bc6e346f25fd28e3e8cd4ed3e01dbaedd785895a0badca13d084b9d769bd818b5fc3ed29cf723d9ead711cbe9af3b10071f607d8f24de6ee1240b3f73fcef705139688eda44d86ccd7daadca17140c7545052eea7aca7326e09b9c89a6959d28c623eb72609367e176fad6bfb1fd646982beaf4878159dc063d56700fbda4f5fb17a8e5620adb7bd67bbeb2269b0c8b508df03f87465160643b9e4f6f24a02bd15a565916fa971b032284a4b5127550c29a2b3e24469fce0568bd44338b2b2ea368724b86a41767194c352abf37d10d2ea5b7df77455295bf9b6479ec0bab094a7a448b1c6a5b6989e6ff06f905d338c17a6b87829ec68bfa7831fad696358c992a3e917845a1b41f9a3c150e4597e607e9ce60b31957576d9fc80d224675b45b7350d12b78a99090f20941a3db7f2b1c10f4fdceac4f986cdd9c2263fdb6743e6c11b0672a3e76e079bbf6bfc949c637f4d1fd14b442174b0e5b76c654095eba7cc60260cfe8ba3d362149ce20598c45323cd203acad0237a1dcad0dd129ee76c9ef9f09ce9ec58d4796dc93cbdf4c030f50645ed5c8363021d9f2aa32c4b8ccf075e41d5b867725f97f682facdd591add184b1c523337266ce16af6ec0ea82553f0fa68ef126fc751c054e84e7728efc4cc3b53bbaadf3175d7f40a42edacb2a8faee07cf4e0987e6fb5ac4d0f0a2212dfd4df279401d355f1b3a93872627a67b5f63208593fc51427f80272b275fb1bdd9c890f7a8585bef4f9fef10d0892005cbcf39d98858ea90464c945f5340345270601869e3f5a0906d7b972926a1c46034b6310f32b16a4e8306abf7cbc2740c0adae6440dd33e6092c5df3065758d2b3bd45ce73280942ffb8978a1f2e6c7031266cd3d7125c278c397e596390f888404d9c9277697e9597db65c48e130fde7477eb3e83d7fe998771ad9833c20756b8e2aa9374285b3eb0e7b63eafa29092fdf1d80c49de480dfb219d1798f69cb59944e5452c04a96c3c8ec7acd3296c41058888bb2cb18ad2dc1d0029d44623098aa2e362f37815ae037fe8f16ce3e3ab2d87224593fb23516265a8f74fcc20c777704488984433fb9f3d05d18d7e8b1d1a973b9b04399651e96a31b4259cab82409507cb85eb1949119fec7c02dff2ed7e533048c6f37e44f1a32583f58adca78ed9cda63c36ddcaf9766717a61e82c2fe7c744f79b3d399c49699cd17454e", 0x1000, 0xfffffffffffffffb) keyctl$get_keyring_id(0x0, r2, 0x7) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x9}, &(0x7f0000000180)=0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 402.894425] F2FS-fs (loop6): invalid crc value [ 402.899178] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 402.924454] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 402.931614] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 402.956875] 9pnet: p9_fd_create_unix (21921): problem connecting socket: ./file0: -111 [ 403.036715] attempt to access beyond end of device [ 403.041839] loop6: rw=12288, want=8200, limit=20 [ 403.054131] F2FS-fs (loop6): invalid crc value [ 403.065221] attempt to access beyond end of device [ 403.070325] loop6: rw=12288, want=12296, limit=20 [ 403.083263] F2FS-fs (loop6): invalid crc value [ 403.088053] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 403.163093] attempt to access beyond end of device [ 403.168270] loop6: rw=12288, want=8200, limit=20 [ 403.183650] attempt to access beyond end of device [ 403.188803] loop6: rw=12288, want=12296, limit=20 [ 403.194283] attempt to access beyond end of device [ 403.199322] loop6: rw=12288, want=8200, limit=20 [ 403.204292] attempt to access beyond end of device [ 403.209347] loop6: rw=12288, want=12296, limit=20 20:06:24 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2, 0xa) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x800}, &(0x7f0000000280)=0x8) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x80000001) openat$cgroup_procs(r3, &(0x7f00000005c0)="b267726f75808f51743fe9249e", 0x2, 0x0) syz_mount_image$hfs(&(0x7f0000000300)='hfs\x00', &(0x7f0000000340)='./file0\x00', 0x5, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="0b1e7eba07507344a32494e95297aed0c47df3c6246134a793ceae8b5c824a06e633b125f613", 0x26, 0x8}, {&(0x7f00000003c0)="3666afbf2e24d1d1e5bc55f5a02bf5fbe04366dc244c56467ed21c6a3d2c18e34900ceb6f5c968c65effc7cf2b950b6ec8cfa32958c25fb76ad3b9f679cd3a2232aa04b30e584a038a7721699f5cd36498bb73e6cc31cd3ab37970211b8349c7ffdbe2a277eec121f41fe2a178988c9165ec6d17ed8f929804476867d92c865603fda8981335481e5fcf51e4c14d541c3a572c9fe7f0731db37e1b83593260406a3b3b978a4dcf339728c846e2532bbd1363e42f05740443cb76098cdfda1fc6f08da6b228c3f8932863a0a02e3a5059d33f94cdb0a5279928b22ceac2aa6edefcf2a12830608b471a628bb54655d8", 0xef, 0x5}], 0x1000060, &(0x7f0000000500)=ANY=[@ANYBLOB="756d61736b3d3030303030303030303032303030303030303030313094630f2ac9785959800d0ba0f59101302c717569650002000000003030302e30"]) 20:06:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB='*'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net//..\x00', 0x94000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="a200000000000000ee623b23784e126ff13078c065d908d0a9c8bff5afdacaeb65410970cb681ab8a8e225b051baac961b5b4b421b0000000000000006ab6d094fa014c7e929877dc22da302cef8b45531d7c824bb3daa251e5c23018fa74cb159aa9d2a84ca895e535474a950acad022bfb58c11329b6d9d2e042feacc30347e716ce1223eebc98210e0e3dcdfc"], 0x400000) r3 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) setsockopt$inet_dccp_int(r3, 0x21, 0x7, &(0x7f0000000040)=0x800, 0x4) 20:06:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r1, 0x101000000000013) 20:06:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x8}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x4c, "155107d71d37608bfd365857bd1a402cd2f9d1f97aea8f25f1de9a58f36e4234974255758a2deeb5e9d940f51d4cf6d49a4a5df323fed797ecb1aa229804a2b05c49c082b97eaf15507ec737"}, &(0x7f0000000180)=0x54) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000440)={r3, 0x1, 0x6, @dev={[], 0x15}}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30c3ffffff00", @ifru_names="04707000"}) 20:06:24 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:24 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 403.553863] 9pnet: p9_fd_create_unix (21956): problem connecting socket: ./file0: -111 [ 403.556707] attempt to access beyond end of device [ 403.567289] loop6: rw=12288, want=8200, limit=20 20:06:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a0000002901"], 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x7}, {&(0x7f00000004c0)=""/149, 0x95}], 0xe2) 20:06:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0xfffffffffffffffc, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:24 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 403.637970] attempt to access beyond end of device [ 403.643046] loop6: rw=12288, want=12296, limit=20 20:06:24 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = shmget$private(0x0, 0x4000, 0x46ab4b9d19203a23, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/48) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 403.681540] attempt to access beyond end of device [ 403.686636] loop6: rw=12288, want=8200, limit=20 20:06:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\t\x00', @ifru_names="04707000"}) [ 403.771208] attempt to access beyond end of device [ 403.776304] loop6: rw=12288, want=12296, limit=20 [ 403.784536] 9pnet: p9_fd_create_unix (21984): problem connecting socket: ./file0: -111 20:06:24 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x40000004, 0x84) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$KVM_SET_BOOT_CPU_ID(r2, 0xae78, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a0000002901000000"], 0x9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") sync() readv(r2, &(0x7f0000000200)=[{&(0x7f0000000180)=""/94, 0x5e}], 0x1) 20:06:24 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x10000000}) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 403.867484] attempt to access beyond end of device [ 403.874731] loop6: rw=12288, want=8200, limit=20 20:06:24 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 403.964731] attempt to access beyond end of device [ 403.969800] loop6: rw=12288, want=12296, limit=20 [ 404.033118] attempt to access beyond end of device [ 404.038221] loop6: rw=12288, want=8200, limit=20 [ 404.058071] attempt to access beyond end of device [ 404.063120] loop6: rw=12288, want=12296, limit=20 [ 404.089944] 9pnet: p9_fd_create_unix (22013): problem connecting socket: ./file0: -111 20:06:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r1, 0x101000000000013) 20:06:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x7, 0x4000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x4, 0x101, 0x9, 0x81, 0x200}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={r0, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x86, 0x7, 0x8, 0x6}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000000)=0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="74090a000494000001000800000800000000ff7f06000000"], &(0x7f0000000240)=0x1c) 20:06:24 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:24 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_names="04707000"}) 20:06:24 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x1) 20:06:24 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fst', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:24 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x8, 0x200200) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000180)=0x6, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) getsockopt$packet_int(r2, 0x107, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 404.483332] 9pnet: p9_fd_create_unix (22028): problem connecting socket: ./file0: -111 20:06:25 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x2, 0x84) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) signalfd4(r0, &(0x7f0000000040)={0x8}, 0x8, 0x80000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r2, &(0x7f0000000200)="6e732f6e65c746") getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:25 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x122) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@local, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB='*\x00\x00\x00)'], 0x5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:25 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:25 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:25 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30ffffffc300", @ifru_names="04707000"}) 20:06:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) flock(r0, 0xb) r2 = syz_open_procfs(r1, &(0x7f0000000140)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='veth0\x00', 0x10) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='teql0\x00', 0x10) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) [ 404.765957] attempt to access beyond end of device [ 404.771127] loop6: rw=12288, want=8200, limit=20 [ 404.797960] 9pnet: p9_fd_create_unix (22072): problem connecting socket: ./file0: -111 [ 404.859824] attempt to access beyond end of device [ 404.864979] loop6: rw=12288, want=12296, limit=20 [ 404.882632] attempt to access beyond end of device [ 404.887700] loop6: rw=12288, want=8200, limit=20 [ 404.912266] attempt to access beyond end of device [ 404.917539] loop6: rw=12288, want=12296, limit=20 [ 404.955292] attempt to access beyond end of device [ 404.960416] loop6: rw=12288, want=8200, limit=20 [ 404.973668] attempt to access beyond end of device [ 404.978821] loop6: rw=12288, want=12296, limit=20 [ 404.986551] attempt to access beyond end of device [ 404.991611] loop6: rw=12288, want=8200, limit=20 [ 404.997113] attempt to access beyond end of device [ 405.002283] loop6: rw=12288, want=12296, limit=20 20:06:25 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = socket$inet_sctp(0x2, 0x1fffffffff9, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:25 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r2, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18}, 0x18) close(r2) r3 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x6, 0x2, 0x1, 0x37, '\x00', 0x6396951f}, 0x5, 0x3, 0x1, r3, 0x6, 0x7, 'syz1\x00', &(0x7f0000000100)=['selfproc#mime_type\x00', '/lo)system\x00', ']lo\x00', 'cgroup2\x00', 'cgroup2\x00', 'cgroup.procs\x00'], 0x3f, [], [0x8, 0x1, 0x5, 0x90e]}) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:25 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:25 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000280)={@remote, @ipv4={[], [], @loopback}, @empty, 0x7, 0x1, 0x7, 0x0, 0x4, 0x2, r2}) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a0000002901"], 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:25 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:25 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667310", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:25 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\t\x00', @ifru_names="04707000"}) 20:06:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0xfffffffffffffd1f}], 0xfffffaf) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x4c, 0x3, 0x0, {0x0, 0x2b, 0x0, '(##lo.vmnet0wlan0/#/^bdev-[cgroup,cpuset),:'}}, 0x4c) [ 405.426773] 9pnet: p9_fd_create_unix (22119): problem connecting socket: ./file0: -111 20:06:26 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 20:06:26 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:26 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0)\x00', @ifru_names="04707000"}) 20:06:26 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:26 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x84) 20:06:26 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)="6e25742f616e79637173743600d1df23eb818beec5f39daae72c2c408e235e898ef0a13acd8703b29208a12f9618988a323c752312e71db9e36682276ae035bace7d4d7404bb7440678e2d249080a7f0219aa54430a581a07d05a39265e4784cf9e10aaa20") readv(r2, &(0x7f0000000100)=[{&(0x7f0000000400)=""/18, 0xf4f49756b333147}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) getsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000300)=""/254, &(0x7f00000001c0)=0xfe) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x2f, @multicast2, 0x4e22, 0x0, 'fo\x00', 0x4, 0x100, 0x52}, {@rand_addr=0x3, 0x4e22, 0x2, 0x7, 0x6, 0x29}}, 0x44) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) [ 405.643992] 9pnet: Insufficient options for proto=fd [ 405.702414] 9pnet: p9_fd_create_unix (22157): problem connecting socket: ./file0: -111 20:06:26 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs`', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 405.767956] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 405.811247] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 20:06:26 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000100)=0x80, 0x800) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x42, @remote, 0x1000}, @in6={0xa, 0x4e21, 0xc5d, @ipv4={[], [], @multicast2}, 0x6}, @in6={0xa, 0x4e20, 0x7fff, @mcast2, 0x1}, @in6={0xa, 0x4e20, 0xffff, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e23}, @in={0x2, 0x4e24, @rand_addr=0x9}, @in6={0xa, 0x4e24, 0x7fff, @mcast1, 0x3ff}], 0xbc) 20:06:29 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:29 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:29 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x20) mmap(&(0x7f0000013000/0x3000)=nil, 0x3000, 0x2, 0x200000000032, 0xffffffffffffffff, 0x0) close(r1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) accept4$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80000) 20:06:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300300", @ifru_names="04707000"}) 20:06:29 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:29 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000000)) [ 408.504231] f2fs_msg: 50 callbacks suppressed [ 408.504246] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 408.516207] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 408.516539] 9pnet: Insufficient options for proto=fd [ 408.538939] 9pnet: p9_fd_create_unix (22212): problem connecting socket: ./file0: -111 20:06:29 executing program 0: r0 = semget$private(0x0, 0x3, 0x10) semop(r0, &(0x7f0000000000)=[{0x2, 0xbb3, 0x800}, {0x7, 0x7, 0x1000}, {0x1, 0x800000, 0x800}, {0x4, 0xffffffffffffff00, 0x1000}, {0x3, 0x0, 0x1000}], 0x5) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x9d, 0xfffe) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0xff, 0x9}, &(0x7f0000000080)=0xc) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="ccfc1e86cc7ec8ca1cfc8b64854273a1", 0x10) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:29 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fsetxattr(r0, &(0x7f0000000280)=@random={'osx.', '\x00'}, &(0x7f00000002c0)='nodevwlan1\x00', 0xb, 0x3) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) exit(0x7) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x200, @local, 0x9}}, 0x3, 0x7f, 0x5, 0x8, 0x2}, &(0x7f0000000040)=0x98) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x1000000000000008, 0x8000, 0x8000, 0x2, 0x6, 0x9, 0x4, 0x4000000004, r2}, 0x20) finit_module(r0, &(0x7f00000001c0)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae", 0x2) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240)=0x40, 0x4) [ 408.571375] attempt to access beyond end of device [ 408.576529] loop6: rw=12288, want=8200, limit=20 [ 408.582287] F2FS-fs (loop6): invalid crc value [ 408.587299] attempt to access beyond end of device [ 408.592387] loop6: rw=12288, want=12296, limit=20 20:06:29 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1, 0x400) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @remote}}, 0x3c, 0xffff, 0xfffffffffffffffc, 0x7, 0x20}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={r1, 0x41, "65ec0fff268ef62d5d43a233cd1188f5701e1d307cc0a7c1767b188c0688df8b2ba134c447ff6576a6d9d903f7d56f0c79966f75fe5054db51e0a1aa3c649822b1"}, &(0x7f0000000200)=0x49) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)={0xb000200a}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 408.649258] F2FS-fs (loop6): invalid crc value [ 408.654089] F2FS-fs (loop6): Failed to get valid F2FS checkpoint 20:06:29 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:29 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000000fffffdfd00", @ifru_names="04707000"}) [ 408.703629] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 408.710775] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 20:06:29 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xf01037a45f6abb7, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000040)=""/51) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)=""/195, 0xc3) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 408.775872] 9pnet: Insufficient options for proto=fd 20:06:29 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x2, 0x84) r2 = dup2(r0, r1) accept$unix(r2, &(0x7f0000000440)=@abs, &(0x7f00000004c0)=0x6e) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0xfccb) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x10) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000380)='/dev/null\x00', 0x200000, 0x0) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0x0, 0x4, {0x7, 0x1b, 0xf520, 0x40, 0x0, 0x2, 0x1f, 0x5}}, 0x50) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='posix_acl_access@#eth0\x00'}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={r3, 0x0, 0x1c00000000000000}, &(0x7f0000000100)=0x8) syz_read_part_table(0x2, 0x3, &(0x7f0000000280)=[{&(0x7f0000000140)="3f4ce8bb286b33c321b3b9d8c44d050cf9cd9a7e7da92269f091fb89ef0e1e4f28d958dd9d407657be91a8f057c03ee13af36fe9f5e9b43e7abc48ddf3e04f", 0x3f, 0x8}, {&(0x7f0000000180)="d488a3", 0x3, 0xb6}, {&(0x7f00000001c0)="fe012b8e929ebc84d281d5c08e98d233aacb827d4d6bb4fd25978de531276f1c345beec44466dff353df9a41343b82b06e8eb2b055d59c09c451a37da52b65fe3b12323068ad78798fdfad1ec63e07f6e77bb6f19f4904d7d38c2ac5c588cb681526695bbb970b6d70a831e4da5a20a4be892d6f1c140138284276e2577f79b33adb1c37a1bee4b4c2c766650139f6ce5d8c3f2e797f42ca2f6dadba74bc8e2bd69c45031f602d7176d055ca710f536e99aa70", 0xb3, 0x800}]) [ 408.799627] attempt to access beyond end of device [ 408.804709] loop6: rw=12288, want=8200, limit=20 [ 408.820397] 9pnet: p9_fd_create_unix (22243): problem connecting socket: ./file0: -111 [ 408.835172] F2FS-fs (loop6): invalid crc value [ 408.850325] attempt to access beyond end of device [ 408.855407] loop6: rw=12288, want=12296, limit=20 [ 408.899203] F2FS-fs (loop6): invalid crc value [ 408.904047] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 408.953322] attempt to access beyond end of device [ 408.958365] loop6: rw=12288, want=8200, limit=20 [ 408.971278] Dev loop7: unable to read RDB block 8 [ 408.976351] loop7: unable to read partition table [ 409.000605] loop7: partition table beyond EOD, truncated [ 409.006249] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 409.015125] attempt to access beyond end of device [ 409.020290] loop6: rw=12288, want=12296, limit=20 [ 409.029243] attempt to access beyond end of device [ 409.034314] loop6: rw=12288, want=8200, limit=20 [ 409.051367] attempt to access beyond end of device [ 409.056458] loop6: rw=12288, want=12296, limit=20 [ 409.067560] Dev loop7: unable to read RDB block 8 [ 409.072522] loop7: unable to read partition table [ 409.086758] loop7: partition table beyond EOD, truncated [ 409.092356] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) 20:06:32 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:32 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:32 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00)\x00', @ifru_names="04707000"}) 20:06:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:32 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs&', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:32 executing program 7: r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0xfffffffffffffde9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x9]}, 0x6) 20:06:32 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000100)="6e65742f6d6366696c7465361d123913ec9e562001000000df040000000000000059467a821f30d71b70ed2aae78e4f86e2cd5c2929a1fa3230cfaf7f5cec2919248d7527011d7d92095e2d66e0e12cf1e4542") getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 411.596453] 9pnet: p9_fd_create_unix (22278): problem connecting socket: ./file0: -111 [ 411.617292] 9pnet: Insufficient options for proto=fd 20:06:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@ipv4={[], [], @remote}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @loopback, r1}, 0xfffffffffffffdf0) syz_mount_image$minix(&(0x7f0000000780)='minix\x00', &(0x7f00000007c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000a00)=[{&(0x7f0000000800)="1479e8926ee0a7c5858b54a3dbf225b1dc997cdb3ce0595e060ac94a6cc1f6bc33566cd99359e9c803af96b3bc4ae4c7ab33fb2d9bb9fb59cc9fe673a5f8eef94f16ff4a22df12507e6b1039bd12ccfc232af2cd2a59163abf7ae32e6f1ab96989b96960c7c275d481d6b208345cb9b57e388d84df8e2cf719934c4b5bb816783100af420cf2bce0161adc7f12563a5c3fe5ed428e4ab97df946202201c15a52961df17109b2ad13573eea4422bcaea3dac5664b2fa5b069bd4d8a277241ddfbedf2109a19ab36d34e5a", 0xca, 0x8}, {&(0x7f0000000900)="3e1d901d3d8a3633bfa7f06d6033a928bee09a4f4c5e846577d421b143f096b5e022c7a1d358e0559305cf1e837056ced98664f1d51a16b5068fd4e9fd3f2b2553cfd293712e642dc4d80f965894d4c8aac03c005922754c206e1714786ade36c37dd1642b770cc058be59e300d40d77c1df608a5494aaef674c1036a59125940db9689fcd003d50807ec834a91561e262d7bc5fcc6404d525814a0fdb9de88b4b3e3fd1059a2a1f41f474324ed09652b5cdb3a8fd3cb334afef2fed034fafa9f73e8616d47e98bed2db", 0xca, 0x100}], 0x40400, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000200)='./file0\x00', 0x94e, 0x6, &(0x7f00000006c0)=[{&(0x7f0000000240)="dc12b8b29be0c19132f1677fe25f25578ce9c748a0f23fda52b18782b3eeae4fd3c9cc41e297705c4de1c43b0a836b864ff64a9fb6c81ae596d40d7b5cf5296067406e", 0x43, 0x1}, {&(0x7f00000002c0)="33a828e8eddadd3dec66b6e3666cbffb32bc7bc266ba4a8fa40c4cbaa287a2bae7231a8835f515ba28c67592bdb1", 0x2e, 0x2}, {&(0x7f0000000300)="0813a76548c53d46d068f299d2263eadde571d44d8c0ea5bddb5fd81840e65856d3216f06cedc77b8601af53be829b3ff7dc61b23ad97e0e1a363a8f05891ea8dee7d3d4271c4024e6274d24a37fceb65a8d831627ab725a245b4bde899b95498e65838a240df144f59b0629401eca9d2b719bfcde209e83fca7972f9c085637055782803d9b7880dfd8691d7473c2069c4f0c3ebe64757a9da1dac52cf49974748737e3b3c3ab21bd1db136bfc735a29bbfc6b211efa8a25e59695ed0d2939632da0dc07e87ef051fd7821c6a9eb75d7032b32be9013edf8ccf8919c513a15d2e20194e0c7672e4a1f6bb9f9366cfc48b", 0xf1, 0x12da}, {&(0x7f0000000400)="5f433ad48768748eb81609767cd97e9f916190170860f14d9d2e396b4d0c2ebb77d53a8829c527a6d9128ffa168cb589306e56d4e50274d370aa1dee1f872850483b0a436d42c9e76e4467130980f467a54b7944bd4b89bb58aadfbf8486ff538341b5b8e2a2f8e3a3837de595f2c1680d4a2dfe1c4006497bf851e3b3d68fbba94d4d18c293fa342d8e26f8f1f30e7f714f32eb2da5146a519f83de5e3d2fff5c236f574f16", 0xa6, 0x5}, {&(0x7f00000005c0)="aabeebc1d02cac2eced2e1b58567a5d367a96c729e7f469b3998ff4e7a1b785d2507b7d69ca1b7f4f7937e0c86669271a602f2c54a4fc55fd31d", 0x3a, 0x8}, {&(0x7f0000000600)="1ea01e027b8144f5018286ac0316541764247b486d27161abe72da73efe58998bf29ee7a88247f4557f3eec48402b6c03e97bf14739eddec0d32c1588d0cdaf029bd065dee1ffd237503a2659340c97261834bb0bbecea183a9f4c03787df7d790a62ae3386c5593796358830f35b9f9d0bb5dafcdcbd66a4dd0f3ef031ee82690ec789825aa7f629639c03dbc646dd9c24bf042ed1cb0b36b4e57f6b6", 0x9d, 0xaf4}], 0x10000, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:32 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:32 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:32 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667304", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:32 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00)\x00', @ifru_names="04707000"}) 20:06:32 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000100)=""/119) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000180)={0x4, 0xfffffffffffffffe}) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xc45, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000080)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x3, 0x4) openat$cgroup_ro(r2, &(0x7f0000000200)='cpuacct.usage_all\x00', 0x0, 0x0) [ 411.822673] 9pnet: p9_fd_create_unix (22316): problem connecting socket: ./file0: -111 20:06:32 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) [ 411.874465] 9pnet: Insufficient options for proto=fd [ 411.882082] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop3. 20:06:32 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 412.071891] 9pnet: p9_fd_create_unix (22348): problem connecting socket: ./file0: -111 20:06:35 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(0x0, 0x101000000000013) 20:06:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:06:35 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x16240, 0x10}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1ff}, 0x8) 20:06:35 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00@\x00', @ifru_names="04707000"}) 20:06:35 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x1) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x204000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000040)={0x9, 0x3, 0xef, 0x2, 'syz1\x00', 0x98}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 414.662905] 9pnet: p9_fd_create_unix (22362): problem connecting socket: ./file0: -111 [ 414.680570] f2fs_msg: 10 callbacks suppressed [ 414.680585] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 414.692294] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 414.703056] 9pnet: Insufficient options for proto=fd 20:06:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000100)={0xee, "4af0118c96ab9cf72db3f3391c95106b83a9adca2373da19bebf07b028900d9b5b2b3502e49a4498abe8867f763d3c7417e9ba275d959aaacfebd212b55d9fc0688cfc1843d3f07b98bf50a65dfeb915bb2b0e89e87da06d32e4c03c635c34c52bd62d8db9333b25f8e2c1473b3786cc8ce5ac6d6e4e679789a7d31d05d00ba47f5b3a0ef54bd67f74c5c3dbd521a426cfc73e7cdfb2f93f26c30bdfefccb6d1d15a1ce1b718d22aef632dcfd7a7307c32974185b1fa4f62f89680d39662d5e6f149fec0f788a8f5e7cf172ae215213d116e4d83031bd62bf56628d37e2931bc20614b9542a3e8ca3bf598a841a8"}) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:35 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:35 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) 20:06:35 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1000}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x4, 0x2a, "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", 0x54, 0x3ff, 0x80000, 0x800, 0x95, 0xffffffff80000001, 0xb31f, 0x1}, r1}}, 0x120) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000740)={0x0, 0x2, 0x20}, &(0x7f0000000780)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000007c0)={0x40, 0x8001, 0x4, 0x2, r2}, 0x10) r3 = shmget(0x1, 0x2000, 0xa00, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@ipv4={[], [], @dev}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000640)={0x0}, &(0x7f0000000680)=0xc) r9 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r3, 0x1, &(0x7f00000006c0)={{0x1, r4, r5, r6, r7, 0x82, 0xfffffffffffffffc}, 0x8, 0x3ff, 0x7fff, 0x101, r8, r9, 0x3f}) [ 414.765514] attempt to access beyond end of device [ 414.770603] loop6: rw=12288, want=8200, limit=20 [ 414.811799] F2FS-fs (loop6): invalid crc value 20:06:35 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 414.851672] attempt to access beyond end of device [ 414.856762] loop6: rw=12288, want=12296, limit=20 20:06:35 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000600", @ifru_names="04707000"}) [ 414.899547] F2FS-fs (loop6): invalid crc value [ 414.904304] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 414.920473] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 414.927666] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 414.928423] 9pnet: p9_fd_create_unix (22398): problem connecting socket: ./file0: -111 [ 414.937327] attempt to access beyond end of device 20:06:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x29, &(0x7f0000000000)={@multicast1, @loopback, r1}, 0x10f) syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x40, 0x0) 20:06:35 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0xbd) r0 = socket$inet_sctp(0x2, 0x5, 0x84) mq_getsetattr(r0, &(0x7f0000000040)={0x1, 0xfff, 0x4, 0xac, 0x2, 0x8, 0x2, 0xff}, &(0x7f0000000080)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='projid_map\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 414.948509] loop6: rw=12288, want=8200, limit=20 [ 414.954337] F2FS-fs (loop6): invalid crc value [ 414.963097] attempt to access beyond end of device [ 414.968194] loop6: rw=12288, want=12296, limit=20 [ 414.984256] F2FS-fs (loop6): invalid crc value [ 414.989085] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 415.087776] attempt to access beyond end of device [ 415.092941] loop6: rw=12288, want=8200, limit=20 [ 415.111568] attempt to access beyond end of device [ 415.116666] loop6: rw=12288, want=12296, limit=20 [ 415.146180] attempt to access beyond end of device [ 415.151262] loop6: rw=12288, want=8200, limit=20 [ 415.174374] attempt to access beyond end of device [ 415.179454] loop6: rw=12288, want=12296, limit=20 20:06:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(0x0, 0x101000000000013) 20:06:36 executing program 0: r0 = creat(&(0x7f0000000200)='./file0\x00', 0x150) write$binfmt_aout(r0, &(0x7f0000000100)={{0xcc, 0x0, 0x0, 0x160}}, 0x156) close(r0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f00000001c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0x3e4) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f0000000080)=0xfffffffffffffdfd) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @multicast2}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") keyctl$session_to_parent(0x12) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00 \x00', @ifru_names="04707000"}) 20:06:36 executing program 7: getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.syz\x00', &(0x7f00000000c0)=""/79, 0x4f) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:36 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667396", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 415.597321] 9pnet: p9_fd_create_unix (22443): problem connecting socket: ./file0: -111 20:06:36 executing program 7: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000005c0), 0x4) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000740)=0x5, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_open_dev$sndpcmp(&(0x7f0000000580)='/dev/snd/pcmC#D#p\x00', 0xc77b, 0x400000400000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000080)={{0x5, 0x0, 0x33, 0x4, '\x00', 0x541}, 0x1, [0xc541, 0x8, 0x9, 0x4, 0x6, 0x79, 0x5, 0x0, 0x4, 0x40, 0x1, 0x80, 0x0, 0x81, 0x80000001, 0x2, 0x0, 0x3, 0x3, 0xb3, 0x100000000, 0x7, 0x8, 0xe1, 0xffffffffffffffdf, 0x101, 0x4e26, 0x6, 0x3ff, 0x482, 0xffffffff, 0xccff, 0x4, 0x8, 0x8, 0x1, 0xfffffffffffffe00, 0x1, 0x6, 0x8, 0x4, 0x84, 0x7, 0x1, 0x200, 0x5, 0xfffffffffffffffa, 0x0, 0x1000, 0x1, 0x6, 0x6, 0x8, 0xc1, 0xea8, 0x40, 0x4, 0x6, 0x6, 0x8, 0x6, 0x0, 0x1ff, 0x9, 0x100, 0xf997, 0x81, 0x1, 0xffbf, 0x1000, 0x6, 0x1, 0x9ad, 0x800, 0x6, 0x7, 0x80000000, 0x100000000, 0xfffffffffffffff7, 0x6, 0xdc, 0x2, 0xffffffffffff2342, 0x1, 0x7, 0x3, 0x100000000, 0xffffffff, 0x2, 0x1ff7, 0x3f, 0x4, 0x6, 0xfffffffff60b3b00, 0x8, 0xf353, 0x5, 0x80000001, 0x4, 0x7, 0x8e6, 0x3ff, 0x3f, 0x100, 0x85d, 0x8, 0x9, 0x9, 0x8, 0x800, 0xea76, 0xe25, 0x5, 0x8000, 0x1, 0xffffffff, 0x80000001, 0x33b8, 0x100, 0xdc95, 0x3f, 0x5e, 0x5, 0x4, 0x5, 0x2, 0x8, 0x4], {0x0, 0x989680}}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000000640)={0x0, @in6}, &(0x7f0000000000)=0x84) 20:06:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x1a4) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x8, 0x40) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000280)={r1, 0x0, 0x4, 0x8001, 0xfffffffffffffff9, 0x3a}, 0x14) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80001, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:36 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000000fffffffe00", @ifru_names="04707000"}) 20:06:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 415.807372] 9pnet: p9_fd_create_unix (22473): problem connecting socket: ./file0: -111 20:06:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) [ 415.875093] attempt to access beyond end of device [ 415.880245] loop6: rw=12288, want=8200, limit=20 [ 415.946256] attempt to access beyond end of device [ 415.951339] loop6: rw=12288, want=12296, limit=20 [ 415.990738] attempt to access beyond end of device [ 415.995791] loop6: rw=12288, want=8200, limit=20 [ 416.007141] attempt to access beyond end of device [ 416.012270] loop6: rw=12288, want=12296, limit=20 [ 416.038937] attempt to access beyond end of device [ 416.043977] loop6: rw=12288, want=8200, limit=20 [ 416.048962] attempt to access beyond end of device [ 416.054031] loop6: rw=12288, want=12296, limit=20 [ 416.060284] attempt to access beyond end of device [ 416.065308] loop6: rw=12288, want=8200, limit=20 [ 416.070685] attempt to access beyond end of device [ 416.075718] loop6: rw=12288, want=12296, limit=20 20:06:36 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(0x0, 0x101000000000013) 20:06:36 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x4, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:36 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x800, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$TCSBRKP(r1, 0x5425, 0x5) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:36 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00`', @ifru_names="04707000"}) 20:06:36 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000080)=[0xee00]) getresgid(&(0x7f0000000100), &(0x7f0000000280), &(0x7f00000002c0)=0x0) setresgid(r2, r3, r4) 20:06:36 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673a8", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) [ 416.471743] 9pnet: p9_fd_create_unix (22510): problem connecting socket: ./file0: -111 20:06:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc8070031") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:37 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000080)=0xe8) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r0, r1, r2) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x7fffffff, 0x10000) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000000100)={0x1, "16"}, 0x2) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000040)) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:37 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000004", @ifru_names="04707000"}) 20:06:37 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x105400) timerfd_gettime(r0, &(0x7f00000000c0)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1ff, 0x1f, 0x800, 0x5661, 0x4}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000180)={r2, 0x1, 0x30, 0x5, 0x428}, &(0x7f00000001c0)=0x18) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000040)='lo\x00') getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) shutdown(r1, 0x1) 20:06:37 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) 20:06:37 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x9944b1cbe6cd433) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x10d000, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000080)=0x1) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000002c0), &(0x7f0000000280)=0x4) [ 416.730329] 9pnet: p9_fd_create_unix (22548): problem connecting socket: ./file0: -111 [ 416.759480] attempt to access beyond end of device [ 416.764554] loop6: rw=12288, want=8200, limit=20 [ 416.793623] attempt to access beyond end of device [ 416.798715] loop6: rw=12288, want=12296, limit=20 [ 416.809515] attempt to access beyond end of device [ 416.814605] loop6: rw=12288, want=8200, limit=20 [ 416.828893] attempt to access beyond end of device [ 416.833973] loop6: rw=12288, want=12296, limit=20 [ 416.916524] attempt to access beyond end of device [ 416.921602] loop6: rw=12288, want=8200, limit=20 [ 416.930280] attempt to access beyond end of device [ 416.935470] loop6: rw=12288, want=12296, limit=20 [ 416.972347] attempt to access beyond end of device [ 416.977516] loop6: rw=12288, want=8200, limit=20 [ 416.982972] attempt to access beyond end of device [ 416.988137] loop6: rw=12288, want=12296, limit=20 20:06:37 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x0) 20:06:37 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x18) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:37 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000080)={0x3, 0x9, 0x8000, 'queue1\x00', 0x3}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc8070031") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:37 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000300", @ifru_names="04707000"}) 20:06:37 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.pr\a\x00\x00\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0xd, 0x8, 0x6, 0x10000, 0xff}, 0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x8}, 0x10) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000100)={0x6, 0x7dfc, 0x1}) 20:06:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) 20:06:37 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 417.383675] attempt to access beyond end of device [ 417.388807] loop6: rw=12288, want=8200, limit=20 [ 417.394580] 9pnet: p9_fd_create_unix (22594): problem connecting socket: ./file0: -111 [ 417.416422] attempt to access beyond end of device [ 417.421539] loop6: rw=12288, want=12296, limit=20 20:06:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000040)={{0xfff, 0x6}, 0x0, 0x538, 0xffffffff, {0x8d, 0x3a}, 0x3, 0x2}) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:38 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x80000005, 0x400000) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40000, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000280)={0x7, 0x0, [{0xc000000f, 0x2, 0x4, 0x2, 0x8, 0x4, 0x7}, {0x40000001, 0x100000001, 0x1, 0x9, 0x2207, 0x7f, 0x1ff}, {0x80000019, 0x6, 0x5, 0x4, 0x10000, 0x2, 0x5}, {0x80000000, 0x2, 0x1, 0xc5, 0x4, 0x7f, 0xfff}, {0x80000001, 0x0, 0x6, 0x80, 0xad, 0x7ff, 0x3ff}, {0xc0000004, 0xfff, 0x4, 0x800, 0xffffffff, 0xfffffffffffffb62, 0x2}, {0xd, 0xbcf3, 0x6, 0xfff, 0x7ff, 0x1, 0xa5d6}]}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x20000, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x4, r1}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00`\x00', @ifru_names="04707000"}) 20:06:38 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(0xffffffffffffff9c, 0x0, 0xd171a31bc2e24202, &(0x7f0000000040)={0x5, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e23, @local}}}, 0x108) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc8070031") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 417.437330] attempt to access beyond end of device [ 417.442444] loop6: rw=12288, want=8200, limit=20 [ 417.476744] attempt to access beyond end of device [ 417.481935] loop6: rw=12288, want=12296, limit=20 [ 417.561935] attempt to access beyond end of device [ 417.567069] loop6: rw=12288, want=8200, limit=20 [ 417.584346] 9pnet: p9_fd_create_unix (22623): problem connecting socket: ./file0: -111 20:06:38 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:06:38 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000100)=""/149, 0x47}], 0x2) [ 417.607967] attempt to access beyond end of device [ 417.613076] loop6: rw=12288, want=12296, limit=20 [ 417.637445] attempt to access beyond end of device [ 417.642535] loop6: rw=12288, want=8200, limit=20 20:06:38 executing program 7: r0 = open(&(0x7f0000000140)='./file0\x00', 0x511800, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), r1, 0x1f}}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x80000001, 0x640000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x9}, 0x8) [ 417.711325] attempt to access beyond end of device [ 417.716463] loop6: rw=12288, want=12296, limit=20 20:06:38 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x0) 20:06:38 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) recvmmsg(0xffffffffffffff9c, &(0x7f0000006500)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000012c0)=""/178, 0xb2}, {&(0x7f0000001380)=""/68, 0x44}, {&(0x7f0000001400)=""/41, 0x29}, {&(0x7f0000001440)=""/54, 0x36}], 0x4, &(0x7f00000014c0)=""/140, 0x8c, 0x40000000}, 0x3f}, {{&(0x7f0000001580)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001600)=""/41, 0x29}, {&(0x7f0000001640)=""/175, 0xaf}], 0x2, &(0x7f0000001740)=""/226, 0xe2, 0x8}, 0x8}, {{&(0x7f0000001840)=@sco, 0x80, &(0x7f0000002900)=[{&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/55, 0x37}], 0x2, &(0x7f0000002940)=""/86, 0x56, 0x7fffffff}, 0x2}, {{&(0x7f00000029c0)=@hci, 0x80, &(0x7f0000002c80)=[{&(0x7f0000002a40)=""/88, 0x58}, {&(0x7f0000002ac0)=""/66, 0x42}, {&(0x7f0000002b40)=""/226, 0xe2}, {&(0x7f0000002c40)=""/13, 0xd}], 0x4, 0x0, 0x0, 0x4}, 0x9}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002cc0)=""/106, 0x6a}, {&(0x7f0000002d40)=""/166, 0xa6}, {&(0x7f0000002e00)=""/188, 0xbc}], 0x3, &(0x7f0000002f00)=""/200, 0xc8, 0x8001}, 0x8}, {{&(0x7f0000003000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003080)=""/90, 0x5a}, {&(0x7f0000003100)=""/75, 0x4b}, {&(0x7f0000003180)=""/4, 0x4}], 0x3, 0x0, 0x0, 0x7}, 0x96}, {{&(0x7f0000003200)=@nfc_llcp, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003280)=""/165, 0xa5}, {&(0x7f0000003340)=""/46, 0x2e}, {&(0x7f0000003380)=""/255, 0xff}, {&(0x7f0000003480)=""/239, 0xef}, {&(0x7f0000003580)=""/30, 0x1e}, {&(0x7f00000035c0)=""/4, 0x4}, {&(0x7f0000003600)=""/133, 0x85}], 0x7, &(0x7f0000003740)=""/66, 0x42, 0x8}, 0x846}, {{0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000037c0)=""/187, 0xbb}], 0x1, &(0x7f00000038c0)=""/172, 0xac}, 0x1f}, {{&(0x7f0000003980)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003a00)=""/170, 0xaa}, {&(0x7f0000003ac0)=""/185, 0xb9}, {&(0x7f0000003b80)=""/43, 0x2b}, {&(0x7f0000003bc0)=""/147, 0x93}], 0x4, &(0x7f0000003cc0)=""/142, 0x8e, 0x1}, 0x100000000}, {{&(0x7f0000003d80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006400)=[{&(0x7f0000003e00)=""/212, 0xd4}, {&(0x7f0000003f00)=""/4096, 0x1000}, {&(0x7f0000004f00)=""/4096, 0x1000}, {&(0x7f0000005f00)=""/149, 0x95}, {&(0x7f0000005fc0)=""/203, 0xcb}, {&(0x7f00000060c0)=""/247, 0xf7}, {&(0x7f00000061c0)=""/183, 0xb7}, {&(0x7f0000006280)=""/242, 0xf2}, {&(0x7f0000006380)=""/96, 0x60}], 0x9, &(0x7f00000064c0)=""/20, 0x14, 0x5}, 0x6}], 0xa, 0x40010041, &(0x7f0000006780)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffc, 0x40002) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) kexec_load(0x81, 0x1, &(0x7f0000000380)=[{&(0x7f00000002c0)="731efc4a22bc3f34c56ad14592406cd9e2c530c5c8d9dd8881b3afbd0ae3f2a10f82911297fbc3fbe857f2d4626dd223ae5f95eb1eed5b6b4ee20c96e2326af81f1680cc48c2be2e311eb30841471faa5a93b671f6f44a65639d4ed30063248265615614d580e8c7a143668d095639bbd86a441d3ce4f2666950765337df2b8abd303431ce307b4c", 0x88, 0x1, 0x7}], 0x150000) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000280)={0xf, 0x8, 0xfa00, {r2, 0x1f}}, 0x10) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000067c0)=0xfffffffffffffe00, 0x4) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x1000010) 20:06:38 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000100", @ifru_names="04707000"}) 20:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f8571") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:38 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='GPL\x00', r0}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x8001, @loopback}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x1}, @in6={0xa, 0x4e21, 0x5, @mcast1, 0x3ff}, @in={0x2, 0x4e20, @rand_addr}], 0x64) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0x100000005) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect(r5, &(0x7f00000001c0)=@in, 0x80) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r7, 0x8912, &(0x7f0000000500)="025c3f0a00145f8f764070") sendfile(r5, r6, &(0x7f0000000000), 0x2020000000000ff) getsockname$llc(r2, &(0x7f00000001c0), &(0x7f0000000200)=0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000012c0)={0x1, 0xb6, 0x7fffffff8}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r3}, &(0x7f0000000180)=0x8) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000240)={'filter\x00', 0x1000, "6cca9c6352ce3e967784efb389148cfb2b11ca6c518aefb91d3b54620de7f4d143774b9d52651273f197b8317fa26d207a297a16c21374c59039a4e028b386b8fcf7f862cb985b8729b0ee43c6bafba89a75c621d144e780a48f6c115b726239e5ef638c7f7064b4a79e723bd2150a6446c1456be98263f3bddc9f3df1838c714fa9b6e2a972b8c09843e2002c9859d66d22d54d538b8d62fdd5bf5dab7eed4af8dceadf42fb885f58d776d919d8e6095e2a29f44a0f77c3ecffe4706b265729157b43281f114f212484a9de52db4d14eae364db70d9b2c027def7e9a07837aac791f55fb38aef5595f0db41e39b98468b79f48babaf018594a3324fd47cd5cc1b593df4c4e7e1a5480dbf5ba59943732769bb3b9c625247adc24640b3b18ed39684a4d9ecacc63edcbeba8365e25f0ed969df0b2c43ae08609f36a7a36f1708a799fed6b82a7809196453abe486a3c5ec0f0f2ebc70f0d070ea17eba54cf494ca0b486df12208bc09a58b0b0e65076f0cad45c776f882f9012d398ac5438a23ab113daa3763714e2a6cf2d7c6b98811d2f21bf6da3d3fc4dee6e122444320494f78e25acf3c50ac54e0e82d04533d0425f994e87888c52cf1f5b29143ea83c75ee1fe9314686ae5677e7005cee3712f34a5b736f1a931b0337ae8edb4ed177b2943d3db9390f9c7c1bc8d43c2c08934f729ab6f7e28d5447fb12947606f9d6f99d6003cf43bf4aa766bc4d8c2d3554aef540710c1504526431f50ccf59ec70e991a41819eed3cea27827713d52337a458caded4d7d0638b0e8bcbef21af8340af091b9bde88c63a6e2db0f674cfa084e9f528320f3c96ad5e0600d1f9f2960f90887361fdfa0667555f9ea10031471fa6947899f7e0db25f85d0798f202364be6574b982d886c7390b95fb82c3363044d252700beab290187cf4d1b8b4d718509ca55e78e35c56975cd2aa8dd3febbabf1599b49eb7bdf53bc0f243a0678d22f388851459dd3c6dca633085a74d4fca89a34de716785b27c206bb61895b54c0d9eb8861a8aa69c9f4167a15850dc3849dff90266620f3f69c811938c1b00a8111e208ed6a07872d1cf68b431f4679fc99c3cb4b4c6bfee1a95adb2ffe19fc6ac6337d262110716aabedfea2a742b3b2f1fdf6b25b51ad63c91f6b178b0ccefe354d2a925fc726f87beaccae8ab9f50eb9a395c64be00d5adea17d84734a9bbbdd26e9ec1af0e2dfbb1d61a56b3c65bd794bc40fc34f42b4299ca052538e05dea34a6d6446be1fb8e4b2e06d7b521010b5c66377dbdb91cd13c7610227433b0b9d4bfcdf2a36b54266db7a31a22e125e9418f811577e0635548db9cff4d1d4b5c508838bd6a674c69ac6cc00a9a7d699d03950fb0ddbd63d9a04edf5c83170fadbc64e844b88c68694b5de811b126d26b2f4e1629ee86e48afd539be59a65712fc7f596062b7cc47d784ae1e8cfeb4307aa5cb817630337822cf87ce2da30ed7dd9856e0b3b651655f1960a9126f4931107e696fd052c0a5e494dab28fbebeddf5c4d9894354186e1f57622ed81540c528e1bda8ba340ca6aaa5312c1e27298fe4bae08902408a84c5a2793f58c8948b10e537ab3c5f1725ff0bea5644324bfed8bbcd63fc00396a36a1af75758a325ea8821f4435aa492e43afa1021cfe92c01ad0614100a116fffbc3bed6d1c7c82400c67e0b1bc0e3144966ad7423383da2e70779f50c5ee55b94f22eb9013bf17a493da17b6bb1cc6c24a25fbe03e0f2bcf11cd17d847a4e67f7fabc19292c36be2003c70d2f74894e55e1d069ce8d9776f107dc6f976351e415d97d16fd446016289633f8181fac0808cac84f851921a8b800ba245fb39dfddc53552f1b7c6e977b2a7f6d580fde146c1b7be9056730221d98df1119391cb5bb5eaa60c053435bdc86ea40aa364bb5ef399023dee29651a731cf28af4162289c35e851739723c352b0052df5002133dfa0d2775955335bbf8e0b58bbaecac312fdad9299f8e53cfcce6d28b5a9640289a2b83b82438968acd3157e0c5ba3c5180f5e2bbc120c4c63af97ad220efcf4a0784831206d83a64be9b298fcfda09e32ab0c18b189f6b7eeab173d454e130ff835458247061995c5b7a2e8398b6ab01f040fda1114f0a7835493ad591547622f59fce45d6438d3091ce2f143e5b7f02ad0137298e1eb2b8fe91933ed9d99a671cea971e7d1f9261eab210a9e8de647cfd4cb72f65cb3f1e109fbc7ff36f03801c9491e618c774a5ecaaecbf51f9573c94b9d96fb728ee317fffb7ef98882cc8af41c0306176640db36e64cf7777d223a9e581c22931311f772b34558e3ba84f7240316f5826f015ba991b8e44766814d404ae5e7a28744d928fedbab7c53af57edaf3c5157d6db00d658b07ccd188459ecd09051c308b1496a7bcfb318024e6a493c7d53e5a2f106443999edac92c2971ab8a0fab5f9948b8295eff813239faa1c02514bfc88ce72bb0e143e7eb84ab1a8aaba0c7a65c217e4fcd79383b9ad5fc0072cd9a4d40b78e496944f6f154225ed2fceac2689389a8827feb227f90156d74537abd684d23309df2592d3f92d99a088aaadd94c4363c0268dbc6bfa0ae92e93ce52e919a50db3877f414e9de832bee3724b974a974d25d7de407f6dea5599b56c2392e87febf36f92e14b6d97a6080b1a47672e8ed60f2eff6ca48085ed03edde36433bcc11b19712f8f6e196d84c541f936419ea2cda17e9c7c25bd39dc9294f4c18c5a4ddb83a1815c7310f0d014e709094b3b261ea1603e7c88308bde90faf73e815b0e318922b1115409e83529bb01477a8f5a20c712f990ee07262699211f62e11b82397db509dc3d7369c57ae9b4a3038859de0e3c3bda28141ec69e42dfe96e212952c6208333648d1bdbeecc43ee5f138ba0f92b8a24c64b6bb6e1e503c30ccd5224c2123fb52c62bac63eff7c0a28d727d4b462473a5e3f163de22d0b1c76e11fa06a96018261b190ff809a4e243919cfaa161e19589b0cd422fa341d7836b54b330171bc4f76f97bb680c4d4d0ebe786904275d307bf2de664f79f3ec418d4d3af819cd8c53eb4f5ab875e43aea341cd50d799648e92ee360216ab5ab0aae78b5dba60c085d36241e3a6025c2dbfbdca3d83634a19794bc042a045587f6d58ee848370d7a64ebbea61606314286f90c23965eea0fcc9a38c3876990328378039f33c5557600902db2ad4e79b47d72eae1217286cdf1722e234c94fff2200b395bf5916091d626db2dbcfa35f007482c7c11fc16203584b31bfa3b3fa9e0d7f77cf3a87f65350efbd0730e190635c45758b73b19371ff27047aeb53af34971ff2d8c5f85a32cf094990d992f4a168986f5f7de3ce4d2d37bda1625e249b74e09819035b051aacbd6ba72fe4f6761bb05dcdb2ec942bdf9c66e009fb823d2e1f2814829b93129a98b7eeef927cc3885f10e6186d638875dd57eed86c8ce538f42d05d8cbae5e6d261a14393b54cf5a1fc9e8cbae68c76478bbed3a783b8ab5ae6cf126b187f0e2f3ac40f454cbcb685ab9e1747a4b2fbead8c194f43d757d530bbebaa857e0f062728417a6fcf44c6ea4deb61d8c18d2d32df7dcfd9b9179214fa31b3a884eff01802f72bc2494a5d26d2371f8782815dee4c53d6c6e1d05b72b440e3d0e2b61d40806b6aa50b652d57904ee22428e45a771656284044717eee7ee3308d9dd0e558ec8f649ff6b2cce0ee010501d27256ddcfe7d3a97c52d291eb358ff11732da39139c6da63c83aef09191349d8fcb5608644d9c23a7f3336de51fdfe2a1c08e9a5295ef7605ab1445e3dc86d9d5f141b0c69a0bfaaee3a4980f7b7c19efc53a06dce8891690b60ef89e4313e214495b3149045856b39b74a552cb5a77edefb0e03f4cb21f5927723c4ebf6709c9371ec95893e03318e4904bfa4b8e4d4f79e4a449037792e27aa9a28183751f1400fd3c293efcc5106a3c4247f84c226ea4ef6f2685701bf768d56c528d94fdb20e2bc05aa34c8441b6934bbb55b7f73dd13d385facc6faef51611dbc1a3f94cdac59998906f47ddd42f5574adc94399431e73591eb4dc3982b902cf0961b9d6ca4f3d79db5cf53c1f776629037170e1f34d019b99f9b22b9e0d5aa530af6e2047f8e0bf8b75068444a0316cfdc292ae0d0ab131f953f2c970448b8e958d1736490e793153de99eba9ccb171eb9d4d10c94fa9b51a02cf0ac177c03f77d5f4a571cfce7a83f36bda205a6a701a1ae28fcc0f6c6e868f94ecccf4bc26305b7fea3cd7c17c03948344c77369a50c15b0a1c53cfd6b848365cf6a133b12202a8e1c5b5573c93116004882b7ed6a86a5f237d81370740626a51947a79f63b0396b4e9c32dab5c60fdbba6ad17426d894f2cfe94f1d8015ef8184fba015d3d2fdff316ec8eb951aee09e42b4821d09669fada3c3d371eaf366b3c2943d3342bca555c6b164c6a351c4f6eb3a309a5eb44e908d5cbcf6deb98818ae2f2e48a9afce998f7d131c6d90568d03056389eb36dbe99811c01e77636c5bdd6191a355a200421f3b47b16937e5839e15f2c79c29e66f4459e9d41279dde041877da91813bba7436372ca832559a9537ea96739777e768d2146008415e5634140f63838463f3de452d96b04749ca142002d20e242f859bf3257cebdbfbf5def60bd2a76d79b20fb5e148670c442e5309b39332cae2c98a70fcc24251c37f0ba87140d19cc4c736cd8b2701b98b92ded091fdcc1858b8494aaa35cf80e7046d318d955f1c48308541d6e5a7be18210fceff60b98bb7d2f7cfb90d7bcd931d318ec5713a08e75b3ae90fffca0d7c8872e0ee6753b9eef040aa6209b4c137dbc6fb0969327e3a1f0aeb91d17aa1b3dd9df317ae99e51970c7acca572c9349b35ee64231f942adb9985e1bb49157bd1399ec2c8ec7fe9eb94740670e9acb70b7daf2e32e36db7b7431448218799e1cdafe7b7ea1de02f21daec237d3c5a2e58038a29190c62305972f61b3d4ec7d47e39bd4467b6045171200e9f65e900339123a59ab91689c3b65cfaa6c56d0ca74e69faaa77cbe44bb8a7c5f5f96636adc4ef0cbcaf30b08be873a5a3e774635bd9e9f6612e25bec7e54934639f9ae914e785ed38db82d279842f4200c273964042ccbe19b32a274cce9f6c23e426a2b24e88b23091180e41ad32d4c43833e92cddc9fe87c30f7dffa1f334e5a8406f1b395cf197f51178d243d8d728517cfc49cf14598702f41c6710a09590812e7692338d83d08ea8097e54bdf8f9760711a9c2edfa70812c7633c87f5d5963964c7c2fa3cdcc060b99154fa255e8cd143b61bde6b7efc881a7ac5844afd13ef031120a7bdf060083bdbec8b1580f4feaccb0ab6b08eda304433e29e194b629a4a224304bab4ee7cd6804a3805b5650df10f5c72f399862553060330aa6e48ae7d6ea879fe168538fefaff30c1b48b08c9b8047185db623e8a82ef275a4fbb47b8a58cf1b2afc99667bedf5d99c0dde940f75b639861a59cdc5cad3435199df7033459e222d7b442a01c27dc9fd70ba54eae5978f23fb63cdc62aea5442a0e85d50211d98511294dcdbca631ecbf755c3e9183916660174c6a70456d8737a75598b7c80a22d32ecf4c8af6f64be03eb0d1008b3207d79dc2763869dc1a989c132d0538cdbda418431aafbe777105d56047e14f34da2b441319a78295a5876841937a92e1da74e72e07549acf6fdbcf8d90b7eebd9ad49ffaed554bb337dfd72091f67e699df2c0d472f1ed7afd3400f3f20835ddf1e643b57b"}, &(0x7f0000001280)=0x1024) 20:06:38 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) 20:06:38 executing program 3: r0 = socket(0xb, 0x807, 0x10000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{0x2, 0x5, 0x1, 0x4}, 0x7, 0x0, 0x0, 0x0, "9001a6b1d0b6f66f"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000005c0)) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x4a400295f) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000140)={0x11, @multicast1, 0x4e21, 0x3, 'rr\x00', 0x8, 0x3, 0xb}, 0x2c) quotactl(0x9, &(0x7f0000000640)='./file1\x00', r2, &(0x7f0000000680)="c7225fd78ab4cf20e5b689ba1478b1eb97a6ad512a7b134e69a1e66753ed4cb620422ddfb1f99240194df8459245593fd65c0c0d5b754f2452ae2dec32") renameat2(r5, &(0x7f0000000340)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) ioctl$VT_ACTIVATE(r4, 0x5606, 0x1f) r7 = getpgid(0x0) r8 = syz_open_procfs(r7, &(0x7f0000000600)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x58001, 0x0) signalfd(r9, &(0x7f0000000080)={0x3ff}, 0x8) readv(r8, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000006c0)) [ 418.272874] attempt to access beyond end of device [ 418.277995] loop6: rw=12288, want=8200, limit=20 [ 418.283775] 9pnet: p9_fd_create_unix (22663): problem connecting socket: ./file0: -111 20:06:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f8571") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 418.316271] attempt to access beyond end of device [ 418.321370] loop6: rw=12288, want=12296, limit=20 [ 418.347067] attempt to access beyond end of device [ 418.352170] loop6: rw=12288, want=8200, limit=20 20:06:38 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x2, {0x7fffffff, 0x40400000000, "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", 0xf9, 0x0, 0x4e25169b, 0x9, 0x0, 0x9, 0xd0ab}, r1}}, 0x128) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000003c0)={0x9, 0x91c6, 0x0, 0x800, 0x9, [{0x2, 0x9fc4, 0x7f, 0x0, 0x0, 0xc08}, {0x0, 0x8f, 0x200}, {0xfffffffffffffff8, 0x4, 0x100, 0x0, 0x0, 0x1000}, {0x5a1, 0x7, 0x7ff, 0x0, 0x0, 0x1908}, {0xabc, 0x100000000, 0x7f, 0x0, 0x0, 0x800}, {0xe3ad, 0x1000000040, 0x5, 0x0, 0x0, 0x800}, {0xfffffffffffffffa, 0x4, 0x3, 0x0, 0x0, 0x1502}, {0x5, 0x5, 0x4, 0x0, 0x0, 0x2}, {0x8000001ff, 0xfff, 0x2, 0x0, 0x0, 0x100}]}) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 418.371304] attempt to access beyond end of device [ 418.376501] loop6: rw=12288, want=12296, limit=20 20:06:38 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00)\x00', @ifru_names="04707000"}) 20:06:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 418.447900] attempt to access beyond end of device [ 418.450829] 9pnet: p9_fd_create_unix (22689): problem connecting socket: ./file0: -111 [ 418.452956] loop6: rw=12288, want=8200, limit=20 [ 418.501877] attempt to access beyond end of device [ 418.506948] loop6: rw=12288, want=12296, limit=20 20:06:39 executing program 0: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffffe) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 418.545799] attempt to access beyond end of device [ 418.550885] loop6: rw=12288, want=8200, limit=20 20:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f8571") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x24040, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000380)=""/198) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c3030303030303030303030303030303030343001000000000000005f69643d44f6e99916f63e323835f15f7757f0ec37c0ab010b8e9c1b2db643583c3710e0fafbef9b0c7afa80960b27735204faf833cd92a58024cc191f340104adc14137461f76467ee1f2220327908ddfac8fe71d78587fb4d0dd7ab1f777baf133b1a9317f8d6f9e80b18fbbad28dad3a5431a13629f830c5962e624c373168500000000000000000000", @ANYRESDEC=r2, @ANYBLOB=',group_id=', @ANYRESDEC=r3, @ANYBLOB=',blksize=0x0000000000000200,blksize=0x0000000000000200,allow_other,allow_other,blksize=0x0000000000000200,blksize=0x0000000000000000,\x00']) r4 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") syz_mount_image$bfs(&(0x7f0000000480)='bfs\x00', &(0x7f00000005c0)='./file0\x00', 0x5, 0x9, &(0x7f0000000b00)=[{&(0x7f0000000600)="c1e84c4a48a8ef21d00ce13fa82f805f65204a85f0667a132e82dd5a80b50d9e6757242dfc7e2db1bc8f3292b8c97b6678a93c02cf46d46134020990cf1ce543e340ac055d01e199cd44a8e0e08286fe2903acacab2b7a5c25ddbb86e7dc28adc75a5a43e3cd1839", 0x68, 0x1f7a00}, {&(0x7f0000000680)="862687fed4588ec3601faf848713c6325530883c02679d03", 0x18, 0x5d42}, {&(0x7f00000006c0)="17c82fb5de2ca31167324247cb5782de2053cf31298bcc492ceeee751d2730c3211f6d40992f0252113eb2ed68d72166e9cd03b76879dd43609bc9936fd14eccb018d0fe45047fc43da3539c44557cc390b1e221d599d1b3ad251dff020bb542683da41bd8fcae0683cc672ee3c83053c17d2d45c60ca31b64264b8fe0794df0fa78a51740fd4f17e0f0db6421b9c2fc9d33f2f0f3540a1247a6edd7587df8bb921268f45ff105af94acbb2b02d18192d698a2f44566e3b1d0b6c5377cbe5356b344122f73c48452be2f28a6623cacd8b414553d84b8e2ffe495fe", 0xdb, 0x2}, {&(0x7f00000007c0)="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", 0xfb, 0x9}, {&(0x7f00000008c0)="43d71ade39970d82fc56095efab9fbade380ac978ad42a6ee49d7e86e313dfc583233ec1e7941583787bbdd339abe8b4ed265899a80123ef35b6a0ff62460cee5de9181c77025eff48db94d04169f45716900eb79173bb24b6e535e77683b1e0044ff1af0bbb2b85b5af4e2bbef42dea68a44a38fc8829937970464e21ab1bf5d2ee8fa0e69e813face08648b35824ec43bc248f9f82b6b30189a0714712c625f279e070f4eb403345d6a623dec23f7b2a4a8310db461769f7b8eb2d6210119be2def5808bea97", 0xc7, 0x3}, {&(0x7f00000009c0)="cc278535", 0x4, 0x2}, {&(0x7f0000000a00)="8cb9466399a0b58ce29eb52b027ccd5538051b8a2f938a15de571feac705b56633c85827d1b70274eaed551b", 0x2c, 0xfffffffffffffff7}, {&(0x7f0000000a40)="02b3e3cb4645b8362c25f1803dfa5955d4011a8ccb63a14371b1461f81e59ae76eff19b9ab82b9c9892172b84adabaf4391029edf0fbe461ebddec67314b9598f34dd7165a612be1a1fa1c5b975ce479d8cf9e3d91e5d11b63196699dfaf663af902f3dad2d215346769df4b506696838af932d9140f9a226dc9d5ec95dd88cc2760e0b2e32652687eb5d5381f017a393e2324d14fd4c8824225ac0d0153d062d89c2353be87534164ed18f18d284f1c651214c7c346c2", 0xb7, 0xffff}, {&(0x7f00000017c0)="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", 0x1000, 0x5}], 0x200000, 0x0) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000c00)=0x200, 0x2) readv(r4, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 418.592394] attempt to access beyond end of device [ 418.597478] loop6: rw=12288, want=12296, limit=20 20:06:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000600", @ifru_names="04707000"}) [ 418.646763] 9pnet: p9_fd_create_unix (22711): problem connecting socket: ./file0: -111 [ 418.687401] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=27cc0000) [ 418.740150] BFS-fs: bfs_fill_super(): No BFS filesystem on loop3 (magic=27cc0000) 20:06:39 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) acct(&(0x7f0000000000)='./file0\x00') 20:06:39 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f857140") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:39 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) getpid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000001780)="6e65742f6d6366696c74d000000000000000fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:39 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x0) 20:06:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000600", @ifru_names="04707000"}) [ 419.078203] 9pnet: p9_fd_create_unix (22734): problem connecting socket: ./file0: -111 [ 419.092286] attempt to access beyond end of device [ 419.097321] loop6: rw=12288, want=8200, limit=20 20:06:39 executing program 0: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x401, 0x2, 0x0, 0xcd28, 0x7}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:39 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:39 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) dup2(r0, r2) [ 419.152922] attempt to access beyond end of device [ 419.158049] loop6: rw=12288, want=12296, limit=20 20:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f857140") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:39 executing program 3: r0 = socket$inet6(0xa, 0x800, 0x8) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) ustat(0xe1, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 419.213316] attempt to access beyond end of device [ 419.218387] loop6: rw=12288, want=8200, limit=20 20:06:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000080", @ifru_names="04707000"}) [ 419.280350] attempt to access beyond end of device [ 419.285388] loop6: rw=12288, want=12296, limit=20 [ 419.310082] 9pnet: p9_fd_create_unix (22768): problem connecting socket: ./file0: -111 20:06:39 executing program 7: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x1, 0x8, 0x9, 0x8000, 0x0, 0x2, 0x11, 0x1, 0x7, 0x8, 0x7ff, 0x80000000, 0x6, 0x7, 0x3, 0x1f, 0x8, 0x4b99, 0x6, 0x7f, 0x7f, 0x1, 0x8, 0x4, 0x7, 0x0, 0x1, 0x6fda140a, 0x1, 0x0, 0x5, 0x6, 0xffffffffffffff41, 0x80, 0x401, 0x9, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x18, 0x3, 0x2, 0xd502, 0xa5e, 0x3f}, r0, 0xc, 0xffffffffffffffff, 0x8) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x1c, 0x80800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000280)={r3, 0x1}, &(0x7f00000002c0)=0x8) 20:06:39 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8881, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000280)=""/207) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)="00000000001400000000000000", 0x2, 0x0) 20:06:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f857140") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x1000800, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) [ 419.360708] attempt to access beyond end of device [ 419.365772] loop6: rw=12288, want=8200, limit=20 [ 419.396325] attempt to access beyond end of device [ 419.401404] loop6: rw=12288, want=12296, limit=20 [ 419.444956] attempt to access beyond end of device [ 419.450044] loop6: rw=12288, want=8200, limit=20 20:06:40 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000fffffdfd00", @ifru_names="04707000"}) 20:06:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") signalfd4(r0, &(0x7f0000000080)={0x9}, 0x8, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xfff, 0x80) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 419.501273] attempt to access beyond end of device [ 419.506368] loop6: rw=12288, want=12296, limit=20 [ 419.508319] 9pnet: p9_fd_create_unix (22791): problem connecting socket: ./file0: -111 20:06:40 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:40 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:40 executing program 0: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 419.685932] f2fs_msg: 110 callbacks suppressed [ 419.685946] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 419.697743] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 419.742926] attempt to access beyond end of device [ 419.748044] loop6: rw=12288, want=8200, limit=20 [ 419.769653] F2FS-fs (loop6): invalid crc value [ 419.774774] attempt to access beyond end of device [ 419.779878] loop6: rw=12288, want=12296, limit=20 [ 419.788617] F2FS-fs (loop6): invalid crc value [ 419.793275] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 419.799704] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 419.806783] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 419.814642] attempt to access beyond end of device [ 419.819657] loop6: rw=12288, want=8200, limit=20 [ 419.824471] F2FS-fs (loop6): invalid crc value [ 419.829184] attempt to access beyond end of device [ 419.834164] loop6: rw=12288, want=12296, limit=20 [ 419.839070] F2FS-fs (loop6): invalid crc value [ 419.843699] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 419.865147] attempt to access beyond end of device [ 419.870239] loop6: rw=12288, want=8200, limit=20 [ 419.875721] attempt to access beyond end of device [ 419.880802] loop6: rw=12288, want=12296, limit=20 [ 419.886609] attempt to access beyond end of device 20:06:40 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000fffffffe00", @ifru_names="04707000"}) 20:06:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x9be6, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000140)={0x0, 0xfffffffeffffffff, 0x3, &(0x7f0000000100)=0xa443}) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}, {@cache_none='cache=none'}]}}) 20:06:40 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 419.891666] loop6: rw=12288, want=8200, limit=20 [ 419.896567] attempt to access beyond end of device [ 419.901589] loop6: rw=12288, want=12296, limit=20 [ 419.977929] 9pnet: p9_fd_create_unix (22830): problem connecting socket: ./file0: -111 20:06:40 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:06:40 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0xc0000, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:40 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fsl', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:40 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x84) socket$inet_tcp(0x2, 0x1, 0x0) 20:06:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e00000004000000200400008001000000000000800100008001000080010000880300008803000088030000880300008803000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005801800100000000000000000000000000000000000000000000000098007068797364657600000000000000000000000000000000000000000000000000000000000000000000000074756e6c30000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a6b616c6c65723000000000000000000000000000000000000000ff00000000000000000000000000000010000000000000000000000000000000280074746c00000000000000000000000000000000000000000000000000000003fb000000000000280052454a454354000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e800480100000000000000000000000000000000000000000000000050006f736600000000000000000000000000000000000100000000000000000073797a3000000000000000000000000000000000000000000000000000000000040000000100000001000000020000006000484d41524b0000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000ff000000000000004e214e204e204e20200000000200000006000000efff00000400000000000000e0000001ac1414bbffffffffffffff0069705f76746930000000000000000000626f6e64300000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f00014100000000000000000000000000009800c000000000000000000000000000000000000000000000000000280052454a4543540000000000000000000000000000000000000000000000000f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x480) clock_gettime(0x0, &(0x7f0000003c80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/117, 0x75}, {&(0x7f0000000200)=""/227, 0xe3}], 0x2, &(0x7f0000000300)=""/68, 0x44, 0xc0cc}, 0x5ce1}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)}, {&(0x7f0000000a40)=""/173, 0xad}], 0x3, &(0x7f0000000b40)=""/226, 0xe2, 0x800}, 0x5}, {{&(0x7f0000000c40)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000cc0)=""/145, 0x91}, {&(0x7f0000000d80)=""/52, 0x34}, {&(0x7f0000000dc0)=""/42, 0x2a}, {&(0x7f0000000e00)=""/252, 0xfc}, {&(0x7f0000000f00)=""/88, 0x58}], 0x5, &(0x7f0000001000)=""/237, 0xed, 0x1}, 0x1000}, {{&(0x7f0000001100)=@nfc_llcp, 0x80, &(0x7f0000001500)=[{&(0x7f0000001180)=""/124, 0x7c}, {&(0x7f0000001200)=""/85, 0x55}, {&(0x7f0000001280)=""/206, 0xce}, {&(0x7f0000001380)=""/33, 0x21}, {&(0x7f00000013c0)=""/90, 0x5a}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f0000001440)=""/184, 0xb8}], 0x7, 0x0, 0x0, 0x10000}, 0x10000}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f0000001580)=""/77, 0x4d}, {&(0x7f0000001600)=""/178, 0xb2}, {&(0x7f00000016c0)=""/169, 0xa9}], 0x4, &(0x7f0000003800)=""/120, 0x78, 0x2f4}}, {{&(0x7f0000003880)=@rc, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003900)=""/78, 0x4e}, {&(0x7f0000003980)=""/8, 0x8}], 0x2, &(0x7f0000003a00)=""/225, 0xe1, 0x5}, 0x7}], 0x6, 0x100, &(0x7f0000003cc0)={r2, r3+30000000}) 20:06:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}, {@version_u='version=9p2000.u'}]}}) 20:06:40 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00`\x00', @ifru_names="04707000"}) 20:06:40 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000880)='/dev/dsp#\x00', 0x6, 0x1fffff) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f00000001c0)={0x8, 0x81, 0x7, 0x1, 0x1}) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000500), &(0x7f0000000540)=0x4) ioctl$KDSETMODE(r0, 0x4b3a, 0x101) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000640)={@remote, 0xfffffffffffffffb, 0x2, 0x2, 0x0, 0x1, 0xfffffffffffffff9, 0x1000}, 0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000006c0)=@assoc_id=0x0, &(0x7f0000000700)=0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000740)={r2, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x2}}, 0xffff, 0x7, 0x20, 0x74c, 0x41}, 0x98) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000000200)={0x7, 0x40, 0x6, 0x1, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000680)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={r4, @in={{0x2, 0x4e22, @rand_addr=0xd3}}, 0x25, 0x9, 0x40, 0x73bf}, 0x98) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f00000004c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), r5, 0x1}}, 0x18) getresuid(&(0x7f0000000900)=0x0, &(0x7f0000000940), &(0x7f0000000980)) r7 = getgid() mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f00000008c0)='fuseblk\x00', 0x20000, &(0x7f00000009c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode'}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xee}}]}}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000800)={0x7, 0x8, 0xfa00, {r5, 0x5}}, 0x10) 20:06:40 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x24002, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0x8, 0x3}) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r1, r1, 0xf, 0x1}, 0x10) openat$cgroup_procs(r1, &(0x7f0000000100)="63676a726561657304", 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 20:06:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', r1}) r2 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") creat(&(0x7f0000000200)='./file0\x00', 0x80) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 420.169050] 9pnet: p9_fd_create_unix (22859): problem connecting socket: ./file0: -111 20:06:40 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}, {@dfltgid={'dfltgid'}}]}}) 20:06:40 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000001c0)={r2, 0x7}, &(0x7f0000000200)=0x8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r2, 0x1e, 0x30}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 20:06:40 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x7, 0x4) readv(r1, &(0x7f0000000580), 0x0) sync_file_range(r0, 0xfffffffffffeffff, 0x400, 0x1) 20:06:40 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000200", @ifru_names="04707000"}) [ 420.352349] attempt to access beyond end of device [ 420.357458] loop6: rw=12288, want=8200, limit=20 20:06:40 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 420.399593] 9pnet: p9_fd_create_unix (22888): problem connecting socket: ./file0: -111 [ 420.437754] attempt to access beyond end of device [ 420.442902] loop6: rw=12288, want=12296, limit=20 [ 420.466126] attempt to access beyond end of device [ 420.471203] loop6: rw=12288, want=8200, limit=20 [ 420.477107] attempt to access beyond end of device [ 420.482176] loop6: rw=12288, want=12296, limit=20 [ 420.519663] attempt to access beyond end of device [ 420.524707] loop6: rw=12288, want=8200, limit=20 [ 420.536512] attempt to access beyond end of device [ 420.541508] loop6: rw=12288, want=12296, limit=20 [ 420.550244] attempt to access beyond end of device [ 420.555256] loop6: rw=12288, want=8200, limit=20 [ 420.560756] attempt to access beyond end of device [ 420.565789] loop6: rw=12288, want=12296, limit=20 20:06:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8000, 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:43 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x8000000000005, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}, {@cache_loose='cache=loose'}]}}) 20:06:43 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:06:43 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10000, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:43 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffff", @ifru_names="04707000"}) 20:06:43 executing program 4: r0 = socket(0xb, 0x807, 0x10000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{0x2, 0x5, 0x1, 0x4}, 0x7, 0x0, 0x0, 0x0, "9001a6b1d0b6f66f"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000005c0)) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x4a400295f) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000140)={0x11, @multicast1, 0x4e21, 0x3, 'rr\x00', 0x8, 0x3, 0xb}, 0x2c) quotactl(0x9, &(0x7f0000000640)='./file1\x00', r2, &(0x7f0000000680)="c7225fd78ab4cf20e5b689ba1478b1eb97a6ad512a7b134e69a1e66753ed4cb620422ddfb1f99240194df8459245593fd65c0c0d5b754f2452ae2dec32") renameat2(r5, &(0x7f0000000340)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) ioctl$VT_ACTIVATE(r4, 0x5606, 0x1f) r7 = getpgid(0x0) r8 = syz_open_procfs(r7, &(0x7f0000000600)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x58001, 0x0) signalfd(r9, &(0x7f0000000080)={0x3ff}, 0x8) readv(r8, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000006c0)) [ 423.160831] attempt to access beyond end of device [ 423.165953] loop6: rw=12288, want=8200, limit=20 [ 423.171641] 9pnet: p9_fd_create_unix (22916): problem connecting socket: ./file0: -111 20:06:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}, {@version_u='version=9p2000.u'}]}}) 20:06:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="2d0000000400d150cf57538d7deeaa2d4c9652fd000000000000001a65bd6600000000000000079935000000000005000000000000000000000000"], 0x2d) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x5, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) [ 423.217495] attempt to access beyond end of device [ 423.222569] loop6: rw=12288, want=12296, limit=20 20:06:43 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={@mcast2, 0x21, r3}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)="6367726f75ea103a0100297eb0703200", 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000380)='/dev/input/mice\x00', 0x0, 0x88902) read$FUSE(r0, &(0x7f0000000640), 0x1000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000280)=""/248) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setxattr(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)=@known='security.selinux\x00', &(0x7f00000001c0)="6367726f75ea103a0100297eb0703200", 0x10, 0x1) 20:06:43 executing program 4: r0 = socket(0xb, 0x807, 0x10000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{0x2, 0x5, 0x1, 0x4}, 0x7, 0x0, 0x0, 0x0, "9001a6b1d0b6f66f"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x20000000) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000005c0)) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x4a400295f) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r4, 0x0, 0x48f, &(0x7f0000000140)={0x11, @multicast1, 0x4e21, 0x3, 'rr\x00', 0x8, 0x3, 0xb}, 0x2c) quotactl(0x9, &(0x7f0000000640)='./file1\x00', r2, &(0x7f0000000680)="c7225fd78ab4cf20e5b689ba1478b1eb97a6ad512a7b134e69a1e66753ed4cb620422ddfb1f99240194df8459245593fd65c0c0d5b754f2452ae2dec32") renameat2(r5, &(0x7f0000000340)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) ioctl$VT_ACTIVATE(r4, 0x5606, 0x1f) r7 = getpgid(0x0) r8 = syz_open_procfs(r7, &(0x7f0000000600)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x58001, 0x0) signalfd(r9, &(0x7f0000000080)={0x3ff}, 0x8) readv(r8, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000006c0)) [ 423.274680] attempt to access beyond end of device [ 423.279766] loop6: rw=12288, want=8200, limit=20 [ 423.331556] attempt to access beyond end of device [ 423.334618] 9pnet: p9_fd_create_unix (22942): problem connecting socket: ./file0: -111 [ 423.336623] loop6: rw=12288, want=12296, limit=20 20:06:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize', 0x3d, 0x1a3}}]}}) 20:06:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = dup2(r0, r0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000100)=@req3={0x4, 0x6, 0x8, 0x98ea, 0x5, 0xfffffffffffffffb, 0xfffffffffffffffc}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x8001, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r2, 0x4008af13, &(0x7f0000000080)={0x1, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000140)={{0x6, 0x4}, {0x4, 0x5}, 0x5, 0x4, 0xffffffff00000000}) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000001c0)={@ipv4={[], [], @rand_addr}, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000240)={@dev={0xac, 0x14, 0x14, 0x17}, @loopback, r4}, 0xc) readv(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:44 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000600", @ifru_names="04707000"}) 20:06:44 executing program 7: r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:44 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='q2\x00\x00\x00\x00\x00', 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='cgroup.procs\x00', 0xffffffffffffff9c}, 0x10) sendmsg$nfc_llcp(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x80, 0x61, "19c6756ebeb2ee81213276ba57f1114b57479169e0f7ba8756dad310e830f0ef32cb31d99e9678d75a5020f5bb1039e537a60e62f6a1df39c4bb93b293a22d", 0x39}, 0x60, &(0x7f0000000340)=[{&(0x7f00000002c0)="a69812474fff1efdd79773b626ba1dce6a00befe7f6ca6ca2b4031f4a64e948173c10f41c839130b0dcf6420751a388113b51691f1724bcbb03a6e076d5f3eb2e47fcad637", 0x45}], 0x1, &(0x7f0000000380)={0xc0, 0x118, 0x0, "b27b851a4c96c69f454260472f4e648306677db3b9ad342148bab7cb1a9774a7604af2821096f202eeefd4e50605fcbe640a767110914a7bb41294f109fc94f4ce585b241c7783dca8f9c73292ef2ee4aa899b8997990dca63e40c88ba284966681fa6fa5853b9c77e87e8388f60a99c7fd8154eb47fc742333d17b1ade74151bd807f6e9ec55279a1370b1f9efa0555aec916cee7386b7bfe949d69bb4895e8cbb3ba32c925e10b7d9ff82760"}, 0xc0}, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ppp\x00', 0x8000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x8a) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) 20:06:44 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 423.534122] 9pnet: p9_fd_create_unix (22965): problem connecting socket: ./file0: -111 [ 423.642853] attempt to access beyond end of device [ 423.647942] loop6: rw=12288, want=8200, limit=20 [ 423.692699] attempt to access beyond end of device [ 423.697810] loop6: rw=12288, want=12296, limit=20 [ 423.726239] attempt to access beyond end of device [ 423.731391] loop6: rw=12288, want=8200, limit=20 [ 423.736799] attempt to access beyond end of device [ 423.741995] loop6: rw=12288, want=12296, limit=20 [ 423.759697] attempt to access beyond end of device [ 423.764754] loop6: rw=12288, want=8200, limit=20 [ 423.769851] attempt to access beyond end of device [ 423.774927] loop6: rw=12288, want=12296, limit=20 [ 423.780438] attempt to access beyond end of device [ 423.785482] loop6: rw=12288, want=8200, limit=20 [ 423.790494] attempt to access beyond end of device [ 423.795551] loop6: rw=12288, want=12296, limit=20 20:06:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}]}}) 20:06:46 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r2, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18}, 0x18) close(r2) r3 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x6, 0x2, 0x1, 0x37, '\x00', 0x6396951f}, 0x5, 0x3, 0x1, r3, 0x6, 0x7, 'syz1\x00', &(0x7f0000000100)=['selfproc#mime_type\x00', '/lo)system\x00', ']lo\x00', 'cgroup2\x00', 'cgroup2\x00', 'cgroup.procs\x00'], 0x3f, [], [0x8, 0x1, 0x5, 0x90e]}) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:46 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:06:46 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x41, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x200005, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:46 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x9, 0x2000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000000)=0x3, 0x4) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/4096, 0x1000) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") eventfd(0xd1a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) 20:06:46 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00`\x00', @ifru_names="04707000"}) 20:06:46 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:46 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000080)=""/11, 0xb) [ 426.300342] 9pnet: p9_fd_create_unix (23005): problem connecting socket: ./file0: -111 20:06:46 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000001780)="6e65742f6d6366696c746572001e0bdfa455fcde789aeacf59467a821f30d71b70ed2aae") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000040)={{0x2, 0x4e23, @rand_addr=0x7}, {0x7, @broadcast}, 0x54, {0x2, 0x4e22, @broadcast}, 'ip6gretap0\x00'}) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0xaf, @broadcast, 0x4e21, 0x3, 'none\x00', 0x20, 0x92e2, 0x52}, {@multicast1, 0x4e20, 0x0, 0xffffffffffffff7f, 0x8, 0xb6a}}, 0x44) 20:06:46 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r2, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18}, 0x18) close(r2) r3 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x6, 0x2, 0x1, 0x37, '\x00', 0x6396951f}, 0x5, 0x3, 0x1, r3, 0x6, 0x7, 'syz1\x00', &(0x7f0000000100)=['selfproc#mime_type\x00', '/lo)system\x00', ']lo\x00', 'cgroup2\x00', 'cgroup2\x00', 'cgroup.procs\x00'], 0x3f, [], [0x8, 0x1, 0x5, 0x90e]}) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}]}}) 20:06:46 executing program 0: mkdir(&(0x7f0000000600)='./file0\x00', 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffd, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:46 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000c3ffffff00", @ifru_names="04707000"}) 20:06:47 executing program 7: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x20) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x401, 0x20000) r2 = getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000003c0)=0x0) setpgid(r2, r3) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5547}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x100003, 0x84) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) getsockopt$inet6_tcp_buf(r0, 0x6, 0x3b, &(0x7f0000000180)=""/124, &(0x7f0000000200)=0x7c) 20:06:47 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 426.501267] 9pnet: p9_fd_create_unix (23036): problem connecting socket: ./file0: -111 [ 426.537518] IPVS: set_ctl: invalid protocol: 175 255.255.255.255:20001 20:06:47 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="4a0000007ebf9134958bde5164cbe9e1d70b85f96a0828e9718e814799cd6948e735884c6202722a29d31a29ace300dcdc69bacbb20044e7a93c87fde1fd36b94ce04ea33236cc48cd61f75311a42adab05262e07c68cb83694a174ff90f86007008fc44b5978b67aa0ae461f34cded154433c20dada1f1163578846050be4f19d16116b97f948a5e4ef22f32eedff66d6875ec90af410"], &(0x7f0000000080)=0x52) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x200, 0x10}, &(0x7f0000000280)=0xc) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:47 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x48) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x201, 0x0) ioctl$int_in(r2, 0xc0000840045010, &(0x7f0000000000)) write$FUSE_GETXATTR(r2, &(0x7f0000000080)={0x18}, 0x18) close(r2) r3 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000280)={{0x6, 0x2, 0x1, 0x37, '\x00', 0x6396951f}, 0x5, 0x3, 0x1, r3, 0x6, 0x7, 'syz1\x00', &(0x7f0000000100)=['selfproc#mime_type\x00', '/lo)system\x00', ']lo\x00', 'cgroup2\x00', 'cgroup2\x00', 'cgroup.procs\x00'], 0x3f, [], [0x8, 0x1, 0x5, 0x90e]}) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:49 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:06:49 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1, 0x200) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000000080)=""/22) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0x0, 0x6, 0x9}) 20:06:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}]}}) 20:06:49 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:49 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\t\x00', @ifru_names="04707000"}) 20:06:49 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x400, 0x4, 0x8e8, 0x6, 0x6, 0xfffffffeffffffff, 0x0, {0x0, @in6={{0xa, 0x4e21, 0xffffffffffffffc1, @local, 0x9}}, 0x0, 0xffffffff00000000, 0x657d, 0x5, 0x6f}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x10000, 0x100}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r2, 0x10001, 0xfffffffffffffffa}, 0xfffffc81) write$P9_RCLUNK(r0, &(0x7f00000000c0)={0x7, 0x79, 0x1}, 0x7) getgid() mount(&(0x7f0000000100)='./file1\x00', &(0x7f0000000500)='./file0/file0\x00', &(0x7f0000000640)="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", 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:49 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fsG', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x10, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x72, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 429.417555] 9pnet: p9_fd_create_unix (23082): problem connecting socket: ./file0: -111 20:06:50 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:50 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80080, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @multicast1}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:50 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:50 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs?', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@cache_mmap='cache=mmap'}, {@msize={'msize'}}]}}) 20:06:50 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000feffffff00", @ifru_names="04707000"}) 20:06:50 executing program 4 (fault-call:9 fault-nth:0): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) [ 429.642827] 9pnet: p9_fd_create_unix (23106): problem connecting socket: ./file0: -111 20:06:52 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:06:52 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:52 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x400}}, 0x18) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xb656}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @rand_addr=0xcd}}}, &(0x7f0000000200)=0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:52 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@mmap='mmap'}, {@msize={'msize'}}]}}) 20:06:52 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673d4", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:52 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:06:52 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000000fffffffe", @ifru_names="04707000"}) 20:06:53 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 432.475113] 9pnet: p9_fd_create_unix (23138): problem connecting socket: ./file0: -111 20:06:53 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x8000, 0x0) mq_timedreceive(r1, &(0x7f0000000080)=""/255, 0xff, 0x1, &(0x7f0000000180)={0x77359400}) 20:06:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@posixacl='posixacl'}, {@msize={'msize'}}]}}) 20:06:53 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 20:06:53 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:53 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00)\x00', @ifru_names="04707000"}) 20:06:53 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) [ 432.709633] 9pnet: p9_fd_create_unix (23174): problem connecting socket: ./file0: -111 20:06:53 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x101000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000080)=""/109) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 432.756425] f2fs_msg: 60 callbacks suppressed [ 432.756447] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 432.768284] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 432.880865] attempt to access beyond end of device [ 432.886150] loop6: rw=12288, want=8200, limit=20 [ 432.910598] F2FS-fs (loop6): invalid crc value [ 432.922579] attempt to access beyond end of device [ 432.927795] loop6: rw=12288, want=12296, limit=20 [ 432.938513] F2FS-fs (loop6): invalid crc value [ 432.943416] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 432.956649] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 432.963861] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 432.971704] attempt to access beyond end of device [ 432.976783] loop6: rw=12288, want=8200, limit=20 [ 432.981711] F2FS-fs (loop6): invalid crc value [ 432.986414] attempt to access beyond end of device [ 432.991467] loop6: rw=12288, want=12296, limit=20 [ 432.996378] F2FS-fs (loop6): invalid crc value [ 433.001046] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 433.019101] attempt to access beyond end of device [ 433.024214] loop6: rw=12288, want=8200, limit=20 [ 433.029663] attempt to access beyond end of device [ 433.034729] loop6: rw=12288, want=12296, limit=20 [ 433.040940] attempt to access beyond end of device [ 433.046036] loop6: rw=12288, want=8200, limit=20 [ 433.050878] attempt to access beyond end of device [ 433.055898] loop6: rw=12288, want=12296, limit=20 20:06:56 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:06:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@afid={'afid', 0x3d, 0x9fa}}, {@msize={'msize'}}]}}) 20:06:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:56 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000400", @ifru_names="04707000"}) 20:06:56 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:56 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:56 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) [ 435.538996] 9pnet: p9_fd_create_unix (23208): problem connecting socket: ./file0: -111 [ 435.566576] attempt to access beyond end of device [ 435.571770] loop6: rw=12288, want=8200, limit=20 20:06:56 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6={{0xa, 0x4e20, 0x1, @mcast2, 0x8}}}, &(0x7f0000000040)=0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) 20:06:56 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 435.612233] attempt to access beyond end of device [ 435.617422] loop6: rw=12288, want=12296, limit=20 20:06:56 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f00000004c0)=""/149, 0x95}], 0x2) 20:06:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 435.659942] attempt to access beyond end of device [ 435.665097] loop6: rw=12288, want=8200, limit=20 20:06:56 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000040)=0x84) [ 435.704373] attempt to access beyond end of device [ 435.709458] loop6: rw=12288, want=12296, limit=20 20:06:56 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000200", @ifru_names="04707000"}) 20:06:56 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 435.752664] 9pnet: p9_fd_create_unix (23238): problem connecting socket: ./file0: -111 [ 435.792651] attempt to access beyond end of device [ 435.797661] loop6: rw=12288, want=8200, limit=20 20:06:56 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 435.859552] attempt to access beyond end of device [ 435.864606] loop6: rw=12288, want=12296, limit=20 [ 435.925261] attempt to access beyond end of device [ 435.930358] loop6: rw=12288, want=8200, limit=20 [ 435.954615] attempt to access beyond end of device [ 435.959708] loop6: rw=12288, want=12296, limit=20 20:06:59 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0xfffffeab) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000016) dup2(r0, r2) 20:06:59 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:06:59 executing program 2 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:06:59 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580), 0x0) 20:06:59 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00@\x00', @ifru_names="04707000"}) 20:06:59 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0xa, 0x84) r1 = shmget(0x0, 0x2000, 0x1008, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/214) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x8440) write$evdev(r2, &(0x7f0000000080)=[{{}, 0x0, 0x7, 0xffffffffffff120b}], 0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:59 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:06:59 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgrcv(r0, &(0x7f0000000000)={0x0, ""/49}, 0x39, 0x0, 0x800) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = gettid() ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x0, 0x0, [0xfffffffffffffffc, 0x1, 0x80000001, 0x4]}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r3, 0x101000000000013) [ 438.651780] FAULT_INJECTION: forcing a failure. [ 438.651780] name failslab, interval 1, probability 0, space 0, times 0 [ 438.663166] CPU: 0 PID: 23270 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 438.670209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 438.679575] Call Trace: [ 438.682170] dump_stack+0x1c9/0x2b4 [ 438.685821] ? dump_stack_print_info.cold.2+0x52/0x52 [ 438.691060] ? perf_trace_lock+0xde/0x920 [ 438.695230] should_fail.cold.4+0xa/0x11 [ 438.699314] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 438.704457] ? lock_downgrade+0x8f0/0x8f0 [ 438.708623] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 438.714172] ? proc_fail_nth_write+0x9e/0x210 [ 438.718688] ? find_held_lock+0x36/0x1c0 [ 438.722794] ? check_same_owner+0x340/0x340 [ 438.727131] ? rcu_note_context_switch+0x730/0x730 [ 438.732083] __should_failslab+0x124/0x180 [ 438.736330] should_failslab+0x9/0x14 [ 438.740146] __kmalloc_track_caller+0x2c4/0x760 [ 438.744832] ? strncpy_from_user+0x510/0x510 [ 438.749253] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 438.754801] ? strndup_user+0x77/0xd0 [ 438.758824] memdup_user+0x2c/0xa0 [ 438.762377] strndup_user+0x77/0xd0 [ 438.766023] ksys_mount+0x3c/0x140 [ 438.769583] __x64_sys_mount+0xbe/0x150 [ 438.773572] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 438.778607] do_syscall_64+0x1b9/0x820 [ 438.782508] ? finish_task_switch+0x1d3/0x870 [ 438.787020] ? syscall_return_slowpath+0x5e0/0x5e0 [ 438.791966] ? syscall_return_slowpath+0x31d/0x5e0 [ 438.796908] ? __switch_to_asm+0x34/0x70 [ 438.800980] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 438.806390] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 438.811255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 438.816470] RIP: 0033:0x457089 [ 438.819675] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 438.838578] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 438.846297] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 438.853584] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 438.860857] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 438.868129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 438.875398] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000000 20:06:59 executing program 2 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:06:59 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80000000, 0x7}) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0xa, 0x4, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000100)=0x9, 0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:06:59 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 438.921161] f2fs_msg: 30 callbacks suppressed [ 438.921175] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 438.932854] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 439.034837] FAULT_INJECTION: forcing a failure. [ 439.034837] name failslab, interval 1, probability 0, space 0, times 0 [ 439.042798] FAULT_INJECTION: forcing a failure. [ 439.042798] name failslab, interval 1, probability 0, space 0, times 0 [ 439.046233] CPU: 1 PID: 23305 Comm: syz-executor3 Not tainted 4.18.0+ #188 [ 439.064405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.073784] Call Trace: [ 439.076380] dump_stack+0x1c9/0x2b4 [ 439.080014] ? dump_stack_print_info.cold.2+0x52/0x52 [ 439.085237] ? perf_trace_lock+0xde/0x920 [ 439.089401] should_fail.cold.4+0xa/0x11 [ 439.093489] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.098602] ? mutex_trylock+0x2b0/0x2b0 [ 439.102670] ? __lock_acquire+0x7fc/0x5020 [ 439.106937] ? perf_trace_lock+0xde/0x920 [ 439.111093] ? graph_lock+0x170/0x170 [ 439.114907] ? find_held_lock+0x36/0x1c0 [ 439.119004] ? __lock_is_held+0xb5/0x140 [ 439.123087] ? check_same_owner+0x340/0x340 [ 439.127416] ? graph_lock+0x170/0x170 [ 439.131252] ? rcu_note_context_switch+0x730/0x730 [ 439.136184] ? check_same_owner+0x340/0x340 [ 439.140516] __should_failslab+0x124/0x180 [ 439.144757] should_failslab+0x9/0x14 [ 439.148562] kmem_cache_alloc_node_trace+0x26f/0x770 [ 439.153682] __kmalloc_node+0x33/0x70 [ 439.157493] kvmalloc_node+0x65/0xf0 [ 439.161216] seq_read+0xa47/0x1540 [ 439.164777] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.170322] ? _copy_from_user+0xdf/0x150 [ 439.174476] ? seq_file_path+0x30/0x30 [ 439.178374] ? security_file_permission+0x1be/0x240 [ 439.183393] ? security_file_permission+0x1c6/0x240 [ 439.188418] ? rw_verify_area+0x118/0x360 [ 439.192578] do_iter_read+0x4a3/0x660 [ 439.196400] vfs_readv+0x175/0x1c0 [ 439.199948] ? __fget_light+0x2f7/0x440 [ 439.203939] ? compat_rw_copy_check_uvector+0x440/0x440 [ 439.209317] ? wait_for_completion+0x8d0/0x8d0 [ 439.213920] ? mutex_lock_nested+0x16/0x20 [ 439.218167] ? mutex_lock_nested+0x16/0x20 [ 439.222407] ? __fdget_pos+0xde/0x200 [ 439.226217] ? __fdget_raw+0x20/0x20 [ 439.229947] ? __sb_end_write+0xac/0xe0 [ 439.233944] do_readv+0x11a/0x310 [ 439.237411] ? vfs_readv+0x1c0/0x1c0 [ 439.241136] ? syscall_slow_exit_work+0x500/0x500 [ 439.245985] ? ksys_ioctl+0x81/0xd0 [ 439.249625] __x64_sys_readv+0x75/0xb0 [ 439.253521] do_syscall_64+0x1b9/0x820 [ 439.257415] ? finish_task_switch+0x1d3/0x870 [ 439.261917] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.266888] ? syscall_return_slowpath+0x31d/0x5e0 [ 439.271823] ? __switch_to_asm+0x34/0x70 [ 439.275888] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 439.281262] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.286116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.291308] RIP: 0033:0x457089 [ 439.294506] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.313410] RSP: 002b:00007fb55cf69c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 439.321128] RAX: ffffffffffffffda RBX: 00007fb55cf6a6d4 RCX: 0000000000457089 [ 439.328415] RDX: 0000000000000001 RSI: 0000000020000580 RDI: 0000000000000003 [ 439.335716] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.342986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 439.350256] R13: 00000000004d32b8 R14: 00000000004c8182 R15: 0000000000000000 [ 439.357554] CPU: 0 PID: 23304 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 439.363418] attempt to access beyond end of device [ 439.364582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.364588] Call Trace: [ 439.364609] dump_stack+0x1c9/0x2b4 [ 439.364629] ? dump_stack_print_info.cold.2+0x52/0x52 [ 439.364650] ? perf_trace_lock+0xde/0x920 [ 439.364671] should_fail.cold.4+0xa/0x11 [ 439.369678] loop6: rw=12288, want=8200, limit=20 [ 439.378976] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.378994] ? zap_class+0x740/0x740 [ 439.379013] ? save_stack+0x43/0xd0 [ 439.379025] ? kasan_kmalloc+0xc4/0xe0 [ 439.379042] ? __kmalloc_track_caller+0x14a/0x760 [ 439.379059] ? memdup_user+0x2c/0xa0 [ 439.382690] F2FS-fs (loop6): invalid crc value [ 439.385250] ? strndup_user+0x77/0xd0 [ 439.385268] ? graph_lock+0x170/0x170 [ 439.385284] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.385302] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.385320] ? proc_fail_nth_write+0x9e/0x210 [ 439.385341] ? find_held_lock+0x36/0x1c0 [ 439.390699] attempt to access beyond end of device [ 439.394707] ? check_same_owner+0x340/0x340 [ 439.394725] ? lock_release+0xa30/0xa30 [ 439.394741] ? rcu_note_context_switch+0x730/0x730 [ 439.394757] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 439.394776] __should_failslab+0x124/0x180 [ 439.398857] loop6: rw=12288, want=12296, limit=20 [ 439.403572] should_failslab+0x9/0x14 [ 439.403588] __kmalloc_track_caller+0x2c4/0x760 [ 439.403608] ? strncpy_from_user+0x510/0x510 [ 439.403629] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.411870] F2FS-fs (loop6): invalid crc value [ 439.412424] ? strndup_user+0x77/0xd0 [ 439.412452] memdup_user+0x2c/0xa0 [ 439.412468] strndup_user+0x77/0xd0 [ 439.412489] ksys_mount+0x73/0x140 20:07:00 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 439.416231] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 439.419985] __x64_sys_mount+0xbe/0x150 [ 439.420002] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 439.420023] do_syscall_64+0x1b9/0x820 [ 439.420037] ? finish_task_switch+0x1d3/0x870 [ 439.420054] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.420073] ? syscall_return_slowpath+0x31d/0x5e0 [ 439.426124] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 439.428607] ? __switch_to_asm+0x34/0x70 [ 439.428625] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 439.428647] ? trace_hardirqs_off_thunk+0x1a/0x1c 20:07:00 executing program 2 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 439.428670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.428682] RIP: 0033:0x457089 [ 439.428698] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.428711] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 [ 439.433353] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 439.437066] ORIG_RAX: 00000000000000a5 20:07:00 executing program 7: perf_event_open(&(0x7f0000000980)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x2f1c667c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000a40)={0x0, 0x35, "f1db353305fe78ec167ae3781c5db0d7839c1fa3b8f9d424bbaa761a1858e4c2fe376d1264a6cec3c3c94689c564d57db59720220c"}, &(0x7f0000000a80)=0x3d) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000000ac0)={r1, @in6}, &(0x7f0000000000)=0x84) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) syz_mount_image$gfs2(&(0x7f0000000380)='gfs2\x00', &(0x7f00000003c0)='./file0\x00', 0xa93b, 0x7, &(0x7f0000000840)=[{&(0x7f0000000400)="08807fc98c2f29d269de2a2949f75670661cd8f2677e9c5064ce2092cc0bd8fade5587940d9e2995f450f031f9ff4113b95d01597bce26e3d750faf663f70b17cf6b09ea75651d36675f5108a82962a899e4598c051a080276faeab1e761fb0377a6c92e40ae7d6bdca858b1872960bd71b7d4ff64f0664515cc497c60cd20c5c6", 0x81, 0x6}, {&(0x7f00000004c0)="eab9264254151b81aa0ffa76f5a2d8d74d4717bb8d8d8eb9e7224042e52be62193bcd8ac94ef9923d7702dbc0dae37f18bad1c29ecca32308c5b9f44c783defb643b5f52e04550aac5807708ec5878438399aaf6", 0x54, 0xfff}, {&(0x7f0000000540)="028b2d1a52a5a61000d86462da59df145e3119e843b206fa2470a008881eeb695cde124f409935daef7c322b1fee5ede441df07be792746630319890592a0f373901bd9faffd223b53dd5fa7bc316ec58bbd5f9344abc0f6ba2428b6", 0x5c, 0xb3}, {&(0x7f00000005c0)="d1b830cb8598efa5948ce049a086821b055bd44b4161741d18ad949cf06cb75fd7c281af819ed8b15ddac40db10adba8692d2c7a69f48acc65a1d2511e227c50c8436ee4cf72c0f51a1953d1c66534282aeb4b7ad9a8b6e0c203fc7aca85d3af845512d1b6e7e9a13f161068be29cf77e798be1ba60331a767db881919c3d5d73c5c8921132199b4a6", 0x89, 0x4}, {&(0x7f0000000680)="3bf501cf47c0909a467a15fef35f69bd4df07cdd99469aade3df1d1ae3ed501c19c530660176179ff4a514953b0567927adb56c6fa860f201b43ed31cfa432b834df0b7ac9d6ff79edc36db3692a2a3e552df1250f8b6d8ac2a6196bf04dd8e4e53451d4da7df87544d7da1c90fce3b57b158f2b2263fcc1d2f406a4872cc43745a1a131c3b3e52770ae150ba9d5cfaf5484e485fe9438b7e584348587046f0807c3a6e2137c8d76d38fb261581b5034709db91d5e7468359d86c3a32bcded486027193d6547c77ed7c585233d462b836a8f893c5423020a5f79a65d88", 0xdd, 0x4}, {&(0x7f0000000780)="40c3b917e2ec19e6e03ea96da73b538ff070a3cf63ee191faf887e09291aed08a60581e1425f7a424aea235084c8f41b44235ddc124555748bf49538400a9408386a27d55494061f60000fd472afd69ddcfbf0103a7764d2d1a2ea3c581e27f880b3c5b940ac76e231f853832e1c6f3f5d5b0f27a93f6d3a769fc2a26ec2", 0x7e, 0x4}, {&(0x7f0000000800)="5df56260756d7c7af2378ada62d5b2e15a509eb7ee7bc116ccf82d1b8a4f92040449f1", 0x23, 0x38467516}], 0x20000, &(0x7f0000000900)={[{@norgrplvb='norgrplvb'}, {@spectator='spectator'}, {@locktable={'locktable', 0x3d, '/proc/sys/net/ipv4/vs/lblc_expiration\x00'}}]}) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000080), r3}}, 0x18) acct(&(0x7f0000000340)='./file0\x00') [ 439.437077] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 439.437087] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 439.437096] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 439.437105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 439.437115] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000001 [ 439.701992] FAULT_INJECTION: forcing a failure. [ 439.701992] name failslab, interval 1, probability 0, space 0, times 0 [ 439.713416] CPU: 0 PID: 23324 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 439.720453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 439.729810] Call Trace: [ 439.732412] dump_stack+0x1c9/0x2b4 [ 439.736074] ? dump_stack_print_info.cold.2+0x52/0x52 [ 439.741336] ? __kernel_text_address+0xd/0x40 [ 439.745846] ? perf_trace_lock+0xde/0x920 [ 439.750043] should_fail.cold.4+0xa/0x11 [ 439.754123] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 439.759248] ? kasan_kmalloc+0xc4/0xe0 [ 439.763147] ? __kmalloc_track_caller+0x14a/0x760 [ 439.768000] ? memdup_user+0x2c/0xa0 [ 439.771725] ? strndup_user+0x77/0xd0 [ 439.775536] ? graph_lock+0x170/0x170 [ 439.779354] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 439.784917] ? find_held_lock+0x36/0x1c0 [ 439.789023] ? check_same_owner+0x340/0x340 [ 439.793360] ? lock_release+0xa30/0xa30 [ 439.797352] ? rcu_note_context_switch+0x730/0x730 [ 439.802298] ? __check_object_size+0x9d/0x5f2 [ 439.806824] __should_failslab+0x124/0x180 [ 439.811076] should_failslab+0x9/0x14 [ 439.814908] kmem_cache_alloc_trace+0x2cb/0x780 [ 439.819593] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.825145] ? _copy_from_user+0xdf/0x150 [ 439.829313] copy_mount_options+0x5f/0x380 [ 439.833561] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 439.839123] ksys_mount+0xd0/0x140 [ 439.842685] __x64_sys_mount+0xbe/0x150 [ 439.846673] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 439.851707] do_syscall_64+0x1b9/0x820 [ 439.855602] ? finish_task_switch+0x1d3/0x870 [ 439.860136] ? syscall_return_slowpath+0x5e0/0x5e0 [ 439.865094] ? syscall_return_slowpath+0x31d/0x5e0 [ 439.870039] ? __switch_to_asm+0x34/0x70 [ 439.874125] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 439.879598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 439.884484] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 439.889681] RIP: 0033:0x457089 [ 439.892887] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 439.911795] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 439.919513] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 439.926787] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 439.934121] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 439.941403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 439.948681] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000002 20:07:00 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00 \x00', @ifru_names="04707000"}) 20:07:00 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) [ 439.975909] attempt to access beyond end of device [ 439.980977] loop6: rw=12288, want=8200, limit=20 20:07:00 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:00 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000300)={0x16, 0x200, 0x3, 0x5, 0x7, [{0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x202}, {0x1000, 0x400, 0x9, 0x0, 0x0, 0x2}, {0x1, 0x7fff, 0x2, 0x0, 0x0, 0x80}, {0x1, 0x4, 0x5, 0x0, 0x0, 0x4}, {0x100, 0x0, 0x1ff, 0x0, 0x0, 0x1}, {0x6, 0x8, 0x5e38, 0x0, 0x0, 0x80}, {0x3, 0x3, 0x9, 0x0, 0x0, 0x80}]}) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x0, 0x1f0, 0x120, 0x300, 0x0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x5, &(0x7f0000000280), {[{{@ip={@empty, @rand_addr=0x8, 0xffffffff, 0xff, 'ip6_vti0\x00', 'teql0\x00', {}, {0xff}, 0x0, 0x2, 0x8}, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x200}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x1, @empty, @local, @gre_key=0x6, @gre_key=0x81}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x8, @rand_addr=0x4, @rand_addr=0x9, @icmp_id=0x64, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x100000001, 0x1f}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@local, @ipv6=@mcast2, @port=0x4e20, @gre_key=0xc9b5}}}, {{@ip={@rand_addr=0x7, @loopback, 0xffffffff, 0x0, 'ip6gre0\x00', 'rose0\x00', {0xff}, {}, 0x7f, 0x1}, 0x0, 0x98, 0xd0}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @empty, @multicast1, @icmp_id=0x68, @icmp_id=0x68}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:07:00 executing program 2 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:00 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x100, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000180)=0x6e) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000140)=0x9d65) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 440.133287] FAULT_INJECTION: forcing a failure. [ 440.133287] name failslab, interval 1, probability 0, space 0, times 0 [ 440.144660] CPU: 0 PID: 23344 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 440.151686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.161045] Call Trace: [ 440.163646] dump_stack+0x1c9/0x2b4 [ 440.167321] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.172545] should_fail.cold.4+0xa/0x11 [ 440.176640] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.181777] ? lock_downgrade+0x8f0/0x8f0 [ 440.185961] ? kasan_check_read+0x11/0x20 [ 440.190124] ? rcu_is_watching+0x8c/0x150 [ 440.194281] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 440.198959] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 440.203649] ? find_held_lock+0x36/0x1c0 [ 440.207781] ? check_same_owner+0x340/0x340 [ 440.212117] ? rcu_note_context_switch+0x730/0x730 [ 440.217052] ? save_stack+0xa9/0xd0 [ 440.220699] __should_failslab+0x124/0x180 [ 440.224952] should_failslab+0x9/0x14 [ 440.228767] kmem_cache_alloc+0x2af/0x760 [ 440.232944] getname_flags+0xd0/0x5a0 [ 440.236765] user_path_at_empty+0x2d/0x50 [ 440.240945] do_mount+0x17a/0x30e0 [ 440.244536] ? copy_mount_string+0x40/0x40 [ 440.248781] ? rcu_pm_notify+0xc0/0xc0 [ 440.252692] ? copy_mount_options+0x5f/0x380 [ 440.257127] ? rcu_read_lock_sched_held+0x108/0x120 [ 440.262186] ? kmem_cache_alloc_trace+0x616/0x780 [ 440.267050] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 440.272600] ? _copy_from_user+0xdf/0x150 [ 440.276769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.282326] ? copy_mount_options+0x285/0x380 [ 440.286855] ksys_mount+0x12d/0x140 [ 440.290497] __x64_sys_mount+0xbe/0x150 [ 440.294531] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 440.299577] do_syscall_64+0x1b9/0x820 [ 440.303486] ? finish_task_switch+0x1d3/0x870 [ 440.308011] ? syscall_return_slowpath+0x5e0/0x5e0 [ 440.312958] ? syscall_return_slowpath+0x31d/0x5e0 [ 440.317903] ? __switch_to_asm+0x34/0x70 [ 440.321980] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 440.327362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.332218] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.337469] RIP: 0033:0x457089 [ 440.340681] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.359604] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 440.367343] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 440.374627] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 20:07:00 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:00 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x100) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ATTR(r1, &(0x7f00000002c0)={0x78, 0x0, 0x7, {0x5, 0xff, 0x0, {0x6, 0x4, 0x2, 0x3, 0x6, 0x61d, 0x100000000, 0x4, 0x5, 0x1e, 0x6, r2, r3, 0x9, 0x5}}}, 0x78) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 440.381903] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 440.389182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 440.396468] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000003 [ 440.408809] F2FS-fs (loop6): invalid crc value [ 440.422596] attempt to access beyond end of device [ 440.427664] loop6: rw=12288, want=12296, limit=20 [ 440.447742] F2FS-fs (loop6): invalid crc value [ 440.452551] F2FS-fs (loop6): Failed to get valid F2FS checkpoint 20:07:01 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='./file0\x00', 0x1ff, 0x4, &(0x7f0000000300)=[{&(0x7f0000000280)="b9fb6ad6ba2a8649c4d9f837b0b7988561dac84b4bac0bf5f221ee817da69fa1fd464e2854b2058e32eff433db115d5f93f45492bee618775ea8974ebfbbad1ff8ef914dc6e3c641fc34d94e77ac17c24a97c4d185eec951ce2b83e6e1ddd565", 0x60, 0xffffffffffffff91}, {&(0x7f0000000640)="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", 0x1000, 0x10001}, {&(0x7f0000000080)="9976e887051a8a8449f6afbe8da31f85ad1413d219b1b36967706264ab66e590c6c95d", 0x23, 0xac1a}, {&(0x7f0000001640)="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", 0x1000, 0x400}], 0x820, &(0x7f0000000480)={[{@nodecompose='nodecompose'}, {@uid={'uid', 0x3d, r1}}, {@uid={'uid', 0x3d, r2}}]}) 20:07:01 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667306", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:01 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:07:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x13}], 0x1) 20:07:01 executing program 2 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:01 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x5, 0x410040) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:07:01 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:07:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x7ffff000}], 0x1) [ 440.668744] FAULT_INJECTION: forcing a failure. [ 440.668744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 440.680598] CPU: 0 PID: 23376 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 440.687629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 440.697014] Call Trace: [ 440.699624] dump_stack+0x1c9/0x2b4 [ 440.703297] ? dump_stack_print_info.cold.2+0x52/0x52 [ 440.708508] ? graph_lock+0x170/0x170 [ 440.712325] should_fail.cold.4+0xa/0x11 [ 440.716420] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.721549] ? find_held_lock+0x36/0x1c0 [ 440.725667] ? lock_downgrade+0x8f0/0x8f0 [ 440.729858] ? finish_task_switch+0x18a/0x870 [ 440.734377] ? kasan_check_read+0x11/0x20 [ 440.738541] ? do_raw_spin_unlock+0xa7/0x2f0 [ 440.742967] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 440.747569] ? compat_start_thread+0x80/0x80 [ 440.751991] ? _raw_spin_unlock_irq+0x27/0x70 [ 440.756773] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 440.761826] ? trace_hardirqs_on+0xd/0x10 [ 440.765988] ? _raw_spin_unlock_irq+0x27/0x70 [ 440.770510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.776059] ? should_fail+0x246/0xd86 [ 440.779967] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 440.785114] ? __switch_to_asm+0x40/0x70 [ 440.789208] ? __switch_to_asm+0x34/0x70 [ 440.793281] ? __switch_to_asm+0x40/0x70 [ 440.797359] __alloc_pages_nodemask+0x36e/0xdb0 [ 440.802035] ? __switch_to_asm+0x34/0x70 [ 440.806104] ? __switch_to_asm+0x40/0x70 [ 440.810178] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 440.815213] ? __sched_text_start+0x8/0x8 [ 440.819369] ? find_held_lock+0x36/0x1c0 [ 440.823615] ? check_same_owner+0x340/0x340 [ 440.827961] cache_grow_begin+0x91/0x710 [ 440.832054] kmem_cache_alloc+0x689/0x760 [ 440.836254] getname_flags+0xd0/0x5a0 [ 440.840135] user_path_at_empty+0x2d/0x50 [ 440.844315] do_mount+0x17a/0x30e0 [ 440.847875] ? retint_kernel+0x10/0x10 [ 440.851787] ? copy_mount_string+0x40/0x40 [ 440.856153] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 440.860929] ? retint_kernel+0x10/0x10 [ 440.864836] ? copy_mount_options+0x1e3/0x380 [ 440.869343] ? write_comp_data+0x14/0x70 [ 440.873418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 440.878963] ? copy_mount_options+0x285/0x380 [ 440.883455] ksys_mount+0x12d/0x140 [ 440.887097] __x64_sys_mount+0xbe/0x150 [ 440.891076] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 440.896093] do_syscall_64+0x1b9/0x820 [ 440.899976] ? finish_task_switch+0x1d3/0x870 [ 440.904469] ? syscall_return_slowpath+0x5e0/0x5e0 [ 440.909400] ? syscall_return_slowpath+0x31d/0x5e0 [ 440.914353] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 440.919743] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 440.924592] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 440.929810] RIP: 0033:0x457089 [ 440.933025] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 440.951927] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 440.959671] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 20:07:01 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000006", @ifru_names="04707000"}) 20:07:01 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xe3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0x200, 0x10}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)) [ 440.966939] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 440.974225] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 440.981493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 440.988777] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000004 [ 441.001177] 9pnet: p9_fd_create_unix (23376): problem connecting socket: ./file0: -111 20:07:01 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x3e}], 0x1) 20:07:01 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1, 0x2000) accept4$llc(r0, &(0x7f0000000100), &(0x7f0000000280)=0x10, 0x80800) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) 20:07:01 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0xfffffffffffffbff, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) 20:07:01 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) unlink(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000002c0)=0xc) ptrace$poke(0x4, r2, &(0x7f0000000440), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x1f, 0x4, @thr={&(0x7f0000000340)="830d4021561b9a7d2cc4cb1c4000ca546d6545e755995f706ce1330238831ad2a0284c030da1c2004a39facccb72eb9b73f02ff6b65d7804b508801289290c855f421830ddf57bb3394cd8b0bc1d81a915d2056b8100876c7d47a425c1162344040a83d303b7f6eca332fd325db83a4e79dd25ece1378827a7cab0981d0c3309de15a21014206c32d891471c63e07d41b7eae3b56ac474f5f25b6347e377a8bae7b6db50d5394bf568c5", &(0x7f0000000400)="1039b448843361d37788e3662186582f15ec1ec2849cd46ae93bb0e5ca450bc2fdf7962537593c11084904a624d245215902"}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r3, 0x101000000000013) 20:07:01 executing program 2 (fault-call:3 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:01 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667310", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 441.207123] FAULT_INJECTION: forcing a failure. [ 441.207123] name failslab, interval 1, probability 0, space 0, times 0 [ 441.218479] CPU: 1 PID: 23417 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 441.225506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.234877] Call Trace: [ 441.237517] dump_stack+0x1c9/0x2b4 [ 441.241192] ? dump_stack_print_info.cold.2+0x52/0x52 [ 441.246422] ? trace_hardirqs_on+0x10/0x10 [ 441.250688] should_fail.cold.4+0xa/0x11 [ 441.254799] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 441.259939] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 441.264806] ? save_stack+0x43/0xd0 [ 441.268471] ? find_held_lock+0x36/0x1c0 [ 441.272619] ? check_same_owner+0x340/0x340 [ 441.276984] ? rcu_note_context_switch+0x730/0x730 [ 441.281944] __should_failslab+0x124/0x180 [ 441.286191] should_failslab+0x9/0x14 [ 441.290012] __kmalloc_track_caller+0x2c4/0x760 [ 441.294791] ? kasan_check_read+0x11/0x20 [ 441.298963] ? do_raw_spin_unlock+0xa7/0x2f0 [ 441.303401] ? kstrdup_const+0x66/0x80 [ 441.307326] kstrdup+0x39/0x70 [ 441.310558] kstrdup_const+0x66/0x80 [ 441.314292] alloc_vfsmnt+0x1bb/0x9f0 [ 441.318109] ? mnt_free_id.isra.27+0x60/0x60 [ 441.322544] ? kasan_check_read+0x11/0x20 [ 441.326716] ? graph_lock+0x170/0x170 [ 441.330539] ? rcu_pm_notify+0xc0/0xc0 [ 441.334452] ? putname+0xf2/0x130 [ 441.337952] ? find_held_lock+0x36/0x1c0 [ 441.342050] ? lock_downgrade+0x8f0/0x8f0 [ 441.346229] ? lock_release+0xa30/0xa30 [ 441.350232] ? mpi_free.cold.1+0x19/0x19 20:07:01 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00@\x00', @ifru_names="04707000"}) 20:07:01 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x200000d2}], 0x1) 20:07:01 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:01 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000000)=0xfffffedc) [ 441.354323] vfs_kern_mount.part.34+0x90/0x4e0 [ 441.358927] ? may_umount+0xb0/0xb0 [ 441.362597] ? _raw_read_unlock+0x22/0x30 [ 441.366761] ? __get_fs_type+0x97/0xc0 [ 441.370768] do_mount+0x581/0x30e0 [ 441.374342] ? copy_mount_string+0x40/0x40 [ 441.378637] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 441.383445] ? retint_kernel+0x10/0x10 [ 441.387366] ? copy_mount_options+0x213/0x380 [ 441.391899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.397466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.403023] ? copy_mount_options+0x285/0x380 20:07:01 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000080)) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 441.407545] ksys_mount+0x12d/0x140 [ 441.411190] __x64_sys_mount+0xbe/0x150 [ 441.415186] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 441.420222] do_syscall_64+0x1b9/0x820 [ 441.424129] ? finish_task_switch+0x1d3/0x870 [ 441.428644] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.433609] ? syscall_return_slowpath+0x31d/0x5e0 [ 441.438583] ? __switch_to_asm+0x34/0x70 [ 441.442666] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 441.448058] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.452960] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.458192] RIP: 0033:0x457089 [ 441.461407] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.480328] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.488053] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 441.495334] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 441.502618] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 441.509900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 441.517206] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000005 20:07:02 executing program 2 (fault-call:3 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:02 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00 \x00', @ifru_names="04707000"}) 20:07:02 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x78, 0x49c100) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000000c0)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) fremovexattr(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="775c7e0010e180"]) 20:07:02 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 441.692350] FAULT_INJECTION: forcing a failure. [ 441.692350] name failslab, interval 1, probability 0, space 0, times 0 [ 441.703710] CPU: 0 PID: 23455 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 441.710746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 441.720112] Call Trace: [ 441.722738] dump_stack+0x1c9/0x2b4 [ 441.726463] ? dump_stack_print_info.cold.2+0x52/0x52 [ 441.731686] ? trace_hardirqs_on+0x10/0x10 [ 441.735954] should_fail.cold.4+0xa/0x11 [ 441.740043] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 441.745204] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 441.750075] ? save_stack+0x43/0xd0 [ 441.753786] ? find_held_lock+0x36/0x1c0 [ 441.758104] ? check_same_owner+0x340/0x340 [ 441.762459] ? rcu_note_context_switch+0x730/0x730 [ 441.767416] __should_failslab+0x124/0x180 [ 441.771678] should_failslab+0x9/0x14 [ 441.775764] __kmalloc_track_caller+0x2c4/0x760 [ 441.780461] ? kasan_check_read+0x11/0x20 [ 441.784889] ? do_raw_spin_unlock+0xa7/0x2f0 [ 441.789320] ? kstrdup_const+0x66/0x80 [ 441.793248] kstrdup+0x39/0x70 [ 441.796469] kstrdup_const+0x66/0x80 [ 441.800228] alloc_vfsmnt+0x1bb/0x9f0 [ 441.804056] ? mnt_free_id.isra.27+0x60/0x60 [ 441.808490] ? kasan_check_read+0x11/0x20 [ 441.812662] ? graph_lock+0x170/0x170 [ 441.816486] ? rcu_pm_notify+0xc0/0xc0 [ 441.820405] ? putname+0xf2/0x130 [ 441.823899] ? find_held_lock+0x36/0x1c0 [ 441.828000] ? lock_downgrade+0x8f0/0x8f0 [ 441.832201] ? lock_release+0xa30/0xa30 [ 441.836226] ? mpi_free.cold.1+0x19/0x19 [ 441.840320] vfs_kern_mount.part.34+0x90/0x4e0 [ 441.844928] ? may_umount+0xb0/0xb0 [ 441.848576] ? _raw_read_unlock+0x22/0x30 [ 441.852744] ? __get_fs_type+0x97/0xc0 [ 441.856663] do_mount+0x581/0x30e0 [ 441.860271] ? copy_mount_string+0x40/0x40 [ 441.864674] ? copy_mount_options+0x5f/0x380 [ 441.869108] ? rcu_read_lock_sched_held+0x108/0x120 [ 441.874146] ? kmem_cache_alloc_trace+0x616/0x780 [ 441.879037] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 441.884595] ? _copy_from_user+0xdf/0x150 [ 441.888769] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 441.894326] ? copy_mount_options+0x285/0x380 [ 441.898844] ksys_mount+0x12d/0x140 [ 441.902495] __x64_sys_mount+0xbe/0x150 [ 441.906489] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 441.911529] do_syscall_64+0x1b9/0x820 [ 441.915438] ? syscall_slow_exit_work+0x500/0x500 [ 441.920302] ? syscall_return_slowpath+0x5e0/0x5e0 [ 441.925261] ? syscall_return_slowpath+0x31d/0x5e0 [ 441.930238] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 441.935629] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 441.940499] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 441.945702] RIP: 0033:0x457089 [ 441.948912] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 441.967920] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.975649] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 441.982933] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 20:07:02 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x8) 20:07:02 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:02 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000000)='cgroup2\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='tsans=virtio,\x00']) r0 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000002c0)="b0e647cdbc6058ffb6fcf71816aa2572f98959d067fbdd1cc9f798be908183271dcdae94b24947cec3d43f12d8cb125f45cd4b5a88f8ae834fb484f3e34cd89f57807029204aa1b7886a38649c") mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 441.990226] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 441.997509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 442.004791] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000006 [ 442.069451] attempt to access beyond end of device [ 442.074554] loop6: rw=12288, want=8200, limit=20 [ 442.114493] 9pnet_virtio: no channels available for device cgroup2 [ 442.138780] attempt to access beyond end of device [ 442.144043] loop6: rw=12288, want=12296, limit=20 [ 442.156664] attempt to access beyond end of device [ 442.161813] loop6: rw=12288, want=8200, limit=20 [ 442.186606] attempt to access beyond end of device [ 442.186855] 9pnet_virtio: no channels available for device cgroup2 [ 442.191641] loop6: rw=12288, want=12296, limit=20 [ 442.263309] attempt to access beyond end of device [ 442.268425] loop6: rw=12288, want=8200, limit=20 [ 442.288477] attempt to access beyond end of device [ 442.293577] loop6: rw=12288, want=12296, limit=20 [ 442.299764] attempt to access beyond end of device [ 442.304817] loop6: rw=12288, want=8200, limit=20 [ 442.311531] attempt to access beyond end of device [ 442.316694] loop6: rw=12288, want=12296, limit=20 20:07:04 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:07:04 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1, 0x200000) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000100)=0xa41, 0x4) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff070a00f00009005006040000ff00000080000000000300"], &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={r2, @in6}, &(0x7f0000000000)=0x84) 20:07:04 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x3e) 20:07:04 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:04 executing program 2 (fault-call:3 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:04 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendto(r0, &(0x7f0000000300)="bbdc77bc78b5bac3a5192a946f2627025b4708520637e4c954cb33a2ebde05d874eb2fe39a8976217690163bb05b90de2a67655d2912d6ce3366f82242eeac2ee605c1ec88c6cde9bfa61b0235dbf9f983de6de1e2200deceb", 0x59, 0x44000, &(0x7f0000000380)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={0xffffffffffffffff}, 0x2}}, 0x20) flistxattr(r1, &(0x7f0000000480)=""/185, 0xb9) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r2, 0x4}}, 0x10) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_MAP(r3, 0x4018ae50, &(0x7f0000000000)={0x59a, 0x1b, 0x7f}) openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:07:04 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000fdfdffff00", @ifru_names="04707000"}) 20:07:04 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667304", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 444.167614] FAULT_INJECTION: forcing a failure. [ 444.167614] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 444.179585] CPU: 0 PID: 23496 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 444.186616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.195980] Call Trace: [ 444.198590] dump_stack+0x1c9/0x2b4 [ 444.202392] ? dump_stack_print_info.cold.2+0x52/0x52 [ 444.207602] ? perf_trace_lock+0xde/0x920 [ 444.211769] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 444.216630] ? rcu_pm_notify+0xc0/0xc0 [ 444.220541] should_fail.cold.4+0xa/0x11 [ 444.224625] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 444.229808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.235364] ? graph_lock+0x170/0x170 [ 444.239216] ? pcpu_balance_workfn+0x1700/0x1700 [ 444.244002] ? find_held_lock+0x36/0x1c0 [ 444.248110] ? check_same_owner+0x340/0x340 [ 444.252462] ? __lockdep_init_map+0x105/0x590 [ 444.256976] ? rcu_note_context_switch+0x730/0x730 [ 444.261943] __alloc_pages_nodemask+0x36e/0xdb0 [ 444.266646] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 444.271691] ? kasan_check_read+0x11/0x20 [ 444.275861] ? rcu_pm_notify+0xc0/0xc0 [ 444.279785] ? find_held_lock+0x36/0x1c0 [ 444.283874] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 444.289442] alloc_pages_current+0x10c/0x210 [ 444.293873] __get_free_pages+0xf/0x40 [ 444.297776] get_zeroed_page+0x11/0x20 [ 444.301734] mount_fs+0x210/0x328 [ 444.305228] ? mpi_free.cold.1+0x19/0x19 [ 444.309316] vfs_kern_mount.part.34+0xdc/0x4e0 [ 444.313922] ? may_umount+0xb0/0xb0 [ 444.317571] ? _raw_read_unlock+0x22/0x30 [ 444.321735] ? __get_fs_type+0x97/0xc0 [ 444.325651] do_mount+0x581/0x30e0 [ 444.329233] ? copy_mount_string+0x40/0x40 [ 444.333491] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 444.338270] ? retint_kernel+0x10/0x10 [ 444.342210] ? __sanitizer_cov_trace_const_cmp8+0xf/0x20 [ 444.347684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 444.353254] ? copy_mount_options+0x285/0x380 [ 444.357771] ksys_mount+0x12d/0x140 [ 444.361425] __x64_sys_mount+0xbe/0x150 [ 444.365423] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 444.370472] do_syscall_64+0x1b9/0x820 [ 444.374372] ? finish_task_switch+0x1d3/0x870 [ 444.378886] ? syscall_return_slowpath+0x5e0/0x5e0 [ 444.383834] ? syscall_return_slowpath+0x31d/0x5e0 [ 444.388786] ? __switch_to_asm+0x34/0x70 [ 444.392984] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 444.398379] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 444.403272] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 444.408525] RIP: 0033:0x457089 [ 444.411739] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 444.430653] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 444.438376] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 444.445657] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 444.452935] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 444.460227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 20:07:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0xffffffffffffffff, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8203, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) [ 444.467507] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000007 20:07:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0xfffff000) 20:07:05 executing program 7: mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) socket$nl_netfilter(0x10, 0x3, 0xc) 20:07:05 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) ioctl(r0, 0x9, &(0x7f0000000280)="10ee7b60680c9ef77c7e89cb73c31b77ec44e16b5f78c54912a2d6927562516757c3514b9289707ac84baff447ca23377f089ab8c01d40584b8d72b75d09435800cc058f88af5c13a491edf9fca98550c634dca8ff92856f2e170769f05bbead14791365dc772fc1f48d62034c1096a7741a8f726b26af8b3e899abe520d5b8426165dbbf5383d8cd8656d2381995940b99a21ac075d74e0e743559e3e3463a74389b76062596425cdc90c6c03c2ad241c1fe2e6c06635ca1f6d4737ffc707cb62183710f5") socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) getsockname$unix(r1, &(0x7f0000000380), &(0x7f0000000080)=0x6e) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0xffffffffffffffff, 0x2, 0x7, 0x3, 0x7f}}) 20:07:05 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673c4", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0xf000) 20:07:05 executing program 2 (fault-call:3 fault-nth:8): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x8c) uselib(&(0x7f0000000040)='./file0\x00') socketpair(0x4, 0x80006, 0x921, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) [ 444.894632] FAULT_INJECTION: forcing a failure. [ 444.894632] name failslab, interval 1, probability 0, space 0, times 0 [ 444.906202] CPU: 0 PID: 23554 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 444.913331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 444.922702] Call Trace: [ 444.925319] dump_stack+0x1c9/0x2b4 [ 444.928977] ? dump_stack_print_info.cold.2+0x52/0x52 [ 444.934217] ? perf_trace_lock+0xde/0x920 [ 444.938394] should_fail.cold.4+0xa/0x11 [ 444.942477] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 444.947603] ? find_held_lock+0x36/0x1c0 [ 444.951697] ? lock_downgrade+0x8f0/0x8f0 [ 444.955876] ? find_held_lock+0x36/0x1c0 [ 444.959981] ? check_same_owner+0x340/0x340 [ 444.964322] ? unwind_get_return_address+0x61/0xa0 [ 444.969273] ? rcu_note_context_switch+0x730/0x730 [ 444.974240] __should_failslab+0x124/0x180 [ 444.978493] should_failslab+0x9/0x14 [ 444.982375] __kmalloc_track_caller+0x2c4/0x760 [ 444.987061] ? save_stack+0xa9/0xd0 [ 444.990707] ? save_stack+0x43/0xd0 [ 444.994348] ? kasan_kmalloc+0xc4/0xe0 [ 444.998261] ? kmem_cache_alloc_trace+0x152/0x780 [ 445.003124] ? mount_fs+0xae/0x328 [ 445.006682] ? v9fs_session_init+0xdd/0x1a80 [ 445.011116] kstrdup+0x39/0x70 [ 445.014336] v9fs_session_init+0xdd/0x1a80 [ 445.018597] ? find_held_lock+0x36/0x1c0 [ 445.022778] ? v9fs_show_options+0x7e0/0x7e0 [ 445.027280] ? kasan_check_read+0x11/0x20 [ 445.031454] ? rcu_is_watching+0x8c/0x150 [ 445.035625] ? rcu_pm_notify+0xc0/0xc0 [ 445.039561] ? v9fs_mount+0x61/0x900 [ 445.043301] ? rcu_read_lock_sched_held+0x108/0x120 [ 445.048389] ? kmem_cache_alloc_trace+0x616/0x780 [ 445.053259] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 445.058823] v9fs_mount+0x7c/0x900 [ 445.062393] mount_fs+0xae/0x328 [ 445.065792] vfs_kern_mount.part.34+0xdc/0x4e0 [ 445.070398] ? may_umount+0xb0/0xb0 [ 445.074052] ? _raw_read_unlock+0x22/0x30 [ 445.078231] ? __get_fs_type+0x97/0xc0 [ 445.082142] do_mount+0x581/0x30e0 [ 445.085784] ? copy_mount_string+0x40/0x40 [ 445.090049] ? copy_mount_options+0x5f/0x380 [ 445.094478] ? rcu_read_lock_sched_held+0x108/0x120 [ 445.099516] ? kmem_cache_alloc_trace+0x616/0x780 [ 445.104378] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.109932] ? _copy_from_user+0xdf/0x150 [ 445.114101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.119654] ? copy_mount_options+0x285/0x380 [ 445.124194] ksys_mount+0x12d/0x140 [ 445.127848] __x64_sys_mount+0xbe/0x150 [ 445.131838] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 445.136933] do_syscall_64+0x1b9/0x820 [ 445.140843] ? finish_task_switch+0x1d3/0x870 [ 445.145357] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.150539] ? syscall_return_slowpath+0x31d/0x5e0 [ 445.155491] ? __switch_to_asm+0x34/0x70 [ 445.159576] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 445.164963] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.169831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.175036] RIP: 0033:0x457089 [ 445.178251] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.197371] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.205099] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 445.212431] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 445.219718] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 445.227057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 445.234338] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000008 20:07:05 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000280)=""/125) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() getpid() ptrace$getregs(0xe, r3, 0x7, &(0x7f0000000640)=""/4096) tkill(r3, 0x101000000000013) 20:07:05 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x80, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getgid() openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:07:05 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x300) 20:07:05 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:05 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x0, 0x84) sendmmsg(r0, &(0x7f0000005b00)=[{{&(0x7f0000000140)=@ethernet={0x307}, 0x80, &(0x7f0000000600)=[{&(0x7f00000001c0)="7fd303ef05c712c0682665608c3843d92b172ea859be2036a97a31dd2a7f2f772d073490bb7ce7cc3ba20dd0dfe0feec310cd4bca0ef4f40bcc5ee63fa39336d7772d719cfc35acc42665c70f606789e31bef0be93634aada2f7a44e36250a31d7ed2f38dd7b4adcfa9b3bb398b16d84bf1165e82d05142d61efe299061d3be932ffcaf397bd647135a715feb2cf8cab771a730230638b023ba1473d41a51ce7e47e95e2d8187d9bbadece7a9aef415d40d94c8691ad6aed6966a3e04f8660c4a5d44a99557db03b0a267068e4a0efe8570b06abd986c7f0bbfe33e868df2df96e8a2ed38958301ececa8eaf68574b72358e87e9ca45", 0xf6}, {&(0x7f00000002c0)="58df0ef7b39395dd62d9924885c48d404820b2de344dc7cd8465b3e9078587101bf9b59707162e2bb9c879716e3108eaf49f0136c13f456065c15b26d2fccbb09f0b193288adc54eff0b1486888676c9902ee39f0985619b5b1befd8367c1906d440d7b2744b172f74062f7cd15633d681c0b678742f0f6106998529c4214adf7b802adbb9049ebb64ad0ad7ca980b66b9f7c44d57ae2740a2ad16e96ce2dfd73b3b132e4cb04218ca154689cca6a8f9105af920d23ac5cc5863da4ad1072043573f7dc916e59ac98c4eda5b8bd4e3196b78c145910b9579fbf03b847336b2", 0xdf}, {&(0x7f00000003c0)="1ceb9e2b73ef4a3b1f9f2666f059add47b05a07e8dae79280d2ef2c9cbf053eda90a960277eae7be0167830cb0d6c7e380f6959ab36a5625549546b7b6a9bb6c16413e4500b31ce4af9b1e6be3285ba00d9d5da33b01162df94b1db09fd842ec1af107f5135b35ad146e1af41e43dd31737027d7bd07e263610525030ab0e92f904e88d6bc7ce06e5e0a", 0x8a}, {&(0x7f0000000480)="483d822d3aa163eab7244347a3af883af28ddd50b29de1f8a3a63d683a2940a6abed8681885109bbb8f1d0c8396aabc719d8c72ca75abe878a1c9eb27ac7e5acc7af213d97ab0934c44f73d6bad3d9ec17544bf0b5a82f46dc6c9db9879cb7c61ce31adf93f3157b84695adaf2370861a00244084d11c862ccf4c779c5e4d241d7a8e8f0a01a9d6eb81e6764ae21d08af2f2954e1cb846459b7492f8bdef070b", 0xa0}, {&(0x7f0000000540)="aa32bc24a58544d52ac00a88f831779e402d8661451cfb780f2a6feeeac367f1b3e1dc7e25de34e80b28eb5a74a433d3e359d3f5053dd0356fa15cccd575e0bea60c7bca595e408591c335fe385f18fd9bbd406b23bb6d9b6abbf6a98aea914bf90ae26f82d59d", 0x67}, {&(0x7f00000005c0)='E', 0x1}], 0x6, &(0x7f0000000680)=[{0x28, 0x10f, 0x3, "e3de0bc0141eb943dc817c52e95f203d040cffc361fb3c71"}, {0xf0, 0x114, 0x19, "dcbff3313de269f50f476444e92577baa152fd62c6cd8362144a20554cf4c37a0536a42f20eed50ba72d1c5e563d72363eb160d810fc5f9b096eac1a1a40ce07e5c901a06c07bc3ccc9b69778a0c97758faf50b520afe32303ce664db0d0e87caa38ee7733eb03f0483d8b800b68ccf6d208c10e2b8abeeaaf863a8a200d62799b6614cd149109b8efccf250b17473ff65f3612176b07cd0cc7baa99ce7e232ac811c165fee0a75f5f747493eb4a5d7dcf4e96a16534ab501711cdd1482843922bb90be936dfe11bb3d505d725c3c0be513c6040934cb70f4b20b482"}, {0xb8, 0x110, 0x1, "82f965184075e47a2f10d757dec5bd9186c89c6d5ade727c72b2216dde551a7f4f8e0002c39297be636a51e102c3fde22612f944971d21c1c994d5c496f2469f48fabd047734d77a8f3b66298e7196bcfe3e87a98825c00593a6ad607f580cc5977de8ed122a650bea08077290911b79333363978b22f39329bf113c755c176442ec7bce0d032b9c24a7a34f842506cb7edcb898778368eda82254938acedef24669"}, {0x1010, 0x117, 0xffffffffffffff20, "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"}], 0x11e0, 0x8000}, 0x8}, {{&(0x7f0000001880)=@sco={0x1f, {0x8, 0x5, 0x45f, 0x3, 0xb46e, 0x7c}}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000001900)="1580de91bb1d105e44771008630fdf7343ee66cb348a91fa3b89658db2835fd01d16c4f8d8e913d4e96758c1ffce09b3302ae11c3e8f0e1396662df54805cda9ae9071bdba3b1156f809bd3559f77ffb40c4ccb8121d93aed7b7c4ab8813424f426ab35c7b883576f8d6d32d3f94fe0da98e22ffb039e585d80f2acc5d5cd7125edf2becd96938b974e4a1b3a2948dc37c372363f682a2df82c73f2ac430383e8d9ef0ba5f1c41afff74f91ee28af69eff5a8367", 0xb4}, {&(0x7f00000019c0)="3f8b68552fdbcf109b6c3451f661bd8803cfb00a0c8050475ebd7f853cbd239e8e150a26b0098ae92c5ca1afa2e4761d4be1d740946517a894bb63332ba46bf7b76dde9af779ac619833f305d22b38a676bd0031f51da5ee09250af9166cb0d78d81323baea41cf56826254f62e92aab7325dfc16d98912e0753e6ff365e55756d07e71dead41d3e6572", 0x8a}, {&(0x7f0000001a80)="36a31983c20221bef55b", 0xa}], 0x3, &(0x7f0000001b00)=[{0xd8, 0x10f, 0xfff, "9a9fc5ecf2eff2ba8cacfd9df60453fd7934da5bf2e0e837781b193f40208ec5836736969e5ff2bbc9a13013cc579c700db6dbe865b8b7495c843f853914700156f6eab999168e2a204b903a09e27e1f42adb2d721fb77cacc567ecd6f5f2ea8195769be6def125f1ba997916d71ec342e8b789dc795fad2db25dba6e18f892b98dabdc1b5054a2c5d159825b2999cb7bd90c7f07272bda18cf812889248c81b4b2aa384a0c8159be93460d7c0a4915b19ce61d5482a4e1a317a61f089010bc46d9da96f83c6839a"}, {0x40, 0x1ff, 0x10000, "ca88a9491415fdbfcd8582ae96075c16ab3983d90a09c8ab3b6ea77411fbd50a0729741b1cf2c7604d52"}, {0x70, 0x10a, 0x0, "f0bb1855a80de3b352bd247d4c87e8870384b7d65d4951f01febb8d14a4d048198021f5dce37986077bb9d82c9dd389640c19fa13db6656c592372f35bb27c48436f6d68805136ae855229abbdcf2247ffb46a926291ef1c8b7e77ffff434f"}], 0x188, 0x4}, 0xffffffffffff7fff}, {{&(0x7f0000001cc0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001d40)="0c40ea58c9b46e630b959ac04895321eb95b57f4e418fccdcf3d976064dc5dcceffb1e65e02cd2dae33cf78681b12a5212e929fe08082e9fdb759db5079c73a1f78502b2ccaae7d71e012a6bfc0a5253222a1c2fab40ea222986e326deba16d49fed325d3ad25a47166a8189a87b14676140e5e1c2abc70d62a662740183740cd4a19b7ae3260db17de7744c11106c4f5678d7fa495a4f2b157cbbcd0d95d80ebecf3233163be8cff17166a9f59b15e5deb03051277e412e3f5234226c6d1f5ec24135a2971ad42144ccfef68c9bf7b88defc67105c40d9e41439330fd89370708463d299e780cb658ba6d194c52b2e4c63cede2fc73b5ef1a198390742f61222addbc9f56d32869ed75b44efd57aadcffe8294f1080fecbe74b1bd3d5b8968814a315f00b73421d185f77a142e3fca07aa1d2406058f69f31610967e6b05943aa7ca897ed1b684a4972060b26f4d0a12d6f22ca47c77dc3fdf9a70cfb8535ea2ddfecd235f66d4837c2ac96bf7a71d36466dda4cff774e64028f213d270975f9105c586a9d847b142c37e221893df8eda3577e3a532413f2bded7fe4e1cd4daec00e75ac1cdf5bf0515aa6d59f808699e6c672016400670783a857ca6b4699a678c4637ad3d2a7bb2185c3dea17a88d0537533077a121fe9560e8f1bdede94a858e21b3105a4c0828d3a284eb16dfe015ebf98fe7c2f5583d4041709d04290f2e182c0dceb545003c1f9a1c92948d305ac23d345af456f246250cf50f9df9e892645482728274597d64935e42432016d94b529a43341e00ec3ba77656ad765e326abe5dbed758f5e280b5aa038573ff6aab7488048d67adebca18c145f43ddce218c7eb7eb62b885897baefa12da4ee4684d4d0ea31c43c85cf2211721d4761cf83cbbed0a2d2572237af74c4fcc3a948ba03cd8fd8782226df7985bf8c35d613dde8438d8c0a5f41564ad308a06ff6050930939bacef1e46e83b882770cca756d0c9a1f270881cdafac42df7ba1bcadb4d6d09e3754a8d21148d5ec15f247d2fa1b2375785539fe50aacfa012a3c40c25c896b0e5f866185e4a1af19c4249daf481e0fcbcf91e6c9a3e9360bb3e908c05e69538b10e4845371420689b2f250718f65d54e2f169bbe451b9890075586d759d659477f21b59c119491e77a4b295d1674f0124fea76ba5a55f4c908913c9a1f4dbbd174c7730e65102ada65a89edd274bca5c2cf75422a0181618f0d13cc40b67d86c7c8113d3746b90a837b5b8925b75df432d4fdc9cfc7065f46fbec103a2c32c16c64103b82c9e96241e406d26f051f1e8f722c1942ceb9f798f2e634536a7300b0a500759e86245593e8b9dd6f1db658a08f427e0f27efb029943310e347599986757c844cd0e969d8f19add0a0d417e12a268c50a037a6f2a0edfeb3a784576999c57e7ebc08fb17d5052940aab74a38031f8b762f51fba7222ec30917693550d1400a214f1f8feb744e519507961790b68b969db0af2c1e323ff888c5c0dc77702dacfba737d9867a51db15f90de6b4938849893e9580a8c65b601456a65cb208a827b6fccbf2f8f318bf55c72c1b7116740492a881a2bf689603611a5ba6bfb21e3e7a2e9528b312d863a1198eda5be0d6ff7767d2add3c94e8e03e4f6b813622d3c184373c7126bcdf02bc10081046ebb23836ed6a21b981eab199a79567e4fa40d8baced3094b66c117b0d2126e63693a99f14d80373fd2dd122aac2c5974e4579f70303f1194afb13b4daf2453c6bbe7afff441d29360386268d46e63ef594c4c6cc926f633277601dc9bea11e374f806d4c890119b87cc0a32703e53f628216573b1b8796b73c98594d3b85ca6d8ee1b04e57c1749073f299f03107a8cdb43adab2b0f708c42af6f993afc1862ca0f12b6a8a13803c3ba14389e651b463af50d2d2beeae45cc640ba93366722c43ee71cb9f33d7a5e1fcd91ebe1ab82c559ac875d4af0b54b1b80793c6f0aad5d54edc8495c726300999b0bd7772d65a7c9672100cf8ba281ef2aba578d40908fed8e8966d373dd0a4a7680f797dd1f5cbe2ca899499b107c437fbd26465d68276a4c6ada4c2062065f3311de3e68ea36849671d0aa4803b28b6bf2d988906f3e62be1766869f860d70bfeb57806090b7d6e77a69e8a66f1d3ce5f53bac5575a111ae17957699f86618abc3783cbf61c347b52ef360eea4f2624a2fb0ed6c85cea4f0257f1adbb12afa5d7b9096d51c3fea033e8127c1aa663b410ca731af1a4b368934de3d101107a4162161e9165b127488ecfbfa3b80e08ecfbbef0e89d1e65c56b3c7e2696d074906e221269b7446c4e0fc0eb2f1e4cf33391e0b4d5ab6eb7ec38782401cd3d94aa40cc53a3671a02814984bb6f4da082e4aeaaca5e266ae2c520b1a68ca081837e07024cd48611b0268fe561602f31e864fc2f3c95eee76ad074720b3658199dc798162e0a2489a1b41ef443cd7618f9c9944aacbd416f7968c0ceefb877498ab7baa423519d6820224425ea2f7b632dc737c0b6f90b78c7a1f2e57d40a6ff0f7ee8f9cd1044a7fe1fa68e6688fe56f27306ca59aab22cafdd1a66c73a81e87df8474cbed46d17a16446065be2c6050ec259b2ac4ea9bc8178a0272ae50f7bdfc51de439d70a4bf1ffd55d73d90429867c1dfd013075daaa2e1d5760d03e3fdb131f6bfc43dfc540ca381df5f7910a9af92442da6e0f8f328752f53d0278268b1dd395f12e6287b264976388948e0fec04447bc86c06312a1538f125f373105a961d4d0fe6a4615feff24ba054d26de68e283a69be01ca0022f12f183805112ec282bb4af4c1438233454922168b0ad1a55a5f06d8e0fad77e38b4bc69fd7fb1a9870cbd8218bd05ec79ccc7aae0953c365d32782d599b4109b9b15d27ff200b95d7b03d87efd75a912b867f2e486b360a514c5ea392ba4bc5cd4a516da9644a2490e9b0e74d1b7517fa250a4875aa9e3c26dfd6c4c7534283daae6f53429d100c78d1b8b55a272bf81f3fb290d6e3493e19d7aa91321c65d2782dc7136066b343b3a1c9f74ca955fd1d54664b2065647d0f2d41c59fc91543222acab00a41af72b22daf2c310d306670657157a9dcda9ce847b0e3d315ef46b27a3489a509504f1b620c2e1e2d7ab9e5f794de027cfd55540d36ac050926cb2c7171362546fd54b03aa420036d1810e3dc5e3784f945c0a23791f563792fbbab694bef5420b51272ae026df3e37c2102f32409097f646053516be4ecfa83259e1f59672c64144339a907ff3e09c1d1ee1a118c59e88408c513462b6f5aa7cf0437bdd847e632ce208057832d336f6aba1017c786a22edf6e3da7f157c68336e5eadd8292006158e14a30732de87687a9c4deebb7706548cc2ecbc42d21c81dde9c80588fe6623238e6e7ee38303c0b60dfb6c66a53d9ba0d0d4b7b24fc867063e58ee7339d5eabcacd01afdc412d5b497e0c91b6180309245f7c59e8b386d18d9a4b81d389a1f780211eba2ec515c5a3255439b22b856e4d1c938208c85b971046c8d31edd8f1cc15151157245d45fe822680340c03f22968ba9b3b035f56b0620dfd75d101718559466f47d15ddc71e34fed9ff4024f98d3b1b089f1ef8b41227e7971a641582ae63380f454cea76703e742bd512f23c7ea26808c93f2cb3000653179e87aa07c30f07076ff28ded18264e48e2198c8d2e2659377d04b2a71f76791547384cb5ec2cbfbfaf5cb3fd03ad95bd17ce36be8b59778a0f6ef12f3906ecdd0bc2063cf90ab6bb9b88b2f4a35ecbc9c3c5f0b47e968a7aa984f50956b14d5f2ab5776aa3bdf59896991481956e2d0492d2da848ba192c8021fc5080ab8d14f2ec7257cdadd14d68013aca511402a22641cc8bacf2ab250d794988ef26b39b4a0666f390f1614df2b5ec579ec7691e839825b9f4a0316f0df8788f789b3d37244ef33f25046b7dbc1e19b66d0787889b338acff5f05783a096c5b8f4253bda3e2508f3f5c9a6a393619d7deaca706e91317ba6a8fe4103d196b1717e7e2759a71d266a37722c36b76e1500f8f5f3ed811e3474d3f55056b809ead39566415a268972cff3c30944d1af925b49b437f8394ab98a0075710acba3282511c5c15c1212c126f689258b693d13fdf494b9345c690cacb4f3f3526154357b62b613612aff6941134d619b7ae18efaf1a6e79d3025894e5a74aaf4c5f1ad0f96b73f0bf04f32bbbcebb15bfb179a66ecce8a489c0940ff1aba6a242f749318b429198ba08c74e00a1b619eb8113a0f86ea831a3087a207c465b9238dcb2cf295e7a5ec486972e266c4bb2f2320de3d2759545898b48f85851cca0a08e47b329001bf94b1255302d217ec0a6ff1f31ffb5968c70cf68bedd5cef1d730192b1e724757a24c7a3347cbbe1fa8282edca003a50e5b55ab1f5fd2f20d674a16b4c56306f369ce928fc9de1a54982805e66cb6d553e14e28d91b93a5739336b13ae38dc83da99e8aa2d46033f6655f8a5a8f3909188ead314699112d09b22f5c08440e69d6231cd70988edb5746a418a33070dc79a9182c3c84c2378d0e97bc60c00e269483c00b4e0e8012670a5ea91217d3a70030088e3bb2b6154545242ea2a8df74b8c6b04bc7d008fc61623dcaaa3dd5e90d5a5c80f97bcd972b30c26f771cf7aabb075b587fe4c4393bf328d2f03465988b7ff096601cb9c7fe14b511f715ed8a47e57350b0c4d33565a320b43bedc4692b3e5e68da0fff58d4ce973b97ae246aee4b2cd73ea1cef371ce48d2c70c9d5eb55db4a622437e7fd1d1d90a0be453b30dc32aa58ea34544e6fb97553dd21dcea8f8ead596285ba25ae053efdbeea81e2bf8206572cded54a590704d43f15be0e26deeb1a214bd2b137d7fc10fbd90d5052bfabd3ab8e0b3d53c110445cf149f2576741514bed7e3e0c3c743c6dd87d4f21b12b0583bc1f3ccda2991e2145b51a518186ba4ee16d72213c4912b643430bcc25234a0aa1b496efbd9f56e82f22a08fe8c401593204831887881226068361f1f0a53140ab0a4b0e3dfdb5f273765238f0ab4ed658c0fe9885342a2eaa0d8884b84e4c11cea74dcbec52eb766e1d62fd0a60760a26f7ad7a89b6ae5c62f5502e64625b7dbb1b671bf50aadc901ccc9b9253a6f7bae72985a9abfba1f16a18bc79e44bd449afc932c304e7eddd5ae9f8964e729ee6f412e4868adf0966d239c7f40b3f05c349d96200df7320daa33fab9bc889234f29dc71189203fe2b15d05a073492e51ecf9e2596ff6d8c0ff7e0bbbb86abb237e7018a4add7d509c0083d6c15f9d11b2a07d2d624325a9924bdc1207fea0411276182dff463c401bf1df2b3f00c299ebf2563e770c6a3a1ff4c5b9a695679d32bcebe490f19a7aae698f8d39cbfdd8a36e788fd5a11bb1923de1e0384c46d7d7423db2489f3f9b6d4dcce9e49a58c36d77f4194731665a7691a00991d9bf96783130ba01ec68d797da9a9cdf1b6dd8689ed1dc157345a7bbaf3cb05f663fa18572dce7342fc7c7d33bd7d4f7ebd38bbcf4231dae7c9c2f0789f697ad1045678e10aedee8d5fbfcda68a1cf6ce7fe36721c5ab5053bc5cccdd0fe77265ce64f051c1ea8f93c77214545928bd872062af2439aabbaea5a0f9b89cb2e0fad57d5639ea070ffa00b52dfc305a3e560144ff87ccdfd21a01a4f6d6aa87cc097f5c56d54fa5d80511f1352b176d5336c716d2e661ba99d4c892e9bfbd34c1af0a2d6561606d3be391b27caf5faf0b364cf1f7ee59227f69437698e4d8e06014fe0bbaf874e", 0x1000}, {&(0x7f0000002d40)="1967f9386730fdf3e9a48298cb0e18dbd98154f7bef2e401503e47d9459908ded95dca8ea64e635cc57a6ab1c19f2c94f75aeac9c1e298291f3100f8b1cf59549695a510f1cf5cbab27b49512923c0c6108eeefe395f", 0x56}, {&(0x7f0000002dc0)="abd83818cbddab71f11f87cfe012411c91d2615202ed6da4178c61deb19771757447a1a6edf302506f208bfc23d3e4bd4c14c100bb8ddef8a418073d11e024df7e6ac1111cc94456b68c4b79b34644125a82a0852dd16474e68ee8acc9bc9bf257fffb430a60548701a98122a7329d87ff9db90f46b7fa3cf372fab7915c119dbc90c0960ad8343ca14bb4446b56db80acd5c1a6f53c9cd32cc52b1fabb0b5775f1707067f6fdd0573e5d36a112350659e60925b2db4b07e7cc2f944157937fb932ab6f8b1f80e5f18199d45d6ea32e4c3e929392f84111448137cbf535f", 0xde}, {&(0x7f0000002ec0)="c363ac279da6301d2e710853594e1c6326f8d56e7040a5fa704827e3f1d207a8018a528b8fdb6b5f05acfc3bca224301376f46b00ce525ddd74c951970e9a31bdb284a9382bdee590cee243c784e768de34db03f78c909769516db3b38d4324afded9933dda2c20ebf6beb4315e6d710b20a27b5353a78c1f3e694d56f4bf35557c210b1340bb93970e368514d992983f18e71179ebf658f4dce7752201e58fa6d4ea2d52defb137b415b73f491d3484a3e6820431b5931f96b0e63d0f996588d882386047653b3dde7ea5ee244f96168cae0f83d47c917d1fc3533e128de3e75b63cde7558a35019e9014aabaeaada46c00591d135b965a", 0xf8}, {&(0x7f0000002fc0)="b59819230522879a40403f03434b3070de71ba441359c8e2e192bac59dc45598ff56e25f506b44e1a85cbdab96be6269818f13eec5f14c83231d9aa8b744e15aa3ba2eae2393", 0x46}], 0x5, &(0x7f00000030c0)=[{0x78, 0x105, 0x7, "d445689646da0c33ae52e6b4f7b8e51f117796bee345610fd21ea00b3b26cd0a958ee4c5473ec2579d69d29dae6a25a27cc583e8eb22f393e1ab6ae07ab674e7b1678427b914139fa1afd0c6d2c11ae8bf0f9dca92355e0ba10fd5b0d9ca9a2504dba40e2f4f5e"}, {0x108, 0x10d, 0x557f, "9ece750c49abe22a998454acbf0b79076531abda22cbc72b6eabc041ee1587f119e428049326a1e5fa70b015e3841473149e50c729749847a607cc8869342d9764f6479737a69d8b20eef4a4b1f84840357cdcd66f105c8f8a226fbb7271cfe9600297ca11a92902117a32c5eeccd63cd5116d2a13815cad97084bea591c037bd416a807cf5e7e9f7aa56093e67c6ab878105b290c12b6622d9b5ccc09cb436d77b263cc8057bc4a11343c759e8f9352b6a1b5cd8fe9331f189f123d906e18d3ce9ec2fd6f7f99e93547e57dfcf22e9b2ed8b9be83b67593275e8acc43ac714d97d18efabcbfea0f3a685f4df2eb7ad1ad281417a5ec8c14"}, {0x50, 0x10f, 0x4, "ff68b0f77eafbd161a2dd94636ff2f40b89ae577a904821c2b3c71eae54a0634187808d443327c869e90d84ab852619ef30618c9aa823227e9a103"}], 0x1d0, 0x4000091}, 0x3}, {{&(0x7f00000032c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x7, @remote, 0x4}}}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003340)="066881b5f0565a75218f2fac03ef161316b99eaa821a80bdaaf87c53a6597df1281c72aeb694ecadd5273d5027221956132d7184a8b97f38f00f6138732ff86ac2330765038a1391366d765507dec9235418e36a79be7b3bbae5439cb8f92590b1fafba4f36389877d80452374aeb377d02f4ce0f60bd630dce17f46b522e1135a1f99fd3c1520d16abaca6af8b7552a61a1e4757b66", 0x96}, {&(0x7f0000003400)="09ae0f84b11779e6b49f4b4cfcd0be9630cadd21bbac1dc84e013817720ec4b1e5a931e81f692b2c38180af46eb8b281864dadeba4d73791f5f8ffc0ef40914956003e27d3121112265fee671389f63c96da3375dbe67d1924f6741aa69ace129937e6e2273b8bbaf6d7c5b4419f34c6ae5be22670e360eb3d0d340a1f2583f2da17d6c7e4a98ca13405ad425c7b63c1f227d552c3b6b50c7b4a8b2d202764d50ed8be0761d14b1b688d603673748fbc0d017d8c4cf58ba601cb7ef1bf1f8e8f664c167d25655d689ef9787751f52834b3cb416ca9cbaf87be4c57c7adbfa6f6", 0xe0}, {&(0x7f0000003500)="e312a4cb6bfd89056bc17e859f29e77d964cd69e56002bf931d68eaa2df49f097cc7d978513f60a88762726d95360ee2", 0x30}, {&(0x7f0000003540)="07678c0c0d122a188fa9410b2d0259d8dd7b972c02b761850a5d89965e0dbe488d0bf53f30a76f5acd006015ae8773c792651336f9a5ef7e70ad56ac772f4775260352c9ac0bd6986b95a6217808c518c0e11a96912ccab84d23216da272819f3488d97ec00fa16f3773c71e67b2ab69a2ae0f387c0149853670dcb6bbf5a13df5cc35673cee582bbe90ab0c488de0ef08b16c00c15402117541a8b793eb6cd3f135ceb23007ec7a56c60e4c4e6d47ed54ef8c920f83816f481995af1e96f8196d3b7974223ca3fb91d2b3d32c", 0xcd}], 0x4, &(0x7f0000003680)=[{0x80, 0x117, 0x3ad, "7c1d3c800b34bd227f2bfa8a137afdbe8f3949b60a7bcf091833335f3561a13c6362165f84a6a29ba55744120020eda8501c527e20c62cf83d0708b61e7b1830bf8b7326cd8790f3675b4f975791e08e6577de54736b6e1e4f5ec9a5ab6feed1cbcf78f26c7fe89074d8dd1b"}, {0xb0, 0x11f, 0x7, "e90769f858d268292cd7ec552980c5dda96997ca443dc612d50617d35aa1085fb51296ca030f28e9f54d6b149d5041d94005317bc239c5c7ba33b6fa1c745007de5cc72a556bb4b4cd42e77b03bbd585ca90f6356fa9ab445341ef79ce940e7cf0c58af6bc2d1a8a8cbda83094b7d1b5dac9a0438da094cc0b70c7f55ddcc2faddad79cf7eff76f593a5fa0182e29e7b3338222f5e1b35c06f7a54dc43e1dc80"}, {0xd0, 0x110, 0x7, "cb90b6d502ff07760be4b2251e54f031a3af789484ea040b399ed0bb64f649215c1b5dbe28ec76b4b68a5ed064dd220f2fef6f86ca99f28e7c6dc61015dd300975e30e2a2a12c16f4a4990a033569ce271d44c40cbe4d027f01c5f408dd87a429c42c353bb6019adf71a9410e77caa355ad9452e06fb5c09ac21f94f4e9a4fa93414d51ce8acfd9fe5ba0625d10f89fea3d4dedb30b6550f39aa21fa32e61c733162fe704378a3d18a689dc3c1015ad6454aac94c39df01b5cbd"}, {0xf8, 0x118, 0xff, "fab0d42b66f3a1e1a9f46f549a3666e1ee56cbe9c9c4117182c665693353a9f862199cd2fb3d902202dc33dbf18b930a7bf48d2540d45cdd780266c1af3517ab330992f90587c496560839d8a32af28c99858f65216d38ea9f5039a89101c063782d7541cb4d36a91c4e8c3a44844ea94e58e7856c2cfe4a9e2c6b707abb88bc71b977f7da8a139bc042be9918a5f91bdaa27ea9c501d59300448733d0e66e7f757f342f5f617a81cb5feec1e41ae85857b5ffd1b28c00ac6ac0ceff13b596eec465fbb850e12e28b4211268498857cb4dfeae5fb194bfe154ce1bc64a5b1946c9e717c68cdf3e73"}, {0x98, 0x117, 0x7, "c0702ceb2d32c29b742c59a0475ab32601feb4cfa2d3c8ca0f122062d2fa917bd83a8edd962e14080da4db0fa7e61fd28d228e8bcba438c181de845b87542944f23daff15d65e9573697c7105d9b722afdcfeb18b01f677c3456beb10770bdff4e2620125153ff38ce9075dfcc5539c81d06b539435a6746978554fc9d11f2fdf341"}, {0x1010, 0x88, 0x7, "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"}, {0x48, 0x111, 0x5c, "ebd6888ad22e3d23c6d7e1904bc2c00e56ff768a189fa8585f266555c34f4c872c99dcc2b7aac7a06c93ff6312f92dcbf84f42a9fee10035"}, {0x60, 0x10d, 0x6, "b439803e421542714ce116e4a6d6f0b366a1234a346253022ea2a115ce976005cf9122b960324173950e99b730a80340819723c0c2d2cc79966d370c2e743ddd6cd709f8ef4429ed9e21ae"}, {0x1010, 0x10c, 0x6, "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"}], 0x2458, 0x80}, 0x4}], 0x4, 0x4000010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x0, 0x70, 0x4, 0xf44, 0x4, 0x1000, 0x0, 0x400, 0x400, 0x1, 0x3ff, 0xfffffffffffffffb, 0x81, 0x100000001, 0x9, 0x5, 0x8000, 0x0, 0x101, 0x100, 0x2, 0x9, 0x1, 0x3, 0x2, 0x4, 0x0, 0x100000000, 0x401, 0x3, 0xfffffffffffffff8, 0x2, 0xb995, 0x7fff, 0x2, 0x6, 0x8, 0xdfd, 0x0, 0x4, 0x4, @perf_config_ext={0x87, 0x4085}, 0x100c, 0x81, 0x1, 0x7, 0x7ff, 0x100000001, 0x101}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7d, &(0x7f0000018000)={0x0, @in6}, &(0x7f0000000000)=0x76) 20:07:05 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:05 executing program 2 (fault-call:3 fault-nth:9): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:05 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000300", @ifru_names="04707000"}) [ 445.403949] FAULT_INJECTION: forcing a failure. [ 445.403949] name failslab, interval 1, probability 0, space 0, times 0 [ 445.415463] CPU: 1 PID: 23569 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 445.422503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 445.431878] Call Trace: [ 445.434509] dump_stack+0x1c9/0x2b4 [ 445.438200] ? dump_stack_print_info.cold.2+0x52/0x52 [ 445.443434] ? perf_trace_lock+0xde/0x920 [ 445.447622] should_fail.cold.4+0xa/0x11 20:07:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0xfffffffffffff000) [ 445.451719] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 445.456858] ? find_held_lock+0x36/0x1c0 [ 445.460979] ? lock_downgrade+0x8f0/0x8f0 [ 445.465170] ? find_held_lock+0x36/0x1c0 [ 445.469315] ? check_same_owner+0x340/0x340 [ 445.473669] ? unwind_get_return_address+0x61/0xa0 [ 445.478628] ? rcu_note_context_switch+0x730/0x730 [ 445.483595] __should_failslab+0x124/0x180 [ 445.487866] should_failslab+0x9/0x14 [ 445.491700] __kmalloc_track_caller+0x2c4/0x760 [ 445.496399] ? save_stack+0xa9/0xd0 [ 445.500059] ? save_stack+0x43/0xd0 [ 445.503727] ? kasan_kmalloc+0xc4/0xe0 [ 445.507644] ? kmem_cache_alloc_trace+0x152/0x780 [ 445.512519] ? mount_fs+0xae/0x328 [ 445.516092] ? v9fs_session_init+0xdd/0x1a80 [ 445.520624] kstrdup+0x39/0x70 [ 445.523879] v9fs_session_init+0xdd/0x1a80 [ 445.528148] ? find_held_lock+0x36/0x1c0 [ 445.532286] ? v9fs_show_options+0x7e0/0x7e0 [ 445.536739] ? kasan_check_read+0x11/0x20 [ 445.540919] ? rcu_is_watching+0x8c/0x150 [ 445.545110] ? rcu_pm_notify+0xc0/0xc0 [ 445.549045] ? v9fs_mount+0x61/0x900 [ 445.552794] ? rcu_read_lock_sched_held+0x108/0x120 [ 445.557844] ? kmem_cache_alloc_trace+0x616/0x780 [ 445.562768] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 445.568533] v9fs_mount+0x7c/0x900 [ 445.572118] mount_fs+0xae/0x328 [ 445.575522] vfs_kern_mount.part.34+0xdc/0x4e0 [ 445.580129] ? may_umount+0xb0/0xb0 [ 445.583776] ? _raw_read_unlock+0x22/0x30 [ 445.588013] ? __get_fs_type+0x97/0xc0 [ 445.591945] do_mount+0x581/0x30e0 [ 445.595550] ? copy_mount_string+0x40/0x40 [ 445.599818] ? copy_mount_options+0x5f/0x380 [ 445.604253] ? rcu_read_lock_sched_held+0x108/0x120 [ 445.609295] ? kmem_cache_alloc_trace+0x616/0x780 [ 445.614163] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 445.619749] ? _copy_from_user+0xdf/0x150 [ 445.623923] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 445.629785] ? copy_mount_options+0x285/0x380 [ 445.634308] ksys_mount+0x12d/0x140 [ 445.637979] __x64_sys_mount+0xbe/0x150 [ 445.641976] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 445.647017] do_syscall_64+0x1b9/0x820 [ 445.651013] ? finish_task_switch+0x1d3/0x870 [ 445.655593] ? syscall_return_slowpath+0x5e0/0x5e0 [ 445.660605] ? syscall_return_slowpath+0x31d/0x5e0 [ 445.665554] ? __switch_to_asm+0x34/0x70 [ 445.669728] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 445.675115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 445.679985] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 445.685213] RIP: 0033:0x457089 [ 445.688426] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 445.707342] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.715069] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 445.722352] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 445.729635] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 445.736985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 445.744273] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000009 20:07:06 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001680)='/dev/cuse\x00', 0x200, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000640)=""/4096) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000540)={'mangle\x00'}, &(0x7f00000005c0)=0x54) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=[&(0x7f0000000040)='cgroup.procs\x00', &(0x7f0000000080)='cgroup2\x00', &(0x7f0000000100)='cgroup.procs\x00'], &(0x7f00000004c0)=[&(0x7f00000002c0)='cgroup.procs\x00', &(0x7f0000000300)='bdev#]\x00', &(0x7f0000000340)='cgroup2\x00', &(0x7f0000000380)='cgroup2\x00', &(0x7f00000003c0)="b92d7d25256370757365746370757365747070703000", &(0x7f0000000400)='{\x00', &(0x7f0000000440)='trusted(\x00', &(0x7f0000000480)='-!%(\'cpuset\x00']) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:07:06 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:06 executing program 2 (fault-call:3 fault-nth:10): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x2) [ 445.931602] f2fs_msg: 20 callbacks suppressed [ 445.931617] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 445.943828] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 445.975930] FAULT_INJECTION: forcing a failure. [ 445.975930] name failslab, interval 1, probability 0, space 0, times 0 [ 445.987675] CPU: 0 PID: 23618 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 445.994734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.004107] Call Trace: [ 446.006727] dump_stack+0x1c9/0x2b4 [ 446.010392] ? dump_stack_print_info.cold.2+0x52/0x52 [ 446.015614] ? perf_trace_lock+0xde/0x920 [ 446.019787] should_fail.cold.4+0xa/0x11 [ 446.023870] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.028998] ? save_stack+0x43/0xd0 [ 446.032645] ? kasan_kmalloc+0xc4/0xe0 [ 446.036605] ? __kmalloc_track_caller+0x14a/0x760 [ 446.041470] ? kstrdup+0x39/0x70 [ 446.044853] ? v9fs_session_init+0xdd/0x1a80 [ 446.049282] ? v9fs_mount+0x7c/0x900 [ 446.053021] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 446.057849] ? do_mount+0x581/0x30e0 [ 446.061584] ? __x64_sys_mount+0xbe/0x150 [ 446.065747] ? do_syscall_64+0x1b9/0x820 [ 446.069829] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.075464] ? find_held_lock+0x36/0x1c0 [ 446.079571] ? check_same_owner+0x340/0x340 [ 446.083910] ? unwind_get_return_address+0x61/0xa0 [ 446.088861] ? rcu_note_context_switch+0x730/0x730 [ 446.093817] __should_failslab+0x124/0x180 [ 446.098073] should_failslab+0x9/0x14 [ 446.101893] __kmalloc_track_caller+0x2c4/0x760 [ 446.106576] ? save_stack+0xa9/0xd0 [ 446.110239] ? save_stack+0x43/0xd0 [ 446.113882] ? kasan_kmalloc+0xc4/0xe0 [ 446.117785] ? kmem_cache_alloc_trace+0x152/0x780 [ 446.122650] ? v9fs_session_init+0x115/0x1a80 [ 446.127167] kstrdup+0x39/0x70 [ 446.130408] v9fs_session_init+0x115/0x1a80 [ 446.134758] ? find_held_lock+0x36/0x1c0 [ 446.138854] ? v9fs_show_options+0x7e0/0x7e0 [ 446.143292] ? kasan_check_read+0x11/0x20 [ 446.147460] ? rcu_is_watching+0x8c/0x150 [ 446.151624] ? rcu_pm_notify+0xc0/0xc0 [ 446.155540] ? v9fs_mount+0x61/0x900 [ 446.159271] ? rcu_read_lock_sched_held+0x108/0x120 [ 446.164308] ? kmem_cache_alloc_trace+0x616/0x780 [ 446.169171] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 446.174751] v9fs_mount+0x7c/0x900 [ 446.178316] mount_fs+0xae/0x328 [ 446.181709] vfs_kern_mount.part.34+0xdc/0x4e0 [ 446.186309] ? may_umount+0xb0/0xb0 [ 446.190039] ? _raw_read_unlock+0x22/0x30 [ 446.194267] ? __get_fs_type+0x97/0xc0 [ 446.198198] do_mount+0x581/0x30e0 [ 446.201785] ? interrupt_entry+0xb1/0xf0 [ 446.205905] ? copy_mount_string+0x40/0x40 [ 446.210219] ? retint_kernel+0x10/0x10 [ 446.214328] ? copy_mount_options+0x213/0x380 [ 446.218862] ? write_comp_data+0x11/0x70 [ 446.222957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.228527] ? copy_mount_options+0x285/0x380 [ 446.233058] ksys_mount+0x12d/0x140 [ 446.236720] __x64_sys_mount+0xbe/0x150 [ 446.240727] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 446.245773] do_syscall_64+0x1b9/0x820 [ 446.249693] ? finish_task_switch+0x1d3/0x870 [ 446.254242] ? syscall_return_slowpath+0x5e0/0x5e0 [ 446.259232] ? syscall_return_slowpath+0x31d/0x5e0 [ 446.264222] ? __switch_to_asm+0x34/0x70 [ 446.268304] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 446.273719] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.278622] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.283845] RIP: 0033:0x457089 [ 446.287062] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.305979] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 446.313725] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 20:07:06 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x6}, 0x8) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 446.321019] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 446.328300] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 446.335583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 446.342861] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 000000000000000a [ 446.359102] attempt to access beyond end of device [ 446.364172] loop6: rw=12288, want=8200, limit=20 20:07:06 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x0, 0x8c, 0x1f, "40e453d666a5ba3a86bc5edd0f1d663e5291d2572c1a1f55c2761d44f22daf9f7c9ae31d78b3b6e6e22940d96db92a08d42eb443ace14bb37d049ac2918ebe", 0x5}, 0x60) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 446.390260] F2FS-fs (loop6): invalid crc value [ 446.397689] attempt to access beyond end of device [ 446.402962] loop6: rw=12288, want=12296, limit=20 [ 446.435209] F2FS-fs (loop6): invalid crc value [ 446.439960] F2FS-fs (loop6): Failed to get valid F2FS checkpoint 20:07:07 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) splice(r0, &(0x7f0000000540), r0, &(0x7f0000000580), 0xdf00000000000, 0x1) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) syz_mount_image$reiserfs(&(0x7f0000000140)='reiserfs\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x4, &(0x7f00000003c0)=[{&(0x7f0000000280)="f3e9b0d2180d850eb4d53aef53d093235f124abe430727591deb6bd9f6717d0c7c1a12ac4e25bb9a9f46473c6ddced49a99a9b80c36d59394320768119f752c4353e59cc6894b94c39391addc79e2a8fae554aa6c6abe70d59ef69da37cedff709b156943f99fa886feaf50f805688ddaff007a4d556d032a3bef6d2ecfcd7f23adf436e1a8e4198f1af57a076ec64f3b51e39e28f4ee359d8581d2062c1f9", 0x9f, 0xa89}, {&(0x7f0000000640)="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", 0x1000, 0x80}, {&(0x7f0000001640)="ef1c856e5d60a315f5dccea00378b41bd3b26b202b3cc2837a5c0bfec0c165ce70438c5ea5db3f063bc2848b1b60838a369a3f05c19187dc6464581623ad19be016684603d11bc18b3b914a088c4abcd28d947d4cad20b910ab1e204720f775914ed88f056d2c50304d2568ef11bc843af1e117e937f681bfd472ad67048e518bbd2f0553341c4003d9c7f8a6914960568dbdb929549e263b74ef73ead1af246c0c2262287d75cc3c42cbbaa1e4469ebfca696e5aaafef7fb00c30b55d03e9453e59e998737a551a5b476a96cf4618f777f55c64dda2531bd52cec1b99b91cd250b03dfd7cbb6c9cb41a43d238b407846cac20a2cffc546035c3dbae2b4fedfbea83ad784ec730f380613b199565a7080b6e5b0e1cc39451b10df939b7906d3b8ddc2e4babe1857305f43e7ece102cbabc6e0571ad32bf17f8455392779b9ad0b7333a9d8f921541aa9c11d6fbd8438854d3dcd4bdfa701693afc526471666bf4733caf34f83792557e1b8e7f27b82b03ea3632a9be66ed9af5d912f7927234d41ab4f0f40a42e373afdd0b9e9b8332ec10650fc0ff2c1d541fc57ebddbbafac11f0b97e11d31eb65db3dac0e9377b6945f1a25c19561cc79ee8c9101a6b8335e98e7e9d456905d5a59c91349d003f33616cca02f520524a5303818bc8d4d452afaf0655c4c7bc8723793d0a07b5f4878196b1cb267d64282b67e94bd43ed3db2e748cb276e36314d05e9314ba75042dffcff32809646af5d0f8cb58ad12bdf2f85ee836aa7a62bbd2366bb037b188b39ba0d5b188308fa8ee705518fad1cd282742432cceb86a82281e0fdd34f2c59de302421ec9cf0d606ce93504d1478232a4da413934601065f26150c89ffc323971b353f6301106f38263e079a85849f3f4ca020806dbeda99b34e8ad8ffcb259e881b111a0c781929c9313f4670377359446668d0ecb0b748e569cdfaf8888d88558c483501c64296740b84dcf61918f57cee1f82edf5a2199f577ba2be2ae3254fb0c121cad85031dcf72017c8318fb0651c2fe43ba208fe6d28deb9f5ed93d2e8b429c9fa72a74d61bb7eb24f9fcb54aa8b838a282402855e61108903d2ad081c4593662656213200113f118a3ba4286e86767a25e7ec53c3b8e9b9ec60935e854c3c6d8fe9637e8be52056a5383d964d99e526df4cc44c231438ecd025539d447e4132922199f4604cc3b2c21edaf20907a91e5fac28dc1a702ca69794f8ea100e85efdc9b1c173ec9b08590c37bf16a0ffffd8b6840ce7c1e1ae89d5130661fa3caf3ac5f2e5eeefc6604829cc698d221e40a3b6082b2fae690fcdaa8bcc08711a23877ee19e24547ce4f61648d00b504c1307c942bc0a2027abc85112cf33baf97cde9db9097e2b24f0e24e30f0dea30a4cb74be5c000ee885cbab0b2da01564ed1f10590628b3ebe6aa64f0bea2de709536fbe5d8827b0dba022a06341a6ec04d28fbf4adf101ff72b731373135f00629fa0673b07b0b235b1f158d71bae51eb5d87f5a9d1c8bec6576f7218b9e4efaa888d9586bab126c859ba5edb057015a4c4d0d11df8abac7d17cda1de84ad60f95af68d37eafed91887b0304fed7e14b884f64fef93868dffafdd266b47ed8a3693d95f8483f8de9cd2b9e2c0d35fec51872f675e737d3dd9dc7f57fd3b48a5270a68a4481b04fdccfa520dc7b06ccf41e80fb117741564b23b564fdd30a749aa4e8497e3d400751d1be02850ba845f477d240ebcc41fea99d0031244079a36c2ff58cb46553d67d8b4ed94a818718fb4ab1438dd825414e2f05f31e6472068e45c9cfc7a1eb8281d6ef32f279143f16b596fd3e7c5c8dffeaa02b430ba1087e533b2e9e0e4d488d9230d2245c70e6b137f4c256b59d623b3b2350a53dd6d70502f17a88490a455a966b549b04644278b4a2fb8095dd56811ed53b71325ad294e474710f973dfbcb40d55f7715f4907965bc059a058eb11ca312b6b72d5d5e67b5be374142cce15299e76e65b549cb1500f9270976c424ae307263dbb25adfe3ebe7cfcab21a4c0cca7dfd591d1822db8512d82448e1fd139f81c40bce740e76126e2d23ed91c172f1bb4a6de7f3090a8a817355956c09c7d762718e7665a835f1f34a91aa485009823a51718a601d6e6fdc54ab1354404c720deb9fe353a90d058611c640c30bd24af9aebfeeeb83a8c6bda7e9b9f73340d13843b0032e290057223b28ff2e5f08ac6fc148363750904c3d06cf25f0ff879bb723d13236b18b8cbca31e66b475f806d63e8e45434bb424134a70a10ce63c04fb5c133dd2d4d7afa088d41310eb009348eb6f8ba12b2fcdd0791f00a92d6e72821c80ad060aba636c3fc60510a21c3bc8903872126c04302508c46ddea956c98118e9f40434739dea5182a48930ba49e6601432b3a52c20e8f9af457ce22d79948bd593e327c88afde656c43683858ea286b2d3bfcf86b5876d265c5661cc70c4220eecb09672381079cb951355d6e3759e8ec4752ac0a8f87921c97e25fdd187ba252614c28e14ea20e65b53310fe1a2ea5696a057b79e00978917971e3f87aff781ca53863891003be529c14904fed3cd5f68492290d2a80e076afdd7fc08ed9411b1d9937085d8f16c130c6e8ac66501a5685b320c3cc04a8b43a80294fe09f492f05bc1817de3eaec6c238ebd1b37fdd5276cf99a6eacef0520a100c5b0be8be710842f7e5aec6e775c4926bf9f54b6690193c742bf35c2e553774bed4f8c6dce1f49276ef5baad41ceb3393fb21e1c1d5e367ce916996af75ffb0a4f9f7557a27f0558999091f880dd31382302d90ba1da246c8d748087fbd5854336984559b40032177544fcc8bfe33da8fba3df39e748b7d5a76b5f19f09fc9c18659474140d9946916a878b33b4c158ae06bced0c74d58e05790ed1e79d85866c091a5aea8daa5167a25cb24851ae91a1ffad21def84c35e10ba1455c14123891067706243b5107f14841d39b85fcaf76a366a6f2e81df47f35cea7404c05348e098a204f509016847825e968b5e4f8a4d9eacb9d38e8404884f25cda4e39f645ff56ef7f103407d40bca9c5ee237fa9bd358206b22e61246bbb61ab94785bc0b276c335f8afb32f43ff624439a9c97f52c37e1ab3115b0d4b82403b4e5eb4ef3e3b1e2159f0331e1c99af6d7e084afbad887ae4e3439a35166a09b0f929faafbab51f59b8a7d4eedff9b4569d0c87a18eff287ddbc67c36579a4dc1368e8c84628cbcc93dfb8d3b6381cce1be89c0841b7cb96b74048eb089ffa21808a82e430474e79474ba65116b458743e2a05bddf563185882589a3bdbf182e170db8ca58ae42cd10aa01b35862133effae4970a7c9605ff26c8efd1281d0d4f033675b8d8e1e08f8533446d5ced7dc0df67f1633a8372f8ab9550c8f64829e7ae226c8f11fd963e743714bc95887b0af7662c946333c2be603a25d14ff8caa120dbfb7bb29ac993b89bb1e1ba34accdcea0d6d6972788689e43e1bf6c1439ed87d1bc6e7d5cc8110b0ed2ec7b3f6d3c9771ed620a7628f358c6e9cd8cb988a48e2f1900bc5c0461f57763189002d8810d3250ba4f1f7b885b5c7f27ae05bc99aa045864e11b6cf68d24eddb3c02479f9fe9b7bc468098da1764686641fcecb441b994101380d45bea895d18511bf832e549d05145dd80896ea916f295fbcd732967f382664accdc68b4700f70c8ca32c4be7488596a1e0419b275b2a0e53b247fb4a62d53c3d746c8cb21f689a0c0388b18c1662497b2a7dcee239c0e49fbe79927deb204e0321bd340bbcaeeb17caf02973c8c79e41b75b347852576b9ee3c5c2aff4d0bd3a6067370b94a656d3272f0fbd365a21cf9f81597e3b53e94b8b19e21f9c77f392c7d61afac2941babac54bd76bfa0d2a169baf8f036b2b910d021036d64d67696e19f699343a7a267f76c7fdc8c6363e52c680669bdec3f1be7cf969030331024564381e7bc3170059f6437383ab386f261007e822395d7c4d95ee44d8e5e764a1f2ca5a82850fe15a6acc8ca531a89e75c7af74ce73826adce15ceff99b16652749314387f6ec4a425a8fa10972819eb8a892d4fac7a9be99f0b15142d70506234bff96edd9446dc6f9ae4048b1aa0d2f5b5b578babf62bb8d8d0b95bc5db0c3c275241ff9ee1858dde87e4f5c4251d48c4746d7c97cc6192ed8a8f3cb76096b51615de8d1b56aa99e920f3256bd301c2dccf5341e15762bc35b966b4ac4782ac8f2b69f530a2bc5598298f95244ae231c812c268a2616ba258e7a8667de7a3589ad2c44b98f3a6abf4783cdb39812a27de542c7a842344c7a042c3698b610fc21b624248561370cf7d1dd04f9a3ac97ae3b819ddd7d750fde1c7ffe1f107f070211eead4ad68caa8d507dbb6d35c10580ab9a4180f4e9885d889d58d618dbd006b4f029d5e766afbda23bdaa38aa81ed8295a07b35fca8e3fc6ed815fa8dee8545cd80b026d9f15e29ea690d8967add04ab0680d3fd6212208a332606c428e6919e4b86fecc7ee5eae22b10aa1936b95aac07934959aaef8b7467b776c0ee1e9a178f47cfd6086a467abff1786117eaaded88b912e0091df19adc710793fba589ba7e159cb82279b475e7adcd9440a3a896d5f05f38aae93eecff8419a148d0e1518de9d5753ee0aa4e02434e051f3190bd257f9b252e1e2f81f7789d71d27309b4f1d66efe155c7c8ac26291ba86af7e7a3460786eadc325daf1797bed35746ec8354331f92821639b923f9ff1b1e9c1fb02245f04e65dcc91bee191e4cca3a4ea3edee9225ce0f5dd652abb39fe07390c1eae1514024d7e53336c0eb4affe615a111738236469f377ff2834e59b40e9d3dffba0da317874c6eb35ef4ee1990aa9532ed1d21209bee95586408fac846189ea32bf24794dfbb9e1c4c1116cab4d6fe586020dfed0978585ffe08fac78a8c7673bc16bbfa7755b8eed62c9c44caaa75c664d59bd78b8d69e688ca866f05b3e3239d4ff74b007bf0ba40a7e580218ccb6cfde779188d2bd3c5bc66b75d418272956659b8f6db95242cdb958717193eea6f73406ceccb03eb44d35ce8d0040ffe810ece429d9b713f50d260ae44fa2351a876aa3330645bdd343be2a1152f69befc06a47b34eb0de22fa1e19273a96ee3fbbb39a6ea5a44f5e7279a4874989e6b1e6211e6fd7e42214fee0cb361fbd5d31a30f4d20fa1f5c572c0fba4c5d3ae3f7ef95ae32438672751f38b3ed9e52d7802ad12d85bfc9f181596bb1536145a4ebd423ba5b70925c412b9f1b60b23851b2c01a25d337f03693854e6a3045d5a87699e6cd9c3d978506e4a7bf7800d580d269a96180a1461cec6683dca7c8f8b0282f63af6bde03ecfca42db48ff78fa6c5300653e45e9232d0b6bd4137b2af2060ff2889671cfc3975b21cb5890feca76ff82c6d06d5e77844bb2fd1421f5e1ca7b8d73d23bf678db0bbe0307417babe1585c90e5ede4e9fc0c2a167ad8de6772579c0148c72f24442ece506faf2a38384c435a8285d9db22170ff3e4bb8f8bb6ddae0e2b89d279cc7fce34c1891fd7bbd20e5377aeb61a784a5b8677ab49af1bea911bc1045d410d5d31a442fbb26702629e8bed096df19b11410e99cae9954fbe02eb88a515088d3133e3754f84b8383d5f67f9a504ef787fd659d2299bf5700c8d41d73528a23a2a13afd69919fe6bfaebc4a368fb496ad3ac943ff62d4b57c7344dbd9f5683252dcb56576b1724bdefa0176b92ac758723c34d938f0807ad985557fa0e01774f791c72aec842195a662", 0x1000, 0x3f}, {&(0x7f0000000340)="42c82e32d753e33063eb157b317566a684f41decc6ba83f41294b6db9505f53c644721cf56edf8ea843dbf659d5943cb40f96ac6599c4704f1519c5e302ea009575adb1219ccdaea60c515e1b0e080dac871afdfa6", 0x55, 0x9}], 0x2080, &(0x7f0000000440)={[{@grpquota='grpquota'}, {@tails_off='tails=off'}, {@errors_ro_remount='errors=ro-remount'}, {@notail='notail'}, {@barrier_flush='barrier=flush'}]}) r3 = gettid() ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f0000000480)) socket$inet6(0xa, 0x3, 0x72) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x1, @multicast2}}, 0x1e) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000004c0)=0x10001, &(0x7f0000000500)=0x2) tkill(r3, 0x101000000000013) 20:07:07 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:07 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000003", @ifru_names="04707000"}) 20:07:07 executing program 2 (fault-call:3 fault-nth:11): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 446.478409] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 446.485608] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock 20:07:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000340)="d9fc66baf80cb81467128cef66bafc0ced66ba4000ec66baa00066edf30f520c400f01cb640f01ca66b8d6000f00d8c744240000000000c744240204000000c7442406000000000f011c24b9800000c00f3235000400000f30", 0x59}], 0x1, 0x0, &(0x7f00000003c0), 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x0, 0xffff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpgid(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') ioctl(r4, 0x7c3, &(0x7f0000000180)="857571f221caebaa7a436dea699478c6cd03b99047a19c9024d14da5eb90b9b7e86a1e2a4933b5642f4228bf70d9c2ddce49fa686f4a80b8bfab0862bb0a1d403d1b5eb8f85d050bfa8b5009d4d78cf3a8adb9484bcdf6b402cb637a17e5380410c062d6c9b77bb3394e78d60c8bd5ac494c83b62c2cbf4611200f70da5a3c5d357550a5f7dcdf460b5b3c47767b4d344d56933b827dfa87028e94ed417be9a6bb9736c8f1bcfcb792020d68c578457d53b85c1ac7663e901949040cffc30e38545fd5") readv(r4, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x8000000bd, 0x0) [ 446.571429] attempt to access beyond end of device [ 446.576603] loop6: rw=12288, want=8200, limit=20 [ 446.584917] F2FS-fs (loop6): invalid crc value [ 446.594292] attempt to access beyond end of device [ 446.596925] FAULT_INJECTION: forcing a failure. [ 446.596925] name failslab, interval 1, probability 0, space 0, times 0 [ 446.599334] loop6: rw=12288, want=12296, limit=20 [ 446.602852] F2FS-fs (loop6): invalid crc value [ 446.610686] CPU: 0 PID: 23643 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 446.615545] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 446.620081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 446.620087] Call Trace: [ 446.620108] dump_stack+0x1c9/0x2b4 [ 446.620127] ? dump_stack_print_info.cold.2+0x52/0x52 [ 446.620152] should_fail.cold.4+0xa/0x11 [ 446.658116] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 446.663263] ? find_held_lock+0x36/0x1c0 [ 446.667362] ? check_same_owner+0x340/0x340 [ 446.671698] ? __kernel_text_address+0xd/0x40 [ 446.676225] ? rcu_note_context_switch+0x730/0x730 [ 446.681192] __should_failslab+0x124/0x180 [ 446.685450] should_failslab+0x9/0x14 [ 446.689268] kmem_cache_alloc_trace+0x2cb/0x780 [ 446.693949] ? save_stack+0xa9/0xd0 [ 446.697613] p9_client_create+0x114/0x1770 [ 446.701881] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 446.706651] ? do_mount+0x581/0x30e0 [ 446.710378] ? __x64_sys_mount+0xbe/0x150 [ 446.714540] ? do_syscall_64+0x1b9/0x820 [ 446.718620] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.724002] ? p9_client_read+0xc60/0xc60 [ 446.728163] ? find_held_lock+0x36/0x1c0 [ 446.732279] ? __lockdep_init_map+0x105/0x590 [ 446.736791] ? lockdep_init_map+0x9/0x10 [ 446.740870] ? kasan_check_write+0x14/0x20 [ 446.745119] ? __init_rwsem+0x1cc/0x2a0 [ 446.749282] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 446.754320] ? rcu_read_lock_sched_held+0x108/0x120 [ 446.759568] ? __kmalloc_track_caller+0x5f5/0x760 [ 446.764426] ? save_stack+0xa9/0xd0 [ 446.768074] ? save_stack+0x43/0xd0 [ 446.771709] ? kasan_kmalloc+0xc4/0xe0 [ 446.775603] ? kmem_cache_alloc_trace+0x152/0x780 [ 446.780458] ? memcpy+0x45/0x50 [ 446.783758] v9fs_session_init+0x21a/0x1a80 [ 446.788097] ? find_held_lock+0x36/0x1c0 [ 446.792203] ? v9fs_show_options+0x7e0/0x7e0 [ 446.796635] ? kasan_check_read+0x11/0x20 [ 446.800797] ? rcu_is_watching+0x8c/0x150 [ 446.804956] ? rcu_pm_notify+0xc0/0xc0 [ 446.808866] ? v9fs_mount+0x61/0x900 [ 446.812598] ? rcu_read_lock_sched_held+0x108/0x120 [ 446.817628] ? kmem_cache_alloc_trace+0x616/0x780 [ 446.822489] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 446.828044] v9fs_mount+0x7c/0x900 [ 446.831609] mount_fs+0xae/0x328 [ 446.834997] vfs_kern_mount.part.34+0xdc/0x4e0 [ 446.839598] ? may_umount+0xb0/0xb0 [ 446.843240] ? _raw_read_unlock+0x22/0x30 [ 446.847398] ? __get_fs_type+0x97/0xc0 [ 446.851309] do_mount+0x581/0x30e0 [ 446.854868] ? copy_mount_string+0x40/0x40 [ 446.859127] ? copy_mount_options+0x5f/0x380 [ 446.863550] ? rcu_read_lock_sched_held+0x108/0x120 [ 446.868581] ? kmem_cache_alloc_trace+0x616/0x780 [ 446.873446] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 446.878998] ? _copy_from_user+0xdf/0x150 [ 446.883168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 446.888736] ? copy_mount_options+0x285/0x380 [ 446.893251] ksys_mount+0x12d/0x140 [ 446.896894] __x64_sys_mount+0xbe/0x150 [ 446.900882] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 446.905914] do_syscall_64+0x1b9/0x820 [ 446.909812] ? finish_task_switch+0x1d3/0x870 [ 446.914321] ? syscall_return_slowpath+0x5e0/0x5e0 [ 446.919268] ? syscall_return_slowpath+0x31d/0x5e0 [ 446.924227] ? __switch_to_asm+0x34/0x70 [ 446.928303] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 446.933685] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 446.938547] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 446.943745] RIP: 0033:0x457089 [ 446.946954] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 446.965864] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 20:07:07 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4000, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0xe7, @remote, 0x7e21, 0x2, 'ovf\x00', 0x2a, 0x4, 0x4a}, {@empty, 0x4e22, 0x2, 0x3, 0x0, 0x5}}, 0x44) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'vlan0\x00', 0x3ff}) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000400)={'broute\x00', 0x0, 0x4, 0xd2, [], 0x5, &(0x7f0000000280)=[{}, {}, {}, {}, {}], &(0x7f0000000300)=""/210}, &(0x7f0000000480)=0x78) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="6f73782e7765637572697479707070312d6d643573756d656d3000ed669bf41266062ffc9dd1cd7fc5190893d2c43e23cc4385d9d8af66d1c047a60942ed0970f5498c7ba1bc877e4b57556605595d346f642b15593a3fa3570393eb3dcfc9ac4f11f779eaf5c6822bafd2b8971083f4efd76159138860ceef9ce4736f64260c2def3782ecece4de3ddeb02e9e823d3ece733c1472fddc3eb2f709a2ffa62356963f563c3016193e12"]) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000580)={{0x2, 0x4e21, @broadcast}, {0x306, @local}, 0x0, {0x2, 0x4e22, @multicast2}, 'yam0\x00'}) [ 446.973585] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 446.980863] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 446.988139] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 446.995416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 447.002699] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 000000000000000b 20:07:07 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fsN', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:07 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:07 executing program 2 (fault-call:3 fault-nth:12): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 447.194538] FAULT_INJECTION: forcing a failure. [ 447.194538] name failslab, interval 1, probability 0, space 0, times 0 [ 447.206121] CPU: 0 PID: 23668 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 447.213165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 447.222559] Call Trace: [ 447.225170] dump_stack+0x1c9/0x2b4 [ 447.228852] ? dump_stack_print_info.cold.2+0x52/0x52 [ 447.234073] ? kernel_text_address+0x79/0xf0 [ 447.238508] should_fail.cold.4+0xa/0x11 [ 447.242591] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 447.247719] ? save_stack+0xa9/0xd0 [ 447.251365] ? save_stack+0x43/0xd0 [ 447.255006] ? kasan_kmalloc+0xc4/0xe0 [ 447.258917] ? kmem_cache_alloc_trace+0x152/0x780 [ 447.263782] ? v9fs_session_init+0x21a/0x1a80 [ 447.268294] ? v9fs_mount+0x7c/0x900 [ 447.272025] ? mount_fs+0xae/0x328 [ 447.275584] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 447.280352] ? do_mount+0x581/0x30e0 [ 447.284086] ? ksys_mount+0x12d/0x140 [ 447.287902] ? __x64_sys_mount+0xbe/0x150 [ 447.292072] ? find_held_lock+0x36/0x1c0 [ 447.296195] ? check_same_owner+0x340/0x340 [ 447.300535] ? kasan_check_read+0x11/0x20 [ 447.304711] ? rcu_is_watching+0x8c/0x150 [ 447.308872] ? rcu_note_context_switch+0x730/0x730 [ 447.313812] ? rcu_pm_notify+0xc0/0xc0 [ 447.317720] __should_failslab+0x124/0x180 [ 447.321973] should_failslab+0x9/0x14 [ 447.325792] kmem_cache_alloc_trace+0x2cb/0x780 [ 447.330480] ? kmem_cache_alloc_trace+0x616/0x780 [ 447.335378] ? __lockdep_init_map+0x105/0x590 [ 447.339901] p9_idpool_create+0x42/0x190 [ 447.343981] p9_client_create+0x286/0x1770 [ 447.348252] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 447.353024] ? do_mount+0x581/0x30e0 [ 447.356756] ? __x64_sys_mount+0xbe/0x150 [ 447.360948] ? do_syscall_64+0x1b9/0x820 [ 447.365031] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.370420] ? p9_client_read+0xc60/0xc60 [ 447.374589] ? find_held_lock+0x36/0x1c0 [ 447.378689] ? __lockdep_init_map+0x105/0x590 [ 447.383225] ? kasan_check_write+0x14/0x20 [ 447.387480] ? __init_rwsem+0x1cc/0x2a0 [ 447.391474] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 447.396511] ? rcu_read_lock_sched_held+0x108/0x120 [ 447.401542] ? __kmalloc_track_caller+0x5f5/0x760 [ 447.406393] ? save_stack+0xa9/0xd0 [ 447.410029] ? save_stack+0x43/0xd0 [ 447.413668] ? kasan_kmalloc+0xc4/0xe0 [ 447.417569] ? kmem_cache_alloc_trace+0x152/0x780 [ 447.422425] ? memcpy+0x45/0x50 [ 447.425731] v9fs_session_init+0x21a/0x1a80 [ 447.430073] ? find_held_lock+0x36/0x1c0 [ 447.434158] ? v9fs_show_options+0x7e0/0x7e0 [ 447.438607] ? kasan_check_read+0x11/0x20 [ 447.442765] ? rcu_is_watching+0x8c/0x150 [ 447.446923] ? rcu_pm_notify+0xc0/0xc0 [ 447.450834] ? v9fs_mount+0x61/0x900 [ 447.454568] ? rcu_read_lock_sched_held+0x108/0x120 [ 447.459600] ? kmem_cache_alloc_trace+0x616/0x780 [ 447.464467] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 447.470022] v9fs_mount+0x7c/0x900 [ 447.473585] mount_fs+0xae/0x328 [ 447.476974] vfs_kern_mount.part.34+0xdc/0x4e0 [ 447.481572] ? may_umount+0xb0/0xb0 [ 447.485230] ? _raw_read_unlock+0x22/0x30 [ 447.489394] ? __get_fs_type+0x97/0xc0 [ 447.493302] do_mount+0x581/0x30e0 [ 447.496867] ? copy_mount_string+0x40/0x40 [ 447.501118] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 447.505893] ? retint_kernel+0x10/0x10 [ 447.509804] ? copy_mount_options+0x1a1/0x380 [ 447.514313] ? copy_mount_options+0x1b2/0x380 [ 447.518821] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 447.524372] ? copy_mount_options+0x285/0x380 [ 447.528886] ksys_mount+0x12d/0x140 [ 447.532534] __x64_sys_mount+0xbe/0x150 [ 447.536528] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 447.541563] do_syscall_64+0x1b9/0x820 [ 447.545467] ? finish_task_switch+0x1d3/0x870 [ 447.549991] ? syscall_return_slowpath+0x5e0/0x5e0 [ 447.554939] ? syscall_return_slowpath+0x31d/0x5e0 [ 447.559884] ? __switch_to_asm+0x34/0x70 [ 447.563962] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 447.569346] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 447.574226] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 447.579514] RIP: 0033:0x457089 20:07:08 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00@', @ifru_names="04707000"}) 20:07:08 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x10000, 0x0) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f00000007c0)={0x9, 0x8000, 0xc4eb, 0xffffffffffff8001, 0x9, 0x40}) r1 = open(&(0x7f0000000080)='.\x00', 0x40, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xf, 0x30, 0x3, 0x4}, &(0x7f0000000280)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={r2, 0x2000000000000000, 0xf9ba, 0x4}, &(0x7f0000000300)=0x10) mkdir(&(0x7f0000000600)='./file0\x00', 0x8) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000800)=0x47) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x6) syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x7, 0x8000) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000780)=""/28, 0x1c, 0x1) execveat(r4, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0)=[&(0x7f0000000380)='cgroup.procs\x00', &(0x7f00000003c0)='cgroup2\x00', &(0x7f0000000400)='cgroup.procs\x00', &(0x7f0000000440)='posix_acl_access\x00', &(0x7f0000000480)='cgroup2\x00'], &(0x7f0000000740)=[&(0x7f0000000500)='\x00', &(0x7f0000000540)='\x00', &(0x7f0000000580)='cgroup.procs\x00', &(0x7f00000005c0)='.\x00', &(0x7f0000000640)=')}\x00', &(0x7f0000000680)='&\x00', &(0x7f00000006c0)='\x00', &(0x7f0000000700)='cgroup2\x00'], 0x400) [ 447.582721] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 447.601630] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 447.609352] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 447.616635] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 447.623912] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 447.631409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 447.638697] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 000000000000000c 20:07:08 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673ff", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:08 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:08 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x8040, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000640)=""/4096) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r3, 0x101000000000013) 20:07:08 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x5, 0xb6ac}, 0x8) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:07:08 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000000ffffffc3", @ifru_names="04707000"}) 20:07:08 executing program 2 (fault-call:3 fault-nth:13): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:08 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)=""/157, &(0x7f0000000080)=0x9d) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x7, 0x4) 20:07:08 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\b', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 447.993343] FAULT_INJECTION: forcing a failure. [ 447.993343] name failslab, interval 1, probability 0, space 0, times 0 [ 448.004735] CPU: 1 PID: 23709 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 448.011769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.021143] Call Trace: [ 448.023822] dump_stack+0x1c9/0x2b4 [ 448.027483] ? dump_stack_print_info.cold.2+0x52/0x52 [ 448.032709] ? kernel_text_address+0x79/0xf0 [ 448.037148] ? perf_trace_lock+0xde/0x920 [ 448.041344] should_fail.cold.4+0xa/0x11 [ 448.045426] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 448.050561] ? save_stack+0xa9/0xd0 [ 448.054227] ? save_stack+0x43/0xd0 [ 448.057872] ? kasan_kmalloc+0xc4/0xe0 [ 448.061779] ? kmem_cache_alloc_trace+0x152/0x780 [ 448.066638] ? v9fs_session_init+0x21a/0x1a80 [ 448.071151] ? v9fs_mount+0x7c/0x900 [ 448.074908] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 448.079746] ? do_mount+0x581/0x30e0 [ 448.083478] ? ksys_mount+0x12d/0x140 [ 448.087296] ? __x64_sys_mount+0xbe/0x150 [ 448.091474] ? find_held_lock+0x36/0x1c0 [ 448.095582] ? check_same_owner+0x340/0x340 [ 448.099923] ? kasan_check_read+0x11/0x20 [ 448.104097] ? rcu_is_watching+0x8c/0x150 [ 448.108324] ? rcu_note_context_switch+0x730/0x730 [ 448.113269] ? rcu_pm_notify+0xc0/0xc0 [ 448.117271] __should_failslab+0x124/0x180 [ 448.121525] should_failslab+0x9/0x14 [ 448.125349] kmem_cache_alloc_trace+0x2cb/0x780 [ 448.130040] ? kmem_cache_alloc_trace+0x616/0x780 [ 448.134906] ? __lockdep_init_map+0x105/0x590 [ 448.139430] p9_idpool_create+0x42/0x190 [ 448.143511] p9_client_create+0x286/0x1770 [ 448.147766] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 448.152536] ? do_mount+0x581/0x30e0 [ 448.156270] ? __x64_sys_mount+0xbe/0x150 [ 448.160437] ? do_syscall_64+0x1b9/0x820 [ 448.164522] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.169907] ? p9_client_read+0xc60/0xc60 [ 448.174081] ? find_held_lock+0x36/0x1c0 [ 448.178203] ? __lockdep_init_map+0x105/0x590 [ 448.182753] ? kasan_check_write+0x14/0x20 [ 448.187007] ? __init_rwsem+0x1cc/0x2a0 [ 448.191004] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 448.196047] ? rcu_read_lock_sched_held+0x108/0x120 [ 448.201080] ? __kmalloc_track_caller+0x5f5/0x760 [ 448.205944] ? save_stack+0xa9/0xd0 [ 448.209586] ? save_stack+0x43/0xd0 [ 448.213235] ? kasan_kmalloc+0xc4/0xe0 [ 448.217135] ? kmem_cache_alloc_trace+0x152/0x780 [ 448.221992] ? memcpy+0x45/0x50 [ 448.225310] v9fs_session_init+0x21a/0x1a80 [ 448.229665] ? find_held_lock+0x36/0x1c0 [ 448.233763] ? v9fs_show_options+0x7e0/0x7e0 [ 448.238219] ? kasan_check_read+0x11/0x20 [ 448.242418] ? rcu_is_watching+0x8c/0x150 [ 448.246600] ? rcu_pm_notify+0xc0/0xc0 [ 448.250515] ? v9fs_mount+0x61/0x900 [ 448.254246] ? rcu_read_lock_sched_held+0x108/0x120 [ 448.259285] ? kmem_cache_alloc_trace+0x616/0x780 [ 448.264147] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 448.269723] v9fs_mount+0x7c/0x900 [ 448.273291] mount_fs+0xae/0x328 [ 448.276680] vfs_kern_mount.part.34+0xdc/0x4e0 [ 448.281286] ? may_umount+0xb0/0xb0 [ 448.284931] ? _raw_read_unlock+0x22/0x30 [ 448.289100] ? __get_fs_type+0x97/0xc0 [ 448.293010] do_mount+0x581/0x30e0 [ 448.296578] ? copy_mount_string+0x40/0x40 [ 448.300835] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.305622] ? retint_kernel+0x10/0x10 [ 448.309536] ? copy_mount_options+0x213/0x380 [ 448.314051] ? write_comp_data+0x70/0x70 [ 448.318133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.323684] ? copy_mount_options+0x285/0x380 [ 448.328222] ksys_mount+0x12d/0x140 [ 448.331871] __x64_sys_mount+0xbe/0x150 [ 448.335864] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 448.340901] do_syscall_64+0x1b9/0x820 [ 448.344809] ? finish_task_switch+0x1d3/0x870 [ 448.349320] ? syscall_return_slowpath+0x5e0/0x5e0 [ 448.354326] ? syscall_return_slowpath+0x31d/0x5e0 [ 448.359275] ? __switch_to_asm+0x34/0x70 [ 448.363352] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 448.368735] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.373606] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 448.378808] RIP: 0033:0x457089 20:07:08 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) [ 448.382014] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 448.400930] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 448.408663] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 448.415949] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 448.423232] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 448.430513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 448.437794] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 000000000000000d 20:07:09 executing program 0: r0 = shmget(0x0, 0x4000, 0xd0, &(0x7f0000ffa000/0x4000)=nil) shmctl$IPC_RMID(r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 20:07:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/151, 0x97}, {&(0x7f00000002c0)=""/207, 0xcf}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x14f) 20:07:09 executing program 2 (fault-call:3 fault-nth:14): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:09 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000300", @ifru_names="04707000"}) 20:07:09 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667304", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 448.658590] FAULT_INJECTION: forcing a failure. [ 448.658590] name failslab, interval 1, probability 0, space 0, times 0 [ 448.670081] CPU: 1 PID: 23738 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 448.677120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 448.686490] Call Trace: [ 448.689102] dump_stack+0x1c9/0x2b4 [ 448.692763] ? dump_stack_print_info.cold.2+0x52/0x52 [ 448.697990] ? lock_downgrade+0x8f0/0x8f0 [ 448.702205] should_fail.cold.4+0xa/0x11 [ 448.706303] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 448.711443] ? is_bpf_text_address+0xd7/0x170 [ 448.715978] ? kernel_text_address+0x79/0xf0 [ 448.720423] ? __kernel_text_address+0xd/0x40 [ 448.724955] ? unwind_get_return_address+0x61/0xa0 [ 448.729926] ? find_held_lock+0x36/0x1c0 [ 448.734063] ? check_same_owner+0x340/0x340 [ 448.738419] ? rcu_note_context_switch+0x730/0x730 [ 448.743383] __should_failslab+0x124/0x180 [ 448.747644] should_failslab+0x9/0x14 [ 448.751473] __kmalloc+0x2c8/0x760 [ 448.755043] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 448.760498] ? match_number.isra.0+0xbf/0x280 [ 448.765033] match_number.isra.0+0xbf/0x280 [ 448.769387] ? match_strdup+0xa0/0xa0 [ 448.773244] ? match_wildcard+0x3c0/0x3c0 [ 448.777424] ? p9_client_create+0x71f/0x1770 [ 448.781876] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 448.786927] match_int+0x23/0x30 [ 448.790334] p9_client_create+0x65d/0x1770 [ 448.794612] ? p9_client_read+0xc60/0xc60 [ 448.798788] ? find_held_lock+0x36/0x1c0 [ 448.802903] ? __lockdep_init_map+0x105/0x590 [ 448.807455] ? kasan_check_write+0x14/0x20 [ 448.811718] ? __init_rwsem+0x1cc/0x2a0 [ 448.815717] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 448.820763] ? rcu_read_lock_sched_held+0x108/0x120 [ 448.825799] ? __kmalloc_track_caller+0x5f5/0x760 [ 448.830660] ? save_stack+0xa9/0xd0 [ 448.834307] ? save_stack+0x43/0xd0 [ 448.837955] ? kasan_kmalloc+0xc4/0xe0 [ 448.841860] ? kmem_cache_alloc_trace+0x152/0x780 [ 448.846738] ? memcpy+0x45/0x50 [ 448.850051] v9fs_session_init+0x21a/0x1a80 [ 448.854487] ? find_held_lock+0x36/0x1c0 [ 448.858584] ? v9fs_show_options+0x7e0/0x7e0 [ 448.863078] ? kasan_check_read+0x11/0x20 [ 448.867255] ? rcu_is_watching+0x8c/0x150 [ 448.871421] ? rcu_pm_notify+0xc0/0xc0 [ 448.875339] ? v9fs_mount+0x61/0x900 [ 448.879075] ? rcu_read_lock_sched_held+0x108/0x120 [ 448.884110] ? kmem_cache_alloc_trace+0x616/0x780 [ 448.888984] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 448.894550] v9fs_mount+0x7c/0x900 [ 448.898117] mount_fs+0xae/0x328 [ 448.901513] vfs_kern_mount.part.34+0xdc/0x4e0 [ 448.906114] ? may_umount+0xb0/0xb0 [ 448.909759] ? _raw_read_unlock+0x22/0x30 [ 448.913920] ? __get_fs_type+0x97/0xc0 [ 448.917839] do_mount+0x581/0x30e0 [ 448.921409] ? copy_mount_string+0x40/0x40 [ 448.925670] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 448.930453] ? retint_kernel+0x10/0x10 [ 448.934372] ? copy_mount_options+0x1f0/0x380 [ 448.938888] ? copy_mount_options+0x1f6/0x380 [ 448.943402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 448.948966] ? copy_mount_options+0x285/0x380 [ 448.953491] ksys_mount+0x12d/0x140 [ 448.957142] __x64_sys_mount+0xbe/0x150 [ 448.961155] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 448.966233] do_syscall_64+0x1b9/0x820 [ 448.970137] ? finish_task_switch+0x1d3/0x870 [ 448.974655] ? syscall_return_slowpath+0x5e0/0x5e0 [ 448.979607] ? syscall_return_slowpath+0x31d/0x5e0 [ 448.984558] ? __switch_to_asm+0x34/0x70 [ 448.988637] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 448.994025] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 448.998896] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.004155] RIP: 0033:0x457089 [ 449.007389] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.026307] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.034037] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 449.041328] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 449.048613] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 20:07:09 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000003380)={'irlan0\x00', 0x7fff}) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) 20:07:09 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:09 executing program 3: syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x100000001, 0x105100) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/sco\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) r1 = dup(r0) r2 = openat(r0, &(0x7f00000001c0)='./file0\x00', 0x4100, 0x10) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000140)=0x1, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) [ 449.055898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 449.063199] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 000000000000000e 20:07:09 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) accept4$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, &(0x7f0000000280)=0x1c, 0x80800) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x60, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4080) syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x52f, 0x200000) 20:07:09 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:07:09 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:09 executing program 2 (fault-call:3 fault-nth:15): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:09 executing program 3: syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @link_local, [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x21, 0x0, 0x0, 0x0, @remote}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000240)={0x8, 0x110, 0x100000000, 0x401, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) 20:07:09 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) 20:07:09 executing program 7 (fault-call:10 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 449.428274] FAULT_INJECTION: forcing a failure. [ 449.428274] name failslab, interval 1, probability 0, space 0, times 0 [ 449.439736] CPU: 1 PID: 23783 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 449.446783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.456161] Call Trace: [ 449.458799] dump_stack+0x1c9/0x2b4 [ 449.460220] attempt to access beyond end of device [ 449.462455] ? dump_stack_print_info.cold.2+0x52/0x52 [ 449.462478] ? lock_downgrade+0x8f0/0x8f0 [ 449.462508] should_fail.cold.4+0xa/0x11 [ 449.462529] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 449.462557] ? is_bpf_text_address+0xd7/0x170 [ 449.467734] loop6: rw=12288, want=8200, limit=20 [ 449.472875] ? kernel_text_address+0x79/0xf0 [ 449.472894] ? __kernel_text_address+0xd/0x40 [ 449.472910] ? unwind_get_return_address+0x61/0xa0 [ 449.472934] ? find_held_lock+0x36/0x1c0 [ 449.513588] ? check_same_owner+0x340/0x340 [ 449.517949] ? rcu_note_context_switch+0x730/0x730 [ 449.522995] __should_failslab+0x124/0x180 [ 449.526156] FAULT_INJECTION: forcing a failure. [ 449.526156] name failslab, interval 1, probability 0, space 0, times 0 [ 449.527251] should_failslab+0x9/0x14 [ 449.527269] __kmalloc+0x2c8/0x760 [ 449.527286] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 449.527311] ? match_number.isra.0+0xbf/0x280 [ 449.527334] match_number.isra.0+0xbf/0x280 [ 449.527364] ? match_strdup+0xa0/0xa0 [ 449.563639] ? match_wildcard+0x3c0/0x3c0 [ 449.567802] ? p9_client_create+0x71f/0x1770 [ 449.572243] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 449.577282] match_int+0x23/0x30 [ 449.580673] p9_client_create+0x65d/0x1770 [ 449.584934] ? p9_client_read+0xc60/0xc60 [ 449.589102] ? find_held_lock+0x36/0x1c0 [ 449.593220] ? __lockdep_init_map+0x105/0x590 [ 449.597746] ? kasan_check_write+0x14/0x20 [ 449.601994] ? __init_rwsem+0x1cc/0x2a0 [ 449.605987] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 449.611028] ? rcu_read_lock_sched_held+0x108/0x120 [ 449.616067] ? __kmalloc_track_caller+0x5f5/0x760 [ 449.620925] ? save_stack+0xa9/0xd0 [ 449.624918] ? save_stack+0x43/0xd0 [ 449.628564] ? kasan_kmalloc+0xc4/0xe0 [ 449.632486] ? kmem_cache_alloc_trace+0x152/0x780 [ 449.637346] ? memcpy+0x45/0x50 [ 449.640648] v9fs_session_init+0x21a/0x1a80 [ 449.645039] ? find_held_lock+0x36/0x1c0 [ 449.649130] ? v9fs_show_options+0x7e0/0x7e0 [ 449.653563] ? kasan_check_read+0x11/0x20 [ 449.657727] ? rcu_is_watching+0x8c/0x150 [ 449.661901] ? rcu_pm_notify+0xc0/0xc0 [ 449.665816] ? v9fs_mount+0x61/0x900 [ 449.669545] ? rcu_read_lock_sched_held+0x108/0x120 [ 449.674580] ? kmem_cache_alloc_trace+0x616/0x780 [ 449.679444] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 449.685000] v9fs_mount+0x7c/0x900 [ 449.688566] mount_fs+0xae/0x328 [ 449.691962] vfs_kern_mount.part.34+0xdc/0x4e0 [ 449.696563] ? may_umount+0xb0/0xb0 [ 449.700225] ? _raw_read_unlock+0x22/0x30 [ 449.704390] ? __get_fs_type+0x97/0xc0 [ 449.708299] do_mount+0x581/0x30e0 [ 449.711866] ? copy_mount_string+0x40/0x40 [ 449.716124] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 449.720902] ? retint_kernel+0x10/0x10 [ 449.724906] ? copy_mount_options+0x1a1/0x380 [ 449.729424] ? copy_mount_options+0x1a4/0x380 [ 449.733942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 449.739495] ? copy_mount_options+0x285/0x380 [ 449.744011] ksys_mount+0x12d/0x140 [ 449.747661] __x64_sys_mount+0xbe/0x150 [ 449.751651] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 449.756777] do_syscall_64+0x1b9/0x820 [ 449.760680] ? finish_task_switch+0x1d3/0x870 [ 449.765214] ? syscall_return_slowpath+0x5e0/0x5e0 [ 449.770163] ? syscall_return_slowpath+0x31d/0x5e0 [ 449.775130] ? __switch_to_asm+0x34/0x70 [ 449.779228] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 449.784618] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.789510] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 449.794713] RIP: 0033:0x457089 [ 449.797921] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 449.816931] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 449.824665] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 449.832036] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 449.839409] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 449.846781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 449.854068] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 000000000000000f [ 449.861382] CPU: 0 PID: 23793 Comm: syz-executor7 Not tainted 4.18.0+ #188 [ 449.868432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 449.877803] Call Trace: [ 449.880477] dump_stack+0x1c9/0x2b4 [ 449.884134] ? dump_stack_print_info.cold.2+0x52/0x52 [ 449.889348] should_fail.cold.4+0xa/0x11 [ 449.893565] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 449.898699] ? lock_downgrade+0x8f0/0x8f0 [ 449.902870] ? find_held_lock+0x36/0x1c0 [ 449.906954] ? find_held_lock+0x36/0x1c0 [ 449.911052] ? check_same_owner+0x340/0x340 [ 449.915390] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 449.920340] ? rcu_note_context_switch+0x730/0x730 [ 449.925342] __should_failslab+0x124/0x180 [ 449.929596] should_failslab+0x9/0x14 [ 449.933410] kmem_cache_alloc+0x2af/0x760 [ 449.937593] getname_flags+0xd0/0x5a0 [ 449.941419] user_path_at_empty+0x2d/0x50 [ 449.945587] do_fchownat+0x11f/0x250 [ 449.949315] ? __ia32_sys_chmod+0x80/0x80 [ 449.953480] ? syscall_slow_exit_work+0x500/0x500 [ 449.958343] __x64_sys_lchown+0x7e/0xc0 [ 449.962336] do_syscall_64+0x1b9/0x820 [ 449.966244] ? finish_task_switch+0x1d3/0x870 [ 449.970758] ? syscall_return_slowpath+0x5e0/0x5e0 [ 449.975705] ? syscall_return_slowpath+0x31d/0x5e0 [ 449.980654] ? __switch_to_asm+0x34/0x70 [ 449.984952] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 449.990341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 449.995223] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.000430] RIP: 0033:0x457089 [ 450.003643] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.022561] RSP: 002b:00007fef5031fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000005e 20:07:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 450.030290] RAX: ffffffffffffffda RBX: 00007fef503206d4 RCX: 0000000000457089 [ 450.037573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 450.044851] RBP: 0000000000930140 R08: 0000000000000000 R09: 0000000000000000 [ 450.052233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 450.059513] R13: 00000000004d1f98 R14: 00000000004c78d2 R15: 0000000000000000 [ 450.067468] attempt to access beyond end of device [ 450.072570] loop6: rw=12288, want=12296, limit=20 20:07:10 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000400", @ifru_names="04707000"}) 20:07:10 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x410002, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f00000002c0)) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000000)=0x1) pause() tkill(r3, 0x8000000002) 20:07:10 executing program 7 (fault-call:10 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 450.103574] attempt to access beyond end of device [ 450.108689] loop6: rw=12288, want=8200, limit=20 20:07:10 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:10 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x700, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x800) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 450.163251] attempt to access beyond end of device [ 450.168384] loop6: rw=12288, want=12296, limit=20 20:07:10 executing program 2 (fault-call:3 fault-nth:16): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 450.260098] attempt to access beyond end of device [ 450.265303] loop6: rw=12288, want=8200, limit=20 [ 450.283127] FAULT_INJECTION: forcing a failure. [ 450.283127] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 450.295016] CPU: 1 PID: 23807 Comm: syz-executor7 Not tainted 4.18.0+ #188 [ 450.302056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.311429] Call Trace: [ 450.314054] dump_stack+0x1c9/0x2b4 [ 450.317712] ? dump_stack_print_info.cold.2+0x52/0x52 [ 450.323098] ? perf_trace_lock+0xde/0x920 [ 450.327273] ? zap_class+0x740/0x740 [ 450.331016] should_fail.cold.4+0xa/0x11 [ 450.335106] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.340249] ? perf_trace_lock+0xde/0x920 [ 450.344419] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 450.349302] ? trace_hardirqs_on+0x10/0x10 [ 450.353561] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.359118] ? _parse_integer+0x13b/0x190 [ 450.363290] ? graph_lock+0x170/0x170 [ 450.367118] ? perf_trace_lock+0xde/0x920 [ 450.371287] ? _kstrtoull+0x188/0x250 [ 450.375110] ? _parse_integer+0x190/0x190 [ 450.379288] ? zap_class+0x740/0x740 [ 450.383034] ? perf_trace_lock+0xde/0x920 [ 450.387228] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 450.392101] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.397658] ? should_fail+0x246/0xd86 [ 450.401567] ? zap_class+0x740/0x740 [ 450.405308] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.410448] __alloc_pages_nodemask+0x36e/0xdb0 [ 450.415160] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 450.420329] ? find_held_lock+0x36/0x1c0 [ 450.424460] ? check_same_owner+0x340/0x340 [ 450.428886] cache_grow_begin+0x91/0x710 [ 450.433006] kmem_cache_alloc+0x689/0x760 [ 450.437231] getname_flags+0xd0/0x5a0 [ 450.441159] user_path_at_empty+0x2d/0x50 [ 450.445370] do_fchownat+0x11f/0x250 [ 450.449127] ? __ia32_sys_chmod+0x80/0x80 [ 450.453320] ? syscall_slow_exit_work+0x500/0x500 [ 450.458224] __x64_sys_lchown+0x7e/0xc0 [ 450.462253] do_syscall_64+0x1b9/0x820 [ 450.466197] ? syscall_return_slowpath+0x5e0/0x5e0 [ 450.471162] ? syscall_return_slowpath+0x31d/0x5e0 [ 450.476146] ? __switch_to_asm+0x34/0x70 [ 450.480261] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 450.485654] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.490529] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.495737] RIP: 0033:0x457089 [ 450.498955] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 450.518242] RSP: 002b:00007fef50340c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 450.525980] RAX: ffffffffffffffda RBX: 00007fef503416d4 RCX: 0000000000457089 [ 450.533268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 450.540551] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.547836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 450.555120] R13: 00000000004d1f98 R14: 00000000004c78d2 R15: 0000000000000001 [ 450.576727] attempt to access beyond end of device [ 450.581848] loop6: rw=12288, want=12296, limit=20 [ 450.601327] attempt to access beyond end of device [ 450.606387] loop6: rw=12288, want=8200, limit=20 [ 450.613571] attempt to access beyond end of device [ 450.618644] loop6: rw=12288, want=12296, limit=20 [ 450.636878] FAULT_INJECTION: forcing a failure. [ 450.636878] name failslab, interval 1, probability 0, space 0, times 0 [ 450.648213] CPU: 0 PID: 23825 Comm: syz-executor2 Not tainted 4.18.0+ #188 20:07:11 executing program 7 (fault-call:10 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x7, 0x7, 0xffff, 0x2, '\x00', 0x400}, 0x4, 0x30, 0x100000001, r1, 0x5, 0x7, 'syz0\x00', &(0x7f0000000080)=['{+trustedem0vboxnet0\x00', 'wchan\x00', "776c616e317f277b", '\x00', ']'], 0x25, [], [0x81, 0x0, 0x1f, 0xf0]}) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:11 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r1, r2) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f0000000400)="6367726f752be63e06a9702e70726f637300d4ed6aefb3bd57fe552d92a8b7df9c85fe4574c40cb254a1a92ff8b282f26d6e1e9302973c32420b08400a03364444376beaabfc57fcf77b62e0951e05fca69ca3b0cd65e24456829505c5daf1fcecac4c6c9162c5acccf8af246b6f3ef42943438e6a9aa2e18d7efa9d26cc1cdd8234dc0168acffc6b4e8003d01e0d1be5ffc2155bdcdffd4e626", 0x2, 0x0) 20:07:11 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 450.655245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 450.664614] Call Trace: [ 450.667246] dump_stack+0x1c9/0x2b4 [ 450.670898] ? dump_stack_print_info.cold.2+0x52/0x52 [ 450.676122] ? __kernel_text_address+0xd/0x40 [ 450.680651] should_fail.cold.4+0xa/0x11 [ 450.684748] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 450.689891] ? save_stack+0x43/0xd0 [ 450.693546] ? kasan_kmalloc+0xc4/0xe0 [ 450.697469] ? __kmalloc_track_caller+0x14a/0x760 [ 450.702338] ? kstrdup+0x39/0x70 [ 450.705730] ? p9_client_create+0x48f/0x1770 20:07:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000140), 0x1) [ 450.710163] ? v9fs_session_init+0x21a/0x1a80 [ 450.714714] ? mount_fs+0xae/0x328 [ 450.718284] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 450.723065] ? do_mount+0x581/0x30e0 [ 450.726798] ? ksys_mount+0x12d/0x140 [ 450.730621] ? __x64_sys_mount+0xbe/0x150 [ 450.734796] ? do_syscall_64+0x1b9/0x820 [ 450.738977] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.744378] ? find_held_lock+0x36/0x1c0 [ 450.748495] ? check_same_owner+0x340/0x340 [ 450.752849] ? rcu_note_context_switch+0x730/0x730 [ 450.758001] __should_failslab+0x124/0x180 20:07:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000000), 0x0) 20:07:11 executing program 3: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)) readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r0) [ 450.762265] should_failslab+0x9/0x14 [ 450.766092] __kmalloc+0x2c8/0x760 [ 450.769670] ? match_wildcard+0x3c0/0x3c0 [ 450.773841] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 450.778889] ? match_strdup+0x5e/0xa0 [ 450.782724] match_strdup+0x5e/0xa0 [ 450.786388] p9_client_create+0x6c7/0x1770 [ 450.790660] ? p9_client_read+0xc60/0xc60 [ 450.794841] ? find_held_lock+0x36/0x1c0 [ 450.798948] ? __lockdep_init_map+0x105/0x590 [ 450.803487] ? kasan_check_write+0x14/0x20 [ 450.807747] ? __init_rwsem+0x1cc/0x2a0 20:07:11 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x200000) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x4, 0x4) [ 450.811753] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 450.816806] ? rcu_read_lock_sched_held+0x108/0x120 [ 450.821857] ? __kmalloc_track_caller+0x5f5/0x760 [ 450.826726] ? kstrdup+0x1e/0x70 [ 450.830121] ? memcpy+0x45/0x50 [ 450.833443] v9fs_session_init+0x21a/0x1a80 [ 450.837790] ? find_held_lock+0x36/0x1c0 [ 450.841881] ? v9fs_show_options+0x7e0/0x7e0 [ 450.846317] ? kasan_check_read+0x11/0x20 [ 450.850487] ? rcu_is_watching+0x8c/0x150 [ 450.854662] ? rcu_pm_notify+0xc0/0xc0 [ 450.858583] ? v9fs_mount+0x61/0x900 20:07:11 executing program 3: r0 = socket$kcm(0x29, 0x7, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000000)='wchan\x00') readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:11 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x280000) write$FUSE_DIRENT(r0, &(0x7f0000000100)={0xe8, 0xffffffffffffffda, 0x3, [{0x5, 0xdb6, 0x1, 0x3f, '['}, {0x6, 0x9, 0x7, 0x8, ')/^GPL#'}, {0x5, 0x3, 0x6, 0x20, 'wchan\x00'}, {0x1, 0xfffffffeffffffff, 0x6, 0x2, 'wchan\x00'}, {0x3, 0x9, 0x0, 0x3e47}, {0x4, 0x6, 0x6, 0x3b, 'wchan\x00'}, {0x3, 0x40, 0x1, 0xd0, '-'}]}, 0xe8) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 450.862324] ? rcu_read_lock_sched_held+0x108/0x120 [ 450.867369] ? kmem_cache_alloc_trace+0x616/0x780 [ 450.872250] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 450.877815] v9fs_mount+0x7c/0x900 [ 450.881382] mount_fs+0xae/0x328 [ 450.884777] vfs_kern_mount.part.34+0xdc/0x4e0 [ 450.889389] ? may_umount+0xb0/0xb0 [ 450.893037] ? _raw_read_unlock+0x22/0x30 [ 450.897234] ? __get_fs_type+0x97/0xc0 [ 450.901147] do_mount+0x581/0x30e0 [ 450.904735] ? do_raw_spin_unlock+0xa7/0x2f0 [ 450.909172] ? copy_mount_string+0x40/0x40 [ 450.913476] ? copy_mount_options+0x5f/0x380 [ 450.917904] ? rcu_read_lock_sched_held+0x108/0x120 [ 450.922943] ? kmem_cache_alloc_trace+0x616/0x780 [ 450.927817] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 450.933383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 450.939032] ? copy_mount_options+0x285/0x380 [ 450.943675] ksys_mount+0x12d/0x140 [ 450.947423] __x64_sys_mount+0xbe/0x150 [ 450.951517] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 450.956562] do_syscall_64+0x1b9/0x820 [ 450.960479] ? syscall_return_slowpath+0x5e0/0x5e0 [ 450.965434] ? syscall_return_slowpath+0x31d/0x5e0 [ 450.970513] ? __switch_to_asm+0x34/0x70 [ 450.974641] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 450.980019] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 450.984878] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 450.990207] RIP: 0033:0x457089 [ 450.993414] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.012413] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 451.020148] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 451.027458] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 451.034744] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 451.042022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 451.049303] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000010 20:07:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000002", @ifru_names="04707000"}) 20:07:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x7}, 0x4) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000)) 20:07:11 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) [ 451.119848] f2fs_msg: 20 callbacks suppressed [ 451.119862] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 451.131609] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 451.165214] FAULT_INJECTION: forcing a failure. [ 451.165214] name failslab, interval 1, probability 0, space 0, times 0 [ 451.176806] CPU: 1 PID: 23854 Comm: syz-executor7 Not tainted 4.18.0+ #188 [ 451.183830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.193210] Call Trace: [ 451.195819] dump_stack+0x1c9/0x2b4 [ 451.199472] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.204686] should_fail.cold.4+0xa/0x11 [ 451.208766] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.213894] ? rb_erase_cached+0xc82/0x32c0 [ 451.218248] ? rb_next+0x140/0x140 [ 451.221801] ? unwind_get_return_address+0x61/0xa0 [ 451.226747] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 451.231611] ? perf_trace_lock+0x920/0x920 [ 451.235866] ? graph_lock+0x170/0x170 [ 451.239680] ? check_noncircular+0x20/0x20 [ 451.243942] ? graph_lock+0x170/0x170 [ 451.247766] ? find_held_lock+0x36/0x1c0 [ 451.251847] __should_failslab+0x124/0x180 [ 451.256099] should_failslab+0x9/0x14 [ 451.259918] kmem_cache_alloc+0x47/0x760 [ 451.264001] ? set_pageblock_migratetype+0x40/0x40 [ 451.268961] radix_tree_node_alloc.constprop.19+0x1e6/0x310 [ 451.274695] radix_tree_extend+0x295/0x650 [ 451.278962] ? radix_tree_node_alloc.constprop.19+0x310/0x310 [ 451.284863] ? graph_lock+0x170/0x170 [ 451.288684] ? __lock_acquire+0x7fc/0x5020 [ 451.292936] ? __update_load_avg_blocked_se+0x730/0x730 [ 451.298325] idr_get_free+0x9ad/0x10c0 [ 451.302254] ? radix_tree_clear_tags+0xc0/0xc0 [ 451.306855] ? attach_entity_load_avg+0x860/0x860 [ 451.311714] ? print_usage_bug+0xc0/0xc0 [ 451.315791] ? update_load_avg+0x389/0x27d0 [ 451.320126] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 451.324982] ? attach_entity_load_avg+0x860/0x860 [ 451.329842] ? perf_trace_lock+0x920/0x920 [ 451.334098] ? attach_entity_load_avg+0x860/0x860 [ 451.338955] ? perf_trace_lock+0x920/0x920 [ 451.343229] ? __lock_acquire+0x7fc/0x5020 [ 451.347484] ? rb_erase+0x3550/0x3550 [ 451.351296] ? perf_trace_lock+0x920/0x920 [ 451.355551] idr_alloc_u32+0x201/0x3f0 [ 451.359452] ? __fprop_inc_percpu_max+0x2d0/0x2d0 [ 451.364306] ? p9_idpool_get+0x23/0x70 [ 451.368232] idr_alloc+0x111/0x1b0 [ 451.371784] ? idr_alloc_u32+0x3f0/0x3f0 [ 451.375856] ? do_raw_spin_lock+0xc1/0x200 [ 451.380105] p9_idpool_get+0x3d/0x70 [ 451.383920] p9_client_prepare_req.part.8+0xe4/0xcd0 [ 451.389043] ? trace_hardirqs_on+0x10/0x10 [ 451.393296] ? p9_free_req.isra.7+0x140/0x140 [ 451.397803] ? find_held_lock+0x36/0x1c0 [ 451.401885] p9_client_rpc+0x1bd/0x1400 [ 451.405876] ? do_raw_spin_unlock+0xa7/0x2f0 [ 451.410297] ? p9_client_prepare_req.part.8+0xcd0/0xcd0 [ 451.415676] ? kasan_check_write+0x14/0x20 [ 451.419924] ? do_raw_spin_lock+0xc1/0x200 [ 451.424201] ? _raw_spin_unlock+0x22/0x30 [ 451.428363] ? v9fs_fid_find+0x250/0x2f0 [ 451.432441] ? v9fs_session_init.cold.3+0x73/0x73 [ 451.437295] ? make_kprojid+0x30/0x30 [ 451.441112] ? v9fs_fid_lookup_with_uid+0x11b/0xbe0 [ 451.446141] ? from_kgid+0x87/0xc0 [ 451.449691] ? from_kuid_munged+0x130/0x130 [ 451.454026] ? v9fs_fid_add+0x200/0x200 [ 451.458018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.463573] p9_client_wstat+0x20d/0x340 [ 451.467647] v9fs_vfs_setattr+0x7ec/0xbc0 [ 451.471809] ? v9fs_i_callback+0x60/0x60 [ 451.475880] ? lock_acquire+0x1e4/0x540 [ 451.479873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.485417] ? v9fs_i_callback+0x60/0x60 [ 451.489492] notify_change+0xc0c/0x10f0 [ 451.493479] ? setattr_prepare+0x830/0x830 [ 451.497728] ? graph_lock+0x170/0x170 [ 451.501541] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.507095] chown_common+0x5e1/0x730 [ 451.510916] ? chmod_common+0x590/0x590 [ 451.514904] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 451.520449] ? __mnt_want_write+0x2f9/0x3e0 [ 451.524786] ? rcu_read_lock_sched_held+0x108/0x120 [ 451.529817] do_fchownat+0x16e/0x250 [ 451.533546] ? __ia32_sys_chmod+0x80/0x80 [ 451.537703] ? syscall_slow_exit_work+0x500/0x500 [ 451.542559] __x64_sys_lchown+0x7e/0xc0 [ 451.546545] do_syscall_64+0x1b9/0x820 [ 451.550440] ? syscall_return_slowpath+0x5e0/0x5e0 [ 451.555380] ? syscall_return_slowpath+0x31d/0x5e0 [ 451.560320] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 451.565692] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.570545] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 451.575731] RIP: 0033:0x457089 [ 451.578924] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 451.597826] RSP: 002b:00007fef50340c78 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 451.605535] RAX: ffffffffffffffda RBX: 00007fef503416d4 RCX: 0000000000457089 20:07:12 executing program 2 (fault-call:3 fault-nth:17): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:12 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) dup2(r0, 0xffffffffffffffff) [ 451.612801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 451.620069] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 451.627480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 451.634746] R13: 00000000004d1f98 R14: 00000000004c78d2 R15: 0000000000000002 20:07:12 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'btrfs.', '&@eth0-GPL\x00'}, &(0x7f0000000080)='wlan1\x00', 0x6, 0x3) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) [ 451.721856] FAULT_INJECTION: forcing a failure. [ 451.721856] name failslab, interval 1, probability 0, space 0, times 0 [ 451.733281] CPU: 0 PID: 23873 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 451.740310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.749672] Call Trace: [ 451.752287] dump_stack+0x1c9/0x2b4 [ 451.755937] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.761152] ? prep_compound_page+0x231/0x380 [ 451.762839] attempt to access beyond end of device 20:07:12 executing program 7 (fault-call:10 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') ioctl$KDADDIO(r0, 0x4b34, 0x2) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000204}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000250000022abd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="f1ff0700f3ffffff0300e0ff749563eba53b2bb3604d9485437731e4fffbffffffffffff5da44deb89e427db6133c444567c459fe9f2af82b6c7d66c4a4f02e2f53a8e404ca686191ef0764487b2582ab4d553c35fae74a4828f5e4ed5c093e40e5fff313922e6d04ecd7a0cca281e167ac64913d86a2c71d5d1d35b2f1167070000005a21eade72694476"], 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x40) [ 451.765699] should_fail.cold.4+0xa/0x11 [ 451.765723] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.765743] ? print_usage_bug+0xc0/0xc0 [ 451.765767] ? __lock_acquire+0x7fc/0x5020 [ 451.770719] loop6: rw=12288, want=8200, limit=20 [ 451.774763] ? graph_lock+0x170/0x170 [ 451.774788] ? find_held_lock+0x36/0x1c0 [ 451.774821] ? check_same_owner+0x340/0x340 [ 451.805139] ? rcu_note_context_switch+0x730/0x730 [ 451.810110] ? kasan_check_read+0x11/0x20 [ 451.814280] __should_failslab+0x124/0x180 [ 451.818538] should_failslab+0x9/0x14 [ 451.822360] kmem_cache_alloc+0x2af/0x760 [ 451.826537] ? is_bpf_text_address+0xd7/0x170 [ 451.831061] sock_alloc_inode+0x78/0x320 [ 451.835150] ? sock_destroy_inode+0x70/0x70 [ 451.835467] F2FS-fs (loop6): invalid crc value [ 451.839511] ? __save_stack_trace+0x8d/0xf0 [ 451.839533] ? sock_destroy_inode+0x70/0x70 [ 451.839553] alloc_inode+0x63/0x190 [ 451.839569] new_inode_pseudo+0x71/0x1a0 [ 451.839583] ? prune_icache_sb+0x1b0/0x1b0 [ 451.839597] ? save_stack+0x43/0xd0 [ 451.839608] ? kasan_kmalloc+0xc4/0xe0 20:07:12 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 451.839628] ? kmem_cache_alloc_trace+0x152/0x780 [ 451.865760] attempt to access beyond end of device [ 451.868451] ? p9_idpool_create+0x42/0x190 [ 451.868466] ? p9_client_create+0x852/0x1770 [ 451.868482] ? v9fs_session_init+0x21a/0x1a80 [ 451.868503] sock_alloc+0x41/0x270 [ 451.868520] __sock_create+0x175/0x940 [ 451.868540] ? kernel_sock_ip_overhead+0x570/0x570 [ 451.868570] p9_fd_create_unix+0x1c3/0x370 [ 451.868591] ? p9_socket_open+0x220/0x220 [ 451.872522] loop6: rw=12288, want=12296, limit=20 [ 451.877332] ? p9_client_attach+0x250/0x860 [ 451.877350] ? rcu_read_lock_sched_held+0x108/0x120 [ 451.877367] ? kmem_cache_alloc_trace+0x616/0x780 [ 451.877388] ? __lockdep_init_map+0x105/0x590 [ 451.936038] F2FS-fs (loop6): invalid crc value [ 451.939750] ? lockdep_init_map+0x9/0x10 [ 451.939767] ? __raw_spin_lock_init+0x2d/0x100 [ 451.939786] p9_client_create+0x8ed/0x1770 [ 451.939810] ? p9_client_read+0xc60/0xc60 [ 451.939825] ? find_held_lock+0x36/0x1c0 [ 451.939859] ? __lockdep_init_map+0x105/0x590 [ 451.939883] ? kasan_check_write+0x14/0x20 [ 451.939901] ? __init_rwsem+0x1cc/0x2a0 [ 451.944542] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 451.948557] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 451.948578] ? rcu_read_lock_sched_held+0x108/0x120 [ 451.948594] ? __kmalloc_track_caller+0x5f5/0x760 [ 451.948611] ? save_stack+0xa9/0xd0 [ 451.976483] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 451.978425] ? save_stack+0x43/0xd0 [ 451.978446] ? kasan_kmalloc+0xc4/0xe0 [ 451.978462] ? kmem_cache_alloc_trace+0x152/0x780 [ 451.978477] ? memcpy+0x45/0x50 [ 451.978500] v9fs_session_init+0x21a/0x1a80 [ 451.978519] ? find_held_lock+0x36/0x1c0 [ 451.978545] ? v9fs_show_options+0x7e0/0x7e0 [ 451.978568] ? kasan_check_read+0x11/0x20 [ 451.984762] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 451.989731] ? rcu_is_watching+0x8c/0x150 [ 451.989746] ? rcu_pm_notify+0xc0/0xc0 [ 451.989768] ? v9fs_mount+0x61/0x900 [ 451.989788] ? rcu_read_lock_sched_held+0x108/0x120 [ 452.028858] attempt to access beyond end of device [ 452.030241] ? kmem_cache_alloc_trace+0x616/0x780 [ 452.030265] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 452.030285] v9fs_mount+0x7c/0x900 [ 452.030308] mount_fs+0xae/0x328 [ 452.030331] vfs_kern_mount.part.34+0xdc/0x4e0 [ 452.030349] ? may_umount+0xb0/0xb0 [ 452.030365] ? _raw_read_unlock+0x22/0x30 [ 452.030383] ? __get_fs_type+0x97/0xc0 [ 452.034484] loop6: rw=12288, want=8200, limit=20 [ 452.038865] do_mount+0x581/0x30e0 [ 452.038888] ? copy_mount_string+0x40/0x40 [ 452.038908] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 452.038928] ? retint_kernel+0x10/0x10 [ 452.046383] F2FS-fs (loop6): invalid crc value [ 452.050529] ? copy_mount_options+0x213/0x380 [ 452.050548] ? copy_mount_options+0x19c/0x380 [ 452.050566] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.050582] ? copy_mount_options+0x285/0x380 [ 452.050602] ksys_mount+0x12d/0x140 [ 452.050622] __x64_sys_mount+0xbe/0x150 [ 452.050639] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 452.050662] do_syscall_64+0x1b9/0x820 [ 452.055207] attempt to access beyond end of device [ 452.058698] ? finish_task_switch+0x1d3/0x870 [ 452.058717] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.058735] ? syscall_return_slowpath+0x31d/0x5e0 [ 452.058752] ? __switch_to_asm+0x34/0x70 [ 452.058769] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 452.058791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.058813] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.058825] RIP: 0033:0x457089 [ 452.058843] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.062595] loop6: rw=12288, want=12296, limit=20 [ 452.067568] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 452.067585] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 452.067594] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 452.067603] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 452.067612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 452.067621] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000011 [ 452.067829] socket: no more sockets [ 452.074875] F2FS-fs (loop6): invalid crc value [ 452.077503] 9pnet: p9_fd_create_unix (23873): problem creating socket [ 452.294718] F2FS-fs (loop6): Failed to get valid F2FS checkpoint 20:07:12 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:12 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x9, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:12 executing program 2 (fault-call:3 fault-nth:18): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:12 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r1) [ 452.412252] FAULT_INJECTION: forcing a failure. [ 452.412252] name failslab, interval 1, probability 0, space 0, times 0 [ 452.423634] CPU: 0 PID: 23906 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 452.430672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.440040] Call Trace: [ 452.442661] dump_stack+0x1c9/0x2b4 [ 452.446324] ? dump_stack_print_info.cold.2+0x52/0x52 [ 452.451546] ? __kernel_text_address+0xd/0x40 [ 452.456079] should_fail.cold.4+0xa/0x11 [ 452.460170] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.465334] ? save_stack+0x43/0xd0 [ 452.468981] ? kasan_kmalloc+0xc4/0xe0 [ 452.472898] ? kasan_slab_alloc+0x12/0x20 [ 452.477075] ? kmem_cache_alloc+0x12e/0x760 [ 452.481429] ? sock_alloc_inode+0x78/0x320 [ 452.485700] ? alloc_inode+0x63/0x190 [ 452.489525] ? new_inode_pseudo+0x71/0x1a0 [ 452.493789] ? __sock_create+0x175/0x940 [ 452.497878] ? p9_fd_create_unix+0x1c3/0x370 [ 452.502308] ? p9_client_create+0x8ed/0x1770 [ 452.506738] ? v9fs_session_init+0x21a/0x1a80 [ 452.511260] ? v9fs_mount+0x7c/0x900 [ 452.515007] ? mount_fs+0xae/0x328 [ 452.518574] ? vfs_kern_mount.part.34+0xdc/0x4e0 [ 452.523792] ? find_held_lock+0x36/0x1c0 [ 452.527904] ? check_same_owner+0x340/0x340 [ 452.532246] ? rcu_is_watching+0x8c/0x150 [ 452.536417] ? rcu_note_context_switch+0x730/0x730 [ 452.541380] __should_failslab+0x124/0x180 [ 452.545639] should_failslab+0x9/0x14 [ 452.549466] kmem_cache_alloc_trace+0x2cb/0x780 [ 452.554153] ? kmem_cache_alloc+0x5fa/0x760 [ 452.558518] ? is_bpf_text_address+0xd7/0x170 [ 452.563042] sock_alloc_inode+0xbc/0x320 [ 452.567130] ? sock_destroy_inode+0x70/0x70 [ 452.571474] ? __save_stack_trace+0x8d/0xf0 [ 452.575822] ? sock_destroy_inode+0x70/0x70 [ 452.580170] alloc_inode+0x63/0x190 [ 452.583845] new_inode_pseudo+0x71/0x1a0 [ 452.587925] ? prune_icache_sb+0x1b0/0x1b0 [ 452.592204] ? save_stack+0x43/0xd0 [ 452.595858] ? kasan_kmalloc+0xc4/0xe0 [ 452.599761] ? kmem_cache_alloc_trace+0x152/0x780 [ 452.604617] ? p9_idpool_create+0x42/0x190 [ 452.608866] ? p9_client_create+0x852/0x1770 [ 452.613289] ? v9fs_session_init+0x21a/0x1a80 [ 452.617808] sock_alloc+0x41/0x270 [ 452.621372] __sock_create+0x175/0x940 [ 452.625283] ? kernel_sock_ip_overhead+0x570/0x570 [ 452.630274] p9_fd_create_unix+0x1c3/0x370 [ 452.634531] ? p9_socket_open+0x220/0x220 [ 452.638704] ? p9_client_attach+0x250/0x860 [ 452.643044] ? rcu_read_lock_sched_held+0x108/0x120 [ 452.648082] ? kmem_cache_alloc_trace+0x616/0x780 [ 452.652946] ? __lockdep_init_map+0x105/0x590 [ 452.657468] ? lockdep_init_map+0x9/0x10 [ 452.661548] ? __raw_spin_lock_init+0x2d/0x100 [ 452.666153] p9_client_create+0x8ed/0x1770 [ 452.670444] ? p9_client_read+0xc60/0xc60 [ 452.674611] ? find_held_lock+0x36/0x1c0 [ 452.678711] ? __lockdep_init_map+0x105/0x590 [ 452.683246] ? kasan_check_write+0x14/0x20 [ 452.687499] ? __init_rwsem+0x1cc/0x2a0 [ 452.691499] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 452.696538] ? rcu_read_lock_sched_held+0x108/0x120 [ 452.701585] ? __kmalloc_track_caller+0x5f5/0x760 [ 452.706446] ? save_stack+0xa9/0xd0 [ 452.710088] ? save_stack+0x43/0xd0 [ 452.713728] ? kasan_kmalloc+0xc4/0xe0 [ 452.717633] ? kmem_cache_alloc_trace+0x152/0x780 [ 452.722493] ? memcpy+0x45/0x50 [ 452.725799] v9fs_session_init+0x21a/0x1a80 [ 452.730140] ? find_held_lock+0x36/0x1c0 [ 452.734253] ? v9fs_show_options+0x7e0/0x7e0 [ 452.738685] ? kasan_check_read+0x11/0x20 [ 452.742849] ? rcu_is_watching+0x8c/0x150 [ 452.747016] ? rcu_pm_notify+0xc0/0xc0 [ 452.750930] ? v9fs_mount+0x61/0x900 [ 452.754660] ? rcu_read_lock_sched_held+0x108/0x120 [ 452.759909] ? kmem_cache_alloc_trace+0x616/0x780 [ 452.764775] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 452.770333] v9fs_mount+0x7c/0x900 [ 452.773900] mount_fs+0xae/0x328 [ 452.777294] vfs_kern_mount.part.34+0xdc/0x4e0 [ 452.781897] ? may_umount+0xb0/0xb0 [ 452.785539] ? _raw_read_unlock+0x22/0x30 [ 452.789702] ? __get_fs_type+0x97/0xc0 [ 452.793614] do_mount+0x581/0x30e0 [ 452.797201] ? copy_mount_string+0x40/0x40 [ 452.801467] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 452.806263] ? retint_kernel+0x10/0x10 [ 452.810252] ? copy_mount_options+0x1f0/0x380 [ 452.814764] ? copy_mount_options+0x1f6/0x380 [ 452.819282] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.824838] ? copy_mount_options+0x285/0x380 [ 452.829362] ksys_mount+0x12d/0x140 [ 452.833066] __x64_sys_mount+0xbe/0x150 [ 452.837059] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 452.842097] do_syscall_64+0x1b9/0x820 [ 452.846027] ? finish_task_switch+0x1d3/0x870 [ 452.850543] ? syscall_return_slowpath+0x5e0/0x5e0 [ 452.855495] ? syscall_return_slowpath+0x31d/0x5e0 [ 452.860519] ? __switch_to_asm+0x34/0x70 [ 452.864603] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 452.869989] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.874863] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 452.880069] RIP: 0033:0x457089 [ 452.883284] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 452.902219] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 20:07:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000003c0)=r0) recvfrom$unix(r0, &(0x7f0000000400)=""/110, 0x6e, 0x40002001, &(0x7f0000000480)=@file={0x1, './file0\x00'}, 0x6e) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000340)={0x28, 0x2, 0x0, {0x6, 0x7c00000000000, 0x2}}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000100)={0x4, 0xff, 0x100000000, 0x1, 0x1}) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000300)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000380)={0x70b6, 0x15ee, 0x1ff, 0x80000001, 0x9, 0x8, 0x7, 0x1000, 0x40, 0x1000, 0x1, 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000240)={0x8, 0x4, 0x9, 0x5, &(0x7f0000000140)=[{}, {}, {}, {}]}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x3, r0, 0x1}) 20:07:13 executing program 0: r0 = memfd_create(&(0x7f0000000100)='}\x00', 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x51, r0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x36) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/195) fcntl$addseals(r0, 0x409, 0xf) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @loopback}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f000043e000)={0x1, {{0x2, 0x0, @multicast1}}}, 0x90) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f00000002c0)=0x91) setsockopt$packet_buf(r0, 0x107, 0xd, &(0x7f0000000200)="d10331e1f264a16dcd30f436c71470a6d68207d41982964f59c80851462480fa9e9cabc8b7d8fbf470f8b65b788f451c92c532b8f628c7e2a9bd682a500fa95fdae20c55e790ee6481a03cecf3832c8e3d34df6e6c3646ac6effef0cb6b1290aeedd729224d6dbd4e7c29cf8d65b31857bd828d75ae0851b257e096f04640d6ec5e2a33f3c5a1f387ac1e4de1684520e091dac1f", 0x94) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000140)={0x10001, {{0x2, 0x4e22, @multicast2}}}, 0x88) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300)='/dev/hwrng\x00', 0x2, 0x0) 20:07:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00\t', @ifru_names="04707000"}) 20:07:13 executing program 4: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r3, 0x101000000000013) getsockopt$nfc_llcp(r0, 0x118, 0x4, &(0x7f0000000000), 0x0) ioctl$TCFLSH(r1, 0x540b, 0x5) [ 452.909946] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 452.917237] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 452.924520] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 452.931803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 452.939084] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000012 [ 452.946621] socket: no more sockets [ 452.950316] 9pnet: p9_fd_create_unix (23906): problem creating socket 20:07:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0xfffffffffffffe6b}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1000000006, 0x0) [ 452.999296] attempt to access beyond end of device [ 453.004340] loop6: rw=12288, want=8200, limit=20 [ 453.056872] attempt to access beyond end of device [ 453.061997] loop6: rw=12288, want=12296, limit=20 [ 453.080940] attempt to access beyond end of device [ 453.086216] loop6: rw=12288, want=8200, limit=20 20:07:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/18, 0x12}], 0x1000000000000046) [ 453.103484] attempt to access beyond end of device [ 453.108557] loop6: rw=12288, want=12296, limit=20 [ 453.149599] attempt to access beyond end of device [ 453.154747] loop6: rw=12288, want=8200, limit=20 [ 453.183764] attempt to access beyond end of device [ 453.188857] loop6: rw=12288, want=12296, limit=20 [ 453.207390] attempt to access beyond end of device [ 453.212487] loop6: rw=12288, want=8200, limit=20 [ 453.239240] attempt to access beyond end of device [ 453.244378] loop6: rw=12288, want=12296, limit=20 20:07:13 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) dup2(r0, 0xffffffffffffffff) 20:07:13 executing program 0: setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) socket$inet(0x2, 0x3, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005001900800000000a0000000000000000000000000000000000000000000000000000000000000002000100000000000000000b0000000005000500000000000a00000000000000ff0200000000000000000000000000010000000000000000b92a2119a8b4634764f0c497106d498c940487b484e5a5f8f6707d40458b8b962beab9e165ce4bb9905a3fb293325c0f52ff325324be311f2dfaa5060f58cd192ca806c51e6f19c98b082896d9755a60a46b5b96cbd19e2d07d03a79f508506738a445c80f137bcfe1dbe8691949246dea9892adc6271e8174dca5b1528fd3948e4855fe0cf78337791e358e35ce483716b3b16eb1971afb"], 0x98}}, 0x0) 20:07:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug'}}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0xd0, &(0x7f0000000380)=[@in={0x2, 0x4e20, @rand_addr=0x1}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e24, 0x99, @remote, 0x2}, @in6={0xa, 0x4e23, 0x1, @mcast1}, @in6={0xa, 0x4e22, 0x351c, @ipv4={[], [], @remote}, 0x9}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e21, 0x1, @mcast2, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000540)={r3, 0xff, 0x2, 0x8}, &(0x7f0000000500)=0x10) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:13 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00)', @ifru_names="04707000"}) 20:07:13 executing program 2 (fault-call:3 fault-nth:19): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:13 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs~', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:13 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000140), 0x1000000000000354) [ 453.372345] FAULT_INJECTION: forcing a failure. [ 453.372345] name failslab, interval 1, probability 0, space 0, times 0 [ 453.383796] CPU: 1 PID: 23956 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 453.390840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 453.400231] Call Trace: [ 453.402849] dump_stack+0x1c9/0x2b4 [ 453.406512] ? dump_stack_print_info.cold.2+0x52/0x52 [ 453.411745] ? perf_trace_lock+0xde/0x920 [ 453.415924] should_fail.cold.4+0xa/0x11 [ 453.420020] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 453.425153] ? zap_class+0x740/0x740 [ 453.428902] ? graph_lock+0x170/0x170 [ 453.432722] ? perf_trace_lock+0x920/0x920 [ 453.436970] ? find_held_lock+0x36/0x1c0 [ 453.441087] ? check_same_owner+0x340/0x340 [ 453.445431] ? rcu_note_context_switch+0x730/0x730 [ 453.450387] __should_failslab+0x124/0x180 [ 453.454742] should_failslab+0x9/0x14 [ 453.458659] kmem_cache_alloc+0x2af/0x760 [ 453.462831] ? is_bpf_text_address+0xd7/0x170 [ 453.471697] sock_alloc_inode+0x78/0x320 [ 453.475781] ? sock_destroy_inode+0x70/0x70 [ 453.480122] ? __save_stack_trace+0x8d/0xf0 [ 453.484467] ? sock_destroy_inode+0x70/0x70 [ 453.488816] alloc_inode+0x63/0x190 [ 453.492465] new_inode_pseudo+0x71/0x1a0 [ 453.496549] ? prune_icache_sb+0x1b0/0x1b0 [ 453.500799] ? save_stack+0x43/0xd0 [ 453.504441] ? kasan_kmalloc+0xc4/0xe0 [ 453.508353] ? kmem_cache_alloc_trace+0x152/0x780 [ 453.513301] ? p9_idpool_create+0x42/0x190 [ 453.517558] ? p9_client_create+0x852/0x1770 [ 453.521986] ? v9fs_session_init+0x21a/0x1a80 [ 453.526510] sock_alloc+0x41/0x270 [ 453.530095] __sock_create+0x175/0x940 [ 453.534013] ? kernel_sock_ip_overhead+0x570/0x570 [ 453.539051] p9_fd_create_unix+0x1c3/0x370 [ 453.543316] ? p9_socket_open+0x220/0x220 [ 453.547490] ? p9_client_attach+0x250/0x860 [ 453.551836] ? rcu_read_lock_sched_held+0x108/0x120 [ 453.556875] ? kmem_cache_alloc_trace+0x616/0x780 [ 453.561744] ? __lockdep_init_map+0x105/0x590 [ 453.566262] ? lockdep_init_map+0x9/0x10 [ 453.570340] ? __raw_spin_lock_init+0x2d/0x100 [ 453.574995] p9_client_create+0x8ed/0x1770 [ 453.579271] ? p9_client_read+0xc60/0xc60 [ 453.583434] ? find_held_lock+0x36/0x1c0 [ 453.587885] ? __lockdep_init_map+0x105/0x590 [ 453.592408] ? kasan_check_write+0x14/0x20 [ 453.596659] ? __init_rwsem+0x1cc/0x2a0 [ 453.600650] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 453.605823] ? rcu_read_lock_sched_held+0x108/0x120 [ 453.610859] ? __kmalloc_track_caller+0x5f5/0x760 [ 453.615718] ? save_stack+0xa9/0xd0 [ 453.619360] ? save_stack+0x43/0xd0 [ 453.623000] ? kasan_kmalloc+0xc4/0xe0 [ 453.627159] ? kmem_cache_alloc_trace+0x152/0x780 [ 453.632044] ? memcpy+0x45/0x50 [ 453.635442] v9fs_session_init+0x21a/0x1a80 [ 453.639876] ? find_held_lock+0x36/0x1c0 [ 453.643979] ? v9fs_show_options+0x7e0/0x7e0 [ 453.648422] ? kasan_check_read+0x11/0x20 [ 453.652587] ? rcu_is_watching+0x8c/0x150 [ 453.656752] ? rcu_pm_notify+0xc0/0xc0 [ 453.660716] ? v9fs_mount+0x61/0x900 [ 453.664451] ? rcu_read_lock_sched_held+0x108/0x120 [ 453.669487] ? kmem_cache_alloc_trace+0x616/0x780 [ 453.674353] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 453.679910] v9fs_mount+0x7c/0x900 [ 453.683487] mount_fs+0xae/0x328 [ 453.686882] vfs_kern_mount.part.34+0xdc/0x4e0 [ 453.691487] ? may_umount+0xb0/0xb0 [ 453.695130] ? _raw_read_unlock+0x22/0x30 [ 453.699298] ? __get_fs_type+0x97/0xc0 [ 453.703232] do_mount+0x581/0x30e0 [ 453.706791] ? do_raw_spin_unlock+0xa7/0x2f0 [ 453.711243] ? copy_mount_string+0x40/0x40 [ 453.715536] ? copy_mount_options+0x5f/0x380 [ 453.719968] ? rcu_read_lock_sched_held+0x108/0x120 [ 453.725004] ? kmem_cache_alloc_trace+0x616/0x780 [ 453.729968] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 453.735532] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 453.741085] ? copy_mount_options+0x285/0x380 [ 453.745608] ksys_mount+0x12d/0x140 [ 453.749261] __x64_sys_mount+0xbe/0x150 [ 453.753254] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 453.758298] do_syscall_64+0x1b9/0x820 [ 453.762224] ? finish_task_switch+0x1d3/0x870 [ 453.766740] ? syscall_return_slowpath+0x5e0/0x5e0 [ 453.771691] ? syscall_return_slowpath+0x31d/0x5e0 [ 453.776648] ? __switch_to_asm+0x34/0x70 [ 453.780726] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 453.786112] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 453.791104] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 453.796309] RIP: 0033:0x457089 [ 453.799520] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 20:07:14 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000003c0)=0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000200)=0xe8) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) accept$inet6(r0, 0x0, &(0x7f0000000500)) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000300)={0xa0, 0xffffffffffffffda, 0x3, {{0x1, 0x3, 0x0, 0x1, 0x3, 0x100, {0x4, 0x9, 0x7, 0x3cc, 0x8, 0x1000, 0x7, 0x80000000, 0x7, 0x20, 0x2b87, r2, r3, 0x2, 0x200}}, {0x0, 0x4}}}, 0xa0) ioctl(r0, 0x3, &(0x7f0000000400)="35265144d1fef79f63f25320d889a6b0926ca3e988eff640782bcd7d03c4afb10948561fe7df1bf07d4ff804614cf05297a95b636f0a876702d4d5341c959e5c69d90a084ce02263610bc6d5592c9ca14967789f1291b835f0b5ad75f65d27e9d011f7edfafa6c312e2b6f0653e1a402b9e5f6cc61a7feb2269878ffdbfa8d84509fa477a5b07e78876b424897fb5a12e3d1c2f44ca58c258cf6071b942df556d18b2ea10ad14a639313cb0a8f34b64d72163673c8a94129ff9b787c17a33e4052c271f044db50363224f5541ddb0699") readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'yam0\x00', 0x4}, 0x18) [ 453.818809] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 453.826541] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 453.833828] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 453.841111] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 453.848396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 453.855681] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000013 [ 453.863090] socket: no more sockets [ 453.866770] 9pnet: p9_fd_create_unix (23956): problem creating socket 20:07:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x200000, 0x0) fcntl$setpipe(r1, 0x407, 0x5) ioctl$KVM_GET_DEVICE_ATTR(r3, 0x4018aee2, &(0x7f0000000380)={0x0, 0x1, 0x1f8, &(0x7f00000002c0)=0xf2}) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='urans=fd,rXdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000180)={0x34, 0x0, &(0x7f0000000140)}) 20:07:14 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) write$FUSE_STATFS(r0, &(0x7f0000000280)={0x60, 0xfffffffffffffff5, 0x2, {{0x4, 0x4, 0x6, 0x4, 0x9, 0x800, 0x1c00000, 0x4d1}}}, 0x60) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000000)=0x6, 0x4) pause() tkill(r2, 0x101000000000013) 20:07:14 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r0, r0, 0x80000) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000040)) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000004c0)={0x7b, 0x0, [0x34]}) 20:07:14 executing program 3: r0 = memfd_create(&(0x7f0000000000)='posix_acl_access\x00', 0x1) ioctl$KDDISABIO(r0, 0x4b37) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:14 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:14 executing program 2 (fault-call:3 fault-nth:20): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:14 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\t\x00', @ifru_names="04707000"}) [ 454.134579] 9pnet_virtio: no channels available for device (null) [ 454.207938] FAULT_INJECTION: forcing a failure. [ 454.207938] name failslab, interval 1, probability 0, space 0, times 0 [ 454.208801] attempt to access beyond end of device [ 454.219305] CPU: 1 PID: 24005 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 454.219322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 454.224463] loop6: rw=12288, want=8200, limit=20 [ 454.231409] Call Trace: [ 454.231435] dump_stack+0x1c9/0x2b4 [ 454.231462] ? dump_stack_print_info.cold.2+0x52/0x52 [ 454.231497] ? perf_trace_lock+0xde/0x920 [ 454.261240] should_fail.cold.4+0xa/0x11 [ 454.265398] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 454.270558] ? find_held_lock+0x36/0x1c0 [ 454.273894] attempt to access beyond end of device [ 454.274669] ? check_same_owner+0x340/0x340 [ 454.274696] ? rcu_note_context_switch+0x730/0x730 [ 454.279705] loop6: rw=12288, want=12296, limit=20 [ 454.283968] __should_failslab+0x124/0x180 [ 454.283986] should_failslab+0x9/0x14 [ 454.284004] kmem_cache_alloc+0x2af/0x760 [ 454.284024] ? lock_downgrade+0x8f0/0x8f0 [ 454.284047] sk_prot_alloc+0x69/0x2e0 [ 454.284069] sk_alloc+0x106/0x17b0 [ 454.284089] ? sock_def_error_report+0x720/0x720 [ 454.284108] ? zap_class+0x740/0x740 [ 454.306138] 9pnet_virtio: no channels available for device (null) [ 454.310248] ? perf_trace_lock+0x920/0x920 [ 454.310274] ? graph_lock+0x170/0x170 [ 454.310294] ? lockdep_init_map+0x9/0x10 [ 454.310309] ? init_timer_key+0x187/0x490 [ 454.310337] ? find_held_lock+0x36/0x1c0 [ 454.319515] attempt to access beyond end of device [ 454.322464] ? lock_downgrade+0x8f0/0x8f0 [ 454.322491] ? kasan_check_read+0x11/0x20 [ 454.322507] ? do_raw_spin_unlock+0xa7/0x2f0 [ 454.322532] unix_create1+0x1ca/0x670 [ 454.322553] ? unix_stream_splice_actor+0x180/0x180 [ 454.322573] ? __local_bh_enable_ip+0x161/0x230 [ 454.326328] loop6: rw=12288, want=8200, limit=20 [ 454.332526] ? unix_create1+0x159/0x670 [ 454.332546] ? m_show+0x5d0/0x5d0 [ 454.332563] ? unix_stream_splice_actor+0x180/0x180 [ 454.332589] ? lock_downgrade+0x8f0/0x8f0 [ 454.405499] ? unix_mkname+0x11e/0x1d0 [ 454.409439] unix_stream_connect+0x297/0x11e0 [ 454.413966] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 454.418670] ? security_socket_post_create+0x9f/0xd0 [ 454.423820] ? unix_shutdown+0xa60/0xa60 [ 454.427930] ? kernel_sock_ip_overhead+0x570/0x570 [ 454.432920] p9_fd_create_unix+0x258/0x370 [ 454.437219] ? p9_socket_open+0x220/0x220 [ 454.441403] ? p9_client_attach+0x250/0x860 [ 454.445754] ? rcu_read_lock_sched_held+0x108/0x120 [ 454.450818] ? kmem_cache_alloc_trace+0x616/0x780 [ 454.455685] ? __lockdep_init_map+0x105/0x590 [ 454.460228] ? lockdep_init_map+0x9/0x10 [ 454.464331] ? __raw_spin_lock_init+0x2d/0x100 [ 454.468933] p9_client_create+0x8ed/0x1770 [ 454.473224] ? p9_client_read+0xc60/0xc60 [ 454.477389] ? find_held_lock+0x36/0x1c0 [ 454.481491] ? __lockdep_init_map+0x105/0x590 [ 454.486013] ? kasan_check_write+0x14/0x20 [ 454.490268] ? __init_rwsem+0x1cc/0x2a0 [ 454.494262] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 454.499299] ? rcu_read_lock_sched_held+0x108/0x120 [ 454.504337] ? __kmalloc_track_caller+0x5f5/0x760 [ 454.509218] ? save_stack+0xa9/0xd0 [ 454.512862] ? save_stack+0x43/0xd0 [ 454.516502] ? kasan_kmalloc+0xc4/0xe0 [ 454.520406] ? kmem_cache_alloc_trace+0x152/0x780 [ 454.525268] ? memcpy+0x45/0x50 [ 454.528597] v9fs_session_init+0x21a/0x1a80 [ 454.532939] ? find_held_lock+0x36/0x1c0 [ 454.537040] ? v9fs_show_options+0x7e0/0x7e0 [ 454.541476] ? kasan_check_read+0x11/0x20 [ 454.545642] ? rcu_is_watching+0x8c/0x150 [ 454.549806] ? rcu_pm_notify+0xc0/0xc0 [ 454.553717] ? v9fs_mount+0x61/0x900 [ 454.557450] ? rcu_read_lock_sched_held+0x108/0x120 [ 454.562483] ? kmem_cache_alloc_trace+0x616/0x780 [ 454.567353] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 454.572909] v9fs_mount+0x7c/0x900 [ 454.576480] mount_fs+0xae/0x328 [ 454.579876] vfs_kern_mount.part.34+0xdc/0x4e0 [ 454.584479] ? may_umount+0xb0/0xb0 [ 454.588121] ? _raw_read_unlock+0x22/0x30 [ 454.592287] ? __get_fs_type+0x97/0xc0 [ 454.596221] do_mount+0x581/0x30e0 [ 454.599789] ? copy_mount_string+0x40/0x40 [ 454.604054] ? copy_mount_options+0x5f/0x380 [ 454.608484] ? rcu_read_lock_sched_held+0x108/0x120 [ 454.613521] ? kmem_cache_alloc_trace+0x616/0x780 [ 454.618388] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 454.624021] ? _copy_from_user+0xdf/0x150 [ 454.628222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 454.633777] ? copy_mount_options+0x285/0x380 [ 454.638298] ksys_mount+0x12d/0x140 [ 454.641953] __x64_sys_mount+0xbe/0x150 [ 454.645953] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 454.650996] do_syscall_64+0x1b9/0x820 [ 454.654905] ? finish_task_switch+0x1d3/0x870 [ 454.659418] ? syscall_return_slowpath+0x5e0/0x5e0 [ 454.664369] ? syscall_return_slowpath+0x31d/0x5e0 [ 454.669317] ? __switch_to_asm+0x34/0x70 [ 454.673395] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 454.678785] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 454.683651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 454.688851] RIP: 0033:0x457089 [ 454.692062] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 454.710974] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 454.718790] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 454.726077] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 454.733359] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 454.740641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 454.748036] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000014 20:07:14 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) dup2(r0, 0xffffffffffffffff) 20:07:14 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00)', @ifru_names="04707000"}) 20:07:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6e387ec1be006e642c88"]) write$P9_RREADDIR(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2ae89878c3e58d0000002901206a0000000002000000b5a86ebed0770cf084fe43b7ef984c3e0001a73dd25dbedc62d205313ca5cedd8655f61735ff08d515d7900000000000"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="187108a3be9268e291a9ea84980d9551f5348ec7"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000480)={0x0, 0x8}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r4, 0x101, 0x2, 0x4}, &(0x7f0000000540)=0x10) lchown(&(0x7f0000000080)='./file0\x00', r3, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000580)=0x0) sched_setaffinity(r5, 0x8, &(0x7f00000005c0)=0x2) write$P9_RLCREATE(r2, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x8, 0x2, 0x4}, 0xffff}}, 0x18) 20:07:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x1) sendmmsg$alg(r0, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="256e397de4e900decc4840e087707fd039a8b0dd31e1644f52ed3d5d59d0b28f43e7458924c90c4d35ffbf7875ada8271f97a42ec485bd679eb11cb5986cc0a7dae426bc1e2cd379210a65fddb5f22c9ec45748d4ea60f237340f0869146a99926fdbe41b270851b5c1e36a97004067c71262b4d74af09dd840c96fd4cc35cadc364c5af450e0bf1fedef173d932461fb45e658c585776d23d8f50fd0d731c01b9af5dec71c9d78234e8cfd5f0e2f3ae99a63bee8e6bbdcf18697c7ab9e84b4c34c6bf57bf1d91123da00f5ee2afe0782c6b02fa22d6548883a525161a10cd7d0fa4bac2f0", 0xe5}], 0x1}], 0x1, 0x40) [ 454.756153] 9pnet: p9_fd_create_unix (24005): problem connecting socket: ./file0: -12 [ 454.772867] attempt to access beyond end of device [ 454.777948] loop6: rw=12288, want=12296, limit=20 [ 454.790511] 9pnet_virtio: no channels available for device (null) [ 454.824302] attempt to access beyond end of device [ 454.829376] loop6: rw=12288, want=8200, limit=20 [ 454.836849] 9pnet_virtio: no channels available for device (null) 20:07:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r3 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x28400) r4 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x14010, 0xffffffffffffff9c, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x30, 0x0, &(0x7f0000000180)=[@decrefs={0x40046307, 0x4}, @acquire={0x40046305, 0x1}, @exit_looper, @increfs_done={0x40106308, r4, 0x3}, @acquire={0x40046305, 0x4}], 0x80, 0x0, &(0x7f0000000380)="faf4db12fad31c9a5e7afa264496803a34f9dcade7e2f0b71827fa63ad7cdd355c8d0d8ef5653b89bb0e79e660e512f66038ba27f184b786b877c7696aa1471e882816337c77f9ce9f7f9b77bfafc723528bb5ed77dc28d6cb756a59043289ea22e2f677108699b4c00349e565ec8cb2441980429e8c23b564fc4e77a89e745d"}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 454.869603] attempt to access beyond end of device [ 454.874668] loop6: rw=12288, want=12296, limit=20 [ 454.910129] attempt to access beyond end of device [ 454.915234] loop6: rw=12288, want=8200, limit=20 20:07:15 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x81, 0x7ff, 0x80, 0x7, 0x2, 0x3, 0x2, 0x9}, &(0x7f0000000280)={0x4, 0x401, 0x100000001, 0x7fffffff, 0x8, 0x6, 0x400, 0x2}, &(0x7f00000002c0)={0x0, 0x100000001, 0xc1f0, 0x101, 0x101, 0x7, 0x4, 0x7fff}, &(0x7f0000000300)={0x77359400}, &(0x7f0000000380)={&(0x7f0000000340)={0x5}, 0x8}) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() alarm(0x400) tkill(r2, 0x101000000000013) 20:07:15 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00)\x00', @ifru_names="04707000"}) 20:07:15 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/18, 0xffffff64}], 0x1) [ 454.950603] attempt to access beyond end of device [ 454.955646] loop6: rw=12288, want=12296, limit=20 20:07:15 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:15 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000023000)={&(0x7f0000000000), 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x20, 0x8aff, 0x0, 0x0, {0x8}, [@nested={0x8, 0x1, [@typed={0x4, 0x0, @binary}]}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) ptrace$setregs(0xd, r0, 0x2000000100000001, &(0x7f00000020c0)="effe89d3213d587100b2fa619aaa4d5e81bb2298ac17320b81fe7f0bbca6f247770ebdec3c2af14d84affa30ea4191e061fc19e2ddb2994b0d713b5feb7f3385d515aca3b84e6a560204ac95e81dfd24eca0e622d22a36cffe856bf8167f50aee27263c5e3ebb0581883a2dd5fe5367739f53dd185291c3c5d925adce82ec0c95bd41355351095911e400c2666f1f9bbfd21561562efd9d035677c15abba53456d4252bcfb2e66d52e398356c1b486f3eac2cc3cecbaff8d8edb65b8d61c51984901c8799f6b416b89a7cb28954db24f89bfe3773b109f0e834a708cbdf9a8419b29368ff0e131dec530379e9e86397322ca1f0303d14f0aed3240808c9e56ff433336e9362c60c1685b10c5bc0f98d5bfc3e54b6f1a13b4a3862dd28a72052ee39ce0a1a21c1b9618efc362affce34d66b0887fd11a41759f93b817dc094524eda7b418f3554fd2341aecce8c100e35ed53781cfd5568f662a5cbad49ad77802aceee8b1bd6dabf54efe138058ac4d8189b9d84df8ca0149f7d74677470537f04cdfac4860a0fc2345403d81c2eba4b5f86bfcd369adee04baf9b4bd8fa2355cb5020886986ae0aef626221056b29b2234b0349b0023ebea247662b5c86d3f60cb34ed465829374e7ef80d0136ce82237760898b4196049bbf0e06f6d5e5cc6cb59a0bf5fa4296f9c1e9495f9a7923aef6151551165bed79018c00a332dcf8e712ec1a33a7cf08598220088b8a251086ef4ca50e57c350eeef44695c1349d64483e489a72ee5741936a116e84a3464cbbb62497817137ecf3d581f4b3913049eac9776edb58dae578ec3fe801a507ccebd7eed4c30294a1f41d6469428af3fd3476269a5956c768a85c076657970bf83c4d669ba34de15bbed4fb9edff8d13be6d688d9aed0d924c399ad5ea90550b47c1eb0d8761f561d3370b3ee574fb490610c2a771ba1f1e1e4f8458368d51e0ff5b272f3b29f56ac905b5b78a0561a0b248611e635615a56424524c61092fe0cec4985d4fe81bef00742cb69ffd43543f64bcb3ea849ab7f8ac8174661661a5ae8216e02af39755fd719333f4f4dedff7d421e4d83773aec11136e81beb921b9513e6bad5d3a097e61fedbd6a50a3b9a09366e6abb27e8beb6b91ddce3748427232bb683aa12fcda8b03f6cf682ce5e176f2451578b350fd1d2a74207bed04531309cd7a3f2b63c817b96ccb8658a54aff21c1240024c4fcfd04e22078db60b3c11ac296b46d0a6aefd62f91d85dc5ef951cee09b7bee3fa4a8237aa9ac24538ec6f555af3f04679b87bb08a68ee2a3d5c3036a32dc6f18a37203e3ffe6585a2e3da2828cc84975487afa58e30df5649dee43e8dc98c5fab9b72936102652e32a7c10bf072d575f9d4b7ac9836631202dae70e0bde0d44f3450a1ae898b92095cab51802d98729f62f2613ef4085bce5aa08aad8895d4465c2393a39ab78ff104b818cce4fc235dd33783ecb0792b02d6d9f13d02ff0aff16ee1ceef438d2c721112cf23841b71a4af97298b3a3f3a4f81c4ea1627d38299f91f99f077fa67d542c847567a378be015dd35a84e4a7b7681d4ad08f730b0fceb1841256ed860133fc971a7a13632b2f0449aa354163fa8f209b434840cae9dd40044b3351eaa81a5bab3707aefabd7d0cc77ea3bcb0b2f0263dd31b3ced5bf65f763b12f70ba15154a05f9a6c168e5a79b8981caf263ba190974827e93ed3fb18e15fd253cd89296457fe1dbabe81e7f97107259d4a01509309abac04cfa38938115559e87188f208bbf852b342a7864f8f872384c4981a1f52d34a4ca680def74a97cc55f95b1971dfc5c78df09d4c01eb2db8fc58424975c67c130aa197822583f4f5e069f9c77f2741152eee1b6343a4bcdc379d123bddc50786c2f9bfc6cc6de8af1559a2271f0c79a4f9d3259b22c5fe83d64fae5176015cbceb5239df4845ef4616f03ccb5ed820a4201af12fac6eee62fa9736a49ae342dce8af4e96c0e207d17d93d63d4a88c5e4781e63aa1cad0ade01bff2173eacf2c24cbecc80245edf2d8401e1e39cfde1d5c1796ec78d2c3ea0ad4baba37d76f061e6abe66ea8abc025d2aa525d4dba029ef89fddc15e020ee5aeb2b6daf844e37a0bfa532a0b641ab359e0d8c855e8a8eaa07c5b2b4430b7e44c8c475c0572eed4c1cbf6298a338f7d7beee2c0cf3284fd9fbe9ce5f4cd75bca1df9b83b1fefbd9402da5c1ca97396d5abc5e9d78aa547547fb540bef82ce5a34cda97a5a3ed2fcef175b37108798386fe521f96e227c14f23e387e30e9bd9d6df2aff9626ca227fb61e10ae3a452b1bc850f79402f493ed660a613d754566a32f658d0492571533506686129d706cc8bdb2fbf1f31df4c9b532745b1b847c19d1b8483f2ea38095995bbd5229bf28bfbfb431c91be05a3aba47a748f042e9bb414963afac02a537ed3b3d53b7a0f3e6d7d64d0d138104b9f731c36ae8fa83a97e113c501daeaa842e11189dd3982e881024359e27d1dd5a94560c046cd02763f5c9264b9676ff18a17d7640ce0ff063903e5c7fc62baa18f53aeeffdedabfc550d5afb40266fe222402e93b780836cf4c9b8ca67bd07ed391281634af40b815b78671d1f60a3c57c7d889e1d4015c7f5d0d2792de376e45248ffccc002905420b29874a0e461fbac15b30d065b090060a83f567a4153fccfc7b7ea55fd262287840300068c31345c8f5d0e6610da2ce655f0fa77cb5b05482ae6c25af1463e0da10a1dca827583f9679ab457fd961cd913ee7e43b9a695e208ab057759aafef590f526423cd0db923f8aca12e08a2ff870fff874da087042c4fab41206d8d75f11ad7fc1f0e47f3a027da36d532a9b8d64d9b303a8abccb0246ea5600a740bbe657a61cd9c89cad0874710c26e0bbf68f1994131498bbec0a79be955e08dfce80ec55f36b3efd6e02ff0fa9b915b12fcc6e406d1aecf1bb25812d8f604ce3d6f83c248a8391b09ec1ec1341a25ec4064d5745170497c17d03fc77976e5960e70d0714ec44927b79c36958c141c1803330574646ada7e958b1991a1efdc07baeffc3be145761a942a658972718f6a80dee6218baa5af1892fa08b4c91247b0efa9fc04b394ab84a1ca3620759f329a6233f9a783036a767b221d5cb9e158af40f890d40dae5e1a1f7d3138eb9ca1b6774050a35459b7ba73c4843621e795abd164151491df62d3d76ab26148b28d364b28ec0cca1a13d7fd251483f6bb514b7a701f8cc9d4ba205527bf981315286600701821c1fc330356f5afbd624e0f9bfc40f3c94016b9d0a92848cd753551eeb7a4cef9697470f8f59fc66af8a43dbf304008bf5e1bc5711fcc3d1f00278fd5f3fb2ddb4b5b60eb44f5cef17f12cac1bacf74a3db8d03af62fa793d45a75ebcf0256a87da18efaa70b4b268369c0186d109df0b48acabc90e5a9ad592263390c8498c693ae4d5353b6abd8d4767d10c5f935f340ec4e107e06b84e988cb6ec70efcd08ee3ea03f0a830c702219ea475a58bba44b6c9232437d752eec26a715eb9c4edf87923ee2a179bfcd698beffc92fb870500c186cfc8369946b982f8963103074bc90468fb75586d6d8105d166e105bc9c8b4f273526e76d05a02cf1c1fdcb95803c8643e1940e0d7170eaec518bf0fc27d448f09ec264fa151eb6af10f230c3f7a16e09dbefcf8d489eee3c2c7e0d17ccb1877bc63981c7afc3f2a4df5957ddc39f9e8d8907365b7941fa7674bbc4ba149b414f80ef4b966db1760cdc051d36487b77449f0badcb80e9b4d862d3ddd7b5df319155dad70c45c224b4d305340494c26359e66ee90882935de0a0989056e17eccb9574f6277eff2fa52cd759b7d97638a6855f0adde21b57e12b55d41511bdd375657cb411898844e21ed8a5fdd100f15db37bd5d1f171eb82e51f5e7d83014fdbcc30d16f3323ef8f660cb792d12bf6bc30fef78b1d5d7ddfdf780d0d3527503ccb30818ca64b7843f778a10a034ccc1f68ee758cd38a3b5a7e5d176d8d66b2277f5e967219c3b4af653d5910b217d7fc497cb0ab85c3398016c2743820d15a78b47428af591c3c7b190ef0ccdd47e62b4fb988ad9f70b89175c866b50aa50db4082eb733fecbaa480e67bbd46c6246e7174e04a376c92926fbc901449ca49e7144f21802aa2e44ed3c3dd20cd7e4d263110bfd73dbbc00600b7e715b00a768eca6bd332caf8850c5b4fe04b7e0ba724db7d969c518fe11f967e6a7cd5ab4043c55e859841a27c2b69e1c7b3f9decd5c320d631677abf254569efe184091aad9c27c1d670a684981e13ae69ebe7bde62510089a8ffc7a8bc09bc6a016c6dfefd7c3106a7c75a628eba6ed75dd9c1811532c7361498ec7e91cb99d035b4eb916f043a0c6c87a95f5acb9382104650789a05196f99248b281b37994f5c960be2f43f8cce644161ef2c2e427f3e8f4b118e9300afafe876a7a52e9296ab9949239597ebd305907a240d5b15281beb8d30a4bcd490f8f4b0c7a6f61ce777e52b1f14fd43e9ea6f562341a361ed641bfb2853b2f41eaec8c981106b51c0f4ed7ef5c8ec7aa2777701be64e56a0fb4d95fa8f407d1a22eac1ce30b8117049a60195ce6a5cab93d0a02f5edebab8ba0c5511294d2c0fc51293b67549e3dbfaf79c9005ea20ce47f6c39d0b7376bc302bd12f4f4b0316515f9adc63a3289cb3d702d3887b99062f198e2c20b897f47d798dff857536ceed4c98cc8854417b03879a6f8e77d0e185ead2d3a908f55f9bd55c3f16c96c1971b83a6618dacc18b5a406b5e256d023052db63742e8bf3027c6f4567a6042f05804a293fdd23bf134291045ede31ab296a14affad72ca8b346d0561b1a247f34903e342fcbe32c8bf0f256bfa89aa64bb2953ffbcdfacbade299529ad3bcc84ea24692ee34addaa57f712192b39b057f04409c8142b15a5e8ed95bd1bac484f57c7e828ac5c17bc5506f3a2ae986f344e20b56b173f20cd44b608477de6b9604f0a9aca565aa8bbfd56b0f3826d4045126f40d7a4b187b5e7d1dc6ef416f50080000000000000e81730d2391cf608364300e7eba117a12d53949175213f5503cc4817a025879f3fc1d82e913cdb5d905308735b822671bdbaa0736f32af4d024800a9f71912f8d7e4a4ef09dc3d8a438a183cd2852b8836039d62ecdaf25e6bb202a742f7ddae6047eda6e42e3e71ac6dcdaacb7fa4bfb1cfd04222981a577bfb2568341c670fcde682261c51f5430ebcc498d8efb6f754cd2516ae0c4c20a3f603dcd4b23574a2843fe7c56ca608b2c900425cf1c771d1924ba82b035b44ab5677ae831afe547f5f7d80cf17996978a95f6928fe5eae997b0ed9fdee7ce17ec4992d30db780d974b9767fa9751245806446ccee58c797ffdbd09362fb1ae2a329e0852de59cd9604bfc039fdbbc11d95b23e991353b6ed35ac2a627999112b2104cf18a3b387ead3542960e07deae8d46c77757fdf40594b16e957df69eb23a3e7bee8a566026bb55631795a537d94f80c9db56a8fcf2802b5d43f55df54dca224f49f75adc73c0e0670ea6874f98e84412ec7fa8fd12cdad5ec2c59650c5ff8069a3320c11fc3386940d19969fcdc66cdf8123c12c6aba343c23de5be0eb5c6f62ab0b3bcceadf9d4daf905dd6f26d0ad3b1ebc72669b6979966225af9760b76c94402e2db9a6faa290960e1d0eda4ca0775cf6e58989ec64df32725f8db37b8da166e730276ea9a07ad48798e09da71798ea0f8833ebc1e1c0153563d60e7c70735018c337d07610d73480cca1dc9ca6469add39f26e36ced0289b3db0fc0a6bc51faefd92e4bf629a2c1cea3d91c5258f5071bfb7acd09acb5b78e658d5eef0355e1697") 20:07:15 executing program 2 (fault-call:3 fault-nth:21): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) rt_sigprocmask(0x0, &(0x7f0000000180)={0xdf}, &(0x7f00000001c0), 0x8) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB='\x00'], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="686966d96e6f3da8620120a64ab046835e8a322759956d77e9274a520ffc45d4c2a94c31c14bf65f3d45a15c55e2736d143926e5df0df095186acfdc994be06ad8c4a02b3f93081c246510954a5e46", @ANYRESHEX=r2, @ANYBLOB=',\x00']) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 455.117530] attempt to access beyond end of device [ 455.122682] loop6: rw=12288, want=8200, limit=20 20:07:15 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x401, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000100)=""/77) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:15 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000000fffffdfd", @ifru_names="04707000"}) [ 455.187385] attempt to access beyond end of device [ 455.192528] loop6: rw=12288, want=12296, limit=20 [ 455.209914] FAULT_INJECTION: forcing a failure. [ 455.209914] name failslab, interval 1, probability 0, space 0, times 0 [ 455.221301] CPU: 0 PID: 24060 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 455.228335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 455.237708] Call Trace: [ 455.240343] dump_stack+0x1c9/0x2b4 [ 455.244007] ? dump_stack_print_info.cold.2+0x52/0x52 [ 455.249254] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 455.254305] ? trace_hardirqs_on+0xd/0x10 [ 455.257708] attempt to access beyond end of device [ 455.258486] should_fail.cold.4+0xa/0x11 [ 455.258509] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 455.258527] ? __switch_to_asm+0x40/0x70 [ 455.258543] ? __switch_to_asm+0x34/0x70 [ 455.258560] ? __switch_to_asm+0x40/0x70 [ 455.258583] ? __switch_to_asm+0x34/0x70 [ 455.263558] loop6: rw=12288, want=8200, limit=20 [ 455.267578] ? __switch_to_asm+0x40/0x70 [ 455.267593] ? __switch_to_asm+0x34/0x70 [ 455.267608] ? __switch_to_asm+0x34/0x70 [ 455.267621] ? __switch_to_asm+0x40/0x70 [ 455.267642] ? __switch_to_asm+0x40/0x70 [ 455.287080] 9pnet: Insufficient options for proto=fd [ 455.289002] ? __switch_to_asm+0x34/0x70 [ 455.289016] ? __switch_to_asm+0x40/0x70 [ 455.289039] ? __schedule+0x884/0x1ec0 [ 455.289064] ? __sched_text_start+0x8/0x8 20:07:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e6f3df1370fa73778b9aa4a877e62c1e242cdd12309450a677460eef212c7dbdf92a479852e15d65ffb145cabae16a92abd160bac6dd75d1bf441e9a01a87b3ab3d58771c83e5021adc32d3ec6b1b3970c3874ac4d7796107caa5cfa87c41d956915317f4fdbaea7af99baea86207e6803be4cd819dc4ed931e17ccbd8b1776eb4de07f316166d0d8ec5060524190ebcc8823430f135ac6cbd3d3293ca514e821d7b4282627dbb4774f0e6cf6c41242dc424802fc3bbdfd0a930739cef22af9d9e64100588a9b0fc2937f201cdf8e5427fa45cf47f3ee312c77fc65288bccb97cc3991aedc04e35e6e0cdee781e97473f", @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a00000029010000000000000000f084fe43b7ef984c3ef500a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0xfffffffffffffffe, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:15 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x400) [ 455.289084] ? find_held_lock+0x36/0x1c0 [ 455.300583] attempt to access beyond end of device [ 455.301993] ? check_same_owner+0x340/0x340 [ 455.302022] __should_failslab+0x124/0x180 [ 455.302040] should_failslab+0x9/0x14 [ 455.302057] kmem_cache_alloc+0x2af/0x760 [ 455.302081] ? lock_downgrade+0x8f0/0x8f0 [ 455.306210] loop6: rw=12288, want=12296, limit=20 [ 455.310239] sk_prot_alloc+0x69/0x2e0 [ 455.310261] sk_alloc+0x106/0x17b0 [ 455.310280] ? sock_def_error_report+0x720/0x720 [ 455.310299] ? perf_trace_lock+0x920/0x920 [ 455.321248] 9pnet: Insufficient options for proto=fd [ 455.323608] ? graph_lock+0x170/0x170 [ 455.323628] ? lockdep_init_map+0x9/0x10 [ 455.323643] ? init_timer_key+0x187/0x490 [ 455.323670] ? find_held_lock+0x36/0x1c0 [ 455.323698] ? lock_downgrade+0x8f0/0x8f0 [ 455.412089] ? kasan_check_read+0x11/0x20 [ 455.416261] ? do_raw_spin_unlock+0xa7/0x2f0 [ 455.420703] unix_create1+0x1ca/0x670 [ 455.424532] ? unix_stream_splice_actor+0x180/0x180 [ 455.429566] ? __local_bh_enable_ip+0x161/0x230 [ 455.434257] ? unix_create1+0x159/0x670 [ 455.438258] ? m_show+0x5d0/0x5d0 [ 455.441737] ? unix_stream_splice_actor+0x180/0x180 [ 455.446783] ? lock_downgrade+0x8f0/0x8f0 [ 455.450963] ? unix_mkname+0x11e/0x1d0 [ 455.454881] unix_stream_connect+0x297/0x11e0 [ 455.459401] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 455.464103] ? security_socket_post_create+0x9f/0xd0 [ 455.469257] ? unix_shutdown+0xa60/0xa60 [ 455.473345] ? kernel_sock_ip_overhead+0x570/0x570 [ 455.477743] 9pnet: Insufficient options for proto=fd [ 455.478314] p9_fd_create_unix+0x258/0x370 [ 455.478333] ? p9_socket_open+0x220/0x220 [ 455.478359] ? p9_client_attach+0x250/0x860 [ 455.496209] ? rcu_read_lock_sched_held+0x108/0x120 [ 455.501258] ? kmem_cache_alloc_trace+0x616/0x780 [ 455.503720] 9pnet: Insufficient options for proto=fd [ 455.506139] ? __lockdep_init_map+0x105/0x590 [ 455.506166] ? lockdep_init_map+0x9/0x10 [ 455.506220] ? __raw_spin_lock_init+0x2d/0x100 [ 455.506248] p9_client_create+0x8ed/0x1770 [ 455.506282] ? p9_client_read+0xc60/0xc60 [ 455.532903] ? find_held_lock+0x36/0x1c0 [ 455.537009] ? __lockdep_init_map+0x105/0x590 [ 455.541543] ? kasan_check_write+0x14/0x20 [ 455.545802] ? __init_rwsem+0x1cc/0x2a0 [ 455.549804] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 455.554851] ? rcu_read_lock_sched_held+0x108/0x120 [ 455.559893] ? __kmalloc_track_caller+0x5f5/0x760 [ 455.564761] ? save_stack+0xa9/0xd0 [ 455.568411] ? save_stack+0x43/0xd0 [ 455.572062] ? kasan_kmalloc+0xc4/0xe0 [ 455.575975] ? kmem_cache_alloc_trace+0x152/0x780 [ 455.580853] ? memcpy+0x45/0x50 [ 455.584158] v9fs_session_init+0x21a/0x1a80 20:07:16 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) dup2(0xffffffffffffffff, r0) 20:07:16 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x10) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x1f00000000000000, 0xd2, &(0x7f0000000000), 0x3c) r2 = shmget(0x3, 0x1000, 0x78000000, &(0x7f0000ffe000/0x1000)=nil) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000040)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) pwrite64(r1, &(0x7f0000000480)="bfb4774ea5d949a5c48b1bcd263e55dc6792f979074c5f645ccc6308d633f86bf2e47e5f3c1c5b49a799fab933391d744ae19c9b369ebc68c320a9fecac3e0516e0671f545e4ee8249ad93833868", 0x4e, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) r6 = getegid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000400)={{0xc9ee, r3, r4, r5, r6, 0x0, 0x7}, 0xa5b, 0x7, 0x8, 0x722e, r7, r8, 0x3}) 20:07:16 executing program 3: r0 = gettid() r1 = syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x20, 0x2001000000000) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000200)) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000080)) getgid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r2 = syz_open_procfs(r0, &(0x7f0000000140)='net/ipx\x00') readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) syz_extract_tcp_res(&(0x7f0000000280), 0xfffffffffffffffd, 0x2) 20:07:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40810900}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x74, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4c98abdc}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f00000001c0)={0xfffffffffffffeb9}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000770349aa63aa6eb3090cde84fe43a12a984c3e00000000000000000000000000"], 0x2a) write$P9_RREADDIR(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="16518582b554f183b48f6ec526b1fe303fcbc83054d4fecd389384eadcf74b6b67365ec7367884035870d031f72eeb6da3e6c6621f4f94eed5b049332ed4d3b41abe3381dcc1f8698b336b82be4006499cb18109039eacee4823bbd096f47bb2bad91c06abaed784e131f44a9f23978884b715cd371b29ec973fba4edf05b7549c3d7ed79081320df4e8da0d1a49e551d597f599c4576707eb7004d221e7472773d38df7ca3f7622d30a707233813a489c6276bed52a868eafb89dc7eab6ac89b1b3059ed21812fcd387593a12db48e0104630f599e207e3517a45041e0561a6d43a0f666974b3085212876ebfcf89"], 0x115) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 455.588526] ? find_held_lock+0x36/0x1c0 [ 455.592626] ? v9fs_show_options+0x7e0/0x7e0 [ 455.597070] ? kasan_check_read+0x11/0x20 [ 455.601245] ? rcu_is_watching+0x8c/0x150 [ 455.605416] ? rcu_pm_notify+0xc0/0xc0 [ 455.609341] ? v9fs_mount+0x61/0x900 [ 455.613081] ? rcu_read_lock_sched_held+0x108/0x120 [ 455.618127] ? kmem_cache_alloc_trace+0x616/0x780 [ 455.623004] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 455.628834] v9fs_mount+0x7c/0x900 [ 455.632408] mount_fs+0xae/0x328 [ 455.635862] vfs_kern_mount.part.34+0xdc/0x4e0 [ 455.640491] ? may_umount+0xb0/0xb0 [ 455.644144] ? _raw_read_unlock+0x22/0x30 [ 455.648341] ? __get_fs_type+0x97/0xc0 [ 455.652261] do_mount+0x581/0x30e0 [ 455.655834] ? copy_mount_string+0x40/0x40 [ 455.660123] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 455.664910] ? retint_kernel+0x10/0x10 [ 455.668831] ? copy_mount_options+0x1f0/0x380 [ 455.673354] ? copy_mount_options+0x202/0x380 [ 455.677873] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 455.683438] ? copy_mount_options+0x285/0x380 20:07:16 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000000080)='./file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, &(0x7f000000a000)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40080, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendfile(r0, r0, &(0x7f0000d83ff8), 0x2008000fffffffe) r1 = semget$private(0x0, 0x3, 0x600) semctl$IPC_RMID(r1, 0x0, 0x0) [ 455.687975] ksys_mount+0x12d/0x140 [ 455.691627] __x64_sys_mount+0xbe/0x150 [ 455.695659] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 455.700718] do_syscall_64+0x1b9/0x820 [ 455.704629] ? finish_task_switch+0x1d3/0x870 [ 455.709147] ? syscall_return_slowpath+0x5e0/0x5e0 [ 455.714123] ? syscall_return_slowpath+0x31d/0x5e0 [ 455.719076] ? __switch_to_asm+0x34/0x70 [ 455.723163] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 455.728581] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 455.733468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 455.738680] RIP: 0033:0x457089 [ 455.741894] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 455.761005] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 455.768737] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 455.776026] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 455.783313] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 455.790599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 455.797887] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000015 [ 455.805438] 9pnet: p9_fd_create_unix (24060): problem connecting socket: ./file0: -12 20:07:16 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0100871482a98b0131920000ff000000000000000000000001000000c8020000000000000000000000000000000000000000000000000000"]) tkill(r2, 0x101000000000013) 20:07:16 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xffff, 0xc000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000140), 0x0, {0xa, 0x4e23, 0x8, @loopback, 0x7fff}, r3}}, 0x38) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000180)=""/59) [ 455.857547] attempt to access beyond end of device [ 455.862629] loop6: rw=12288, want=8200, limit=20 [ 455.947632] attempt to access beyond end of device [ 455.952690] loop6: rw=12288, want=12296, limit=20 20:07:16 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:16 executing program 2 (fault-call:3 fault-nth:22): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:16 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7ff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x7, 0x1000, 0x124de045, 0x8, 0x3}, &(0x7f0000000200)=0x14) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x880, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000280)) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$RTC_VL_CLR(r0, 0x7014) bind$llc(r0, &(0x7f0000000100)={0x1a, 0x2, 0x8d5, 0x100000001, 0x1000, 0x77, @random="b846d2862f33"}, 0x10) 20:07:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) r3 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x80000000, 0x1c1380) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0x10000, 0x983, 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x7}}) 20:07:16 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00 \x00', @ifru_names="04707000"}) [ 455.992767] attempt to access beyond end of device [ 455.997891] loop6: rw=12288, want=8200, limit=20 [ 456.032493] attempt to access beyond end of device [ 456.037545] loop6: rw=12288, want=12296, limit=20 [ 456.106545] FAULT_INJECTION: forcing a failure. [ 456.106545] name failslab, interval 1, probability 0, space 0, times 0 [ 456.118073] CPU: 0 PID: 24126 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 456.125118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.134493] Call Trace: [ 456.137103] dump_stack+0x1c9/0x2b4 [ 456.140758] ? dump_stack_print_info.cold.2+0x52/0x52 [ 456.145976] ? perf_trace_lock+0xde/0x920 [ 456.150149] should_fail.cold.4+0xa/0x11 [ 456.154265] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 456.159386] ? __save_stack_trace+0x8d/0xf0 [ 456.163747] ? save_stack+0x43/0xd0 [ 456.167403] ? find_held_lock+0x36/0x1c0 [ 456.171510] ? check_same_owner+0x340/0x340 [ 456.175857] ? rcu_note_context_switch+0x730/0x730 [ 456.180826] __should_failslab+0x124/0x180 [ 456.185084] should_failslab+0x9/0x14 [ 456.188904] kmem_cache_alloc_node_trace+0x26f/0x770 [ 456.194044] __kmalloc_node_track_caller+0x33/0x70 [ 456.199003] __kmalloc_reserve.isra.40+0x3a/0xe0 [ 456.203790] __alloc_skb+0x155/0x770 [ 456.207529] ? skb_scrub_packet+0x520/0x520 [ 456.211870] ? do_raw_spin_unlock+0xa7/0x2f0 [ 456.216308] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 456.220911] ? __local_bh_enable_ip+0x161/0x230 [ 456.225602] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 456.230638] ? unix_create1+0x588/0x670 [ 456.234659] ? trace_hardirqs_on+0xd/0x10 [ 456.238841] ? __local_bh_enable_ip+0x161/0x230 [ 456.243531] ? unix_create1+0x159/0x670 [ 456.247530] ? unix_stream_splice_actor+0x180/0x180 [ 456.252567] ? __local_bh_enable_ip+0x161/0x230 [ 456.257264] sock_wmalloc+0x16d/0x1f0 [ 456.261089] ? skb_set_owner_w+0x320/0x320 [ 456.265352] ? unix_mkname+0x11e/0x1d0 [ 456.269265] unix_stream_connect+0x2c1/0x11e0 [ 456.273776] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 456.278478] ? security_socket_post_create+0x9f/0xd0 [ 456.283609] ? unix_shutdown+0xa60/0xa60 [ 456.287695] ? kernel_sock_ip_overhead+0x570/0x570 [ 456.292662] p9_fd_create_unix+0x258/0x370 [ 456.296915] ? p9_socket_open+0x220/0x220 [ 456.301090] ? p9_client_attach+0x250/0x860 [ 456.305433] ? rcu_read_lock_sched_held+0x108/0x120 [ 456.310480] ? kmem_cache_alloc_trace+0x616/0x780 [ 456.315343] ? __lockdep_init_map+0x105/0x590 [ 456.319862] ? lockdep_init_map+0x9/0x10 [ 456.323938] ? __raw_spin_lock_init+0x2d/0x100 [ 456.328541] p9_client_create+0x8ed/0x1770 [ 456.332815] ? p9_client_read+0xc60/0xc60 [ 456.336976] ? find_held_lock+0x36/0x1c0 [ 456.341079] ? __lockdep_init_map+0x105/0x590 [ 456.345601] ? kasan_check_write+0x14/0x20 [ 456.349852] ? __init_rwsem+0x1cc/0x2a0 [ 456.353844] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 456.358883] ? rcu_read_lock_sched_held+0x108/0x120 [ 456.363916] ? __kmalloc_track_caller+0x5f5/0x760 [ 456.368771] ? save_stack+0xa9/0xd0 [ 456.372416] ? save_stack+0x43/0xd0 [ 456.376065] ? kasan_kmalloc+0xc4/0xe0 [ 456.379968] ? kmem_cache_alloc_trace+0x152/0x780 [ 456.384827] ? memcpy+0x45/0x50 [ 456.388135] v9fs_session_init+0x21a/0x1a80 [ 456.392479] ? find_held_lock+0x36/0x1c0 [ 456.396573] ? v9fs_show_options+0x7e0/0x7e0 [ 456.401004] ? kasan_check_read+0x11/0x20 [ 456.405283] ? rcu_is_watching+0x8c/0x150 [ 456.409455] ? rcu_pm_notify+0xc0/0xc0 [ 456.413368] ? v9fs_mount+0x61/0x900 [ 456.417098] ? rcu_read_lock_sched_held+0x108/0x120 [ 456.422133] ? kmem_cache_alloc_trace+0x616/0x780 [ 456.426998] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 456.432562] v9fs_mount+0x7c/0x900 [ 456.436128] mount_fs+0xae/0x328 [ 456.439520] vfs_kern_mount.part.34+0xdc/0x4e0 [ 456.444123] ? may_umount+0xb0/0xb0 [ 456.447772] ? _raw_read_unlock+0x22/0x30 [ 456.451938] ? __get_fs_type+0x97/0xc0 [ 456.455870] do_mount+0x581/0x30e0 [ 456.459447] ? copy_mount_string+0x40/0x40 [ 456.463713] ? copy_mount_options+0x5f/0x380 [ 456.468141] ? rcu_read_lock_sched_held+0x108/0x120 [ 456.473174] ? kmem_cache_alloc_trace+0x616/0x780 [ 456.478069] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.483640] ? copy_mount_options+0x285/0x380 [ 456.488165] ksys_mount+0x12d/0x140 [ 456.491836] __x64_sys_mount+0xbe/0x150 [ 456.495827] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 456.500863] do_syscall_64+0x1b9/0x820 [ 456.504765] ? finish_task_switch+0x1d3/0x870 [ 456.509278] ? syscall_return_slowpath+0x5e0/0x5e0 [ 456.514250] ? syscall_return_slowpath+0x31d/0x5e0 [ 456.519220] ? __switch_to_asm+0x34/0x70 [ 456.523299] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 456.528685] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 456.533552] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.538813] RIP: 0033:0x457089 [ 456.542081] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.560995] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 456.568725] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 456.576004] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 456.583287] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 456.590567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 456.597848] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000016 20:07:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 456.605365] 9pnet: p9_fd_create_unix (24126): problem connecting socket: ./file0: -12 [ 456.620169] f2fs_msg: 60 callbacks suppressed [ 456.620213] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 456.632242] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 456.662246] ALSA: seq fatal error: cannot create timer (-19) [ 456.677914] attempt to access beyond end of device [ 456.683036] loop6: rw=12288, want=8200, limit=20 20:07:17 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000640)=ANY=[@ANYRESDEC=r1, @ANYBLOB="4785b25a6a5447d0a531ce11f260c001eb971ea23b9b8b974e96b2610f61a38477fb8f9d003d1e1ce1e4297d3030a148aae9c9d37c95169faf9658b87b603828353d3252226d3a52d4e3d691e27f7251923f4dd5d5e5194f93d8e785641cf8609507a81e9f8e64a53362f3f38acae1084197c60f88f0d0006c85e9d53ae53257e62933ad46fd29a9c7d306e0299e0e83ee47afb04da73c4e76512b785a595caab763869b77e00aa2cd35a11e8b8e3ceb180fbdfaba4f0b95c10c8186cd49d58f1ba51d7f387d4663565a760947a36df0fd074ae805a9537b42e2e2288ceccab599ef1a93f4571f284e2a99", @ANYRES16=r2, @ANYPTR64, @ANYRESDEC=r2, @ANYRES16=r2, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRESOCT], 0x2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x4e24, @rand_addr=0x2}, {0x6, @remote}, 0x1c, {0x2, 0x4e21, @multicast1}, 'syzkaller1\x00'}) 20:07:17 executing program 2 (fault-call:3 fault-nth:23): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 456.723591] ALSA: seq fatal error: cannot create timer (-19) [ 456.734549] F2FS-fs (loop6): invalid crc value [ 456.751118] attempt to access beyond end of device [ 456.756441] loop6: rw=12288, want=12296, limit=20 20:07:17 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:17 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000ffffffc300", @ifru_names="04707000"}) 20:07:17 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000280)='./file0/file0\x00', 0x9, 0x4, &(0x7f0000000640)=[{&(0x7f00000002c0)="409b1761b566754fe429e766e445225feca0500fdba3b84b85603a0b4bdee6518f7c3e95f718b3968db19797432d325b1fadfa6eeb836dfef4bd0254b6e5afac645abc9a2606b68f77bfe00faa7e277cd7cf20983876cf856c5b253cc252100329b02a24046caab99f08fea77e40a3db65243c433e18d0e7056756f2997cbecb030fc0df1aa8869b16b6338d817d9e4945a82f42974d2674889a25f164434c9b", 0xa0, 0x4}, {&(0x7f0000000380)="fbce9abb2965dd194c54fbdadcb781b111df4ef0c6ead72a4c0c80c97be94fac1e4c61df9446b266e5e79250a897c60eb9ee50ff84fb110ecd592ec961f9c91697d2fc960a3ed54ca179f974d08ec5f70ecefc3dc4c0cc8a1ca0c64dd6a026641c4515ca54e3112d8b990f5691a4f88094b4d8eb408dd238fd854d4c72102831b5167521f5493a851cc0094517852a30b3aab4c85b7270a967cc55cae18fdffe91e7ef10ab0c09a777e1e7ea262545049e86e6f6177c2dfa5b94ce8ff517a1e64513d6c32ddad7ce1e373f1753aeda6e6236fb211b9a", 0xd6, 0x400}, {&(0x7f0000000480)="8205e85b4d810d8c26a783e9e6ef3a7adce49d689d28f60dc198feedf67beb3d4881fda2a2d46367eb73556b1777221badf31a6057aa6315acc9f1b38e15630e9ab2d626fceca9f508d992b7e5755865e3e1fc1829914110309ec44290cc63e265a50be2d20e29d49c848caba3e28ff1f9a04290cfc945985a7fe38ad1098fa18ae97bfae23d57627af47c8a8292bf983b4609e63c6c93d3257b4d217914727d6df492e3c3b7df4f1ec2cb754ed805889a8280323af95ad15d5a11f6f8f12951d417c429b5eccfde37aad4b748015595001a834e4085cb4db89e48b77dff4bdb8cbb5483afcd5dfcc24f5a47351f9ed0", 0xf0, 0x200}, {&(0x7f0000000580)="b8be1faeb37dac4bc78d04f0e893b85ec79a98737e5b41e674ef04dc1850d6c471d554e744a2896180927414277e38a08ce814d6bc171423b3170769fdc71125b9fc777f1c419b268757acb9695551e25650a457d8ca58a1276b99db8d53de4272c6a495c7a554720e6a7d12ce5d1fc28dcee709eac00ffb30", 0x79, 0xffffffffffffff80}], 0x1000000, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f616b2c757466382c6e6f636f6d74726573732c646d6f64653030303430302c0000000000000500000000000000"]) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000700)={0x1, r0, 0x1}) tkill(r2, 0x101000000000013) mount$bpf(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='bpf\x00', 0x0, &(0x7f00000007c0)={[{@mode={'mode', 0x3d, 0x3}}]}) [ 456.805123] F2FS-fs (loop6): invalid crc value [ 456.809841] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 456.857972] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 456.865178] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 456.896394] FAULT_INJECTION: forcing a failure. [ 456.896394] name failslab, interval 1, probability 0, space 0, times 0 [ 456.901640] attempt to access beyond end of device [ 456.907702] CPU: 1 PID: 24157 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 456.912660] loop6: rw=12288, want=8200, limit=20 [ 456.919638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.919645] Call Trace: [ 456.919676] dump_stack+0x1c9/0x2b4 [ 456.919702] ? dump_stack_print_info.cold.2+0x52/0x52 [ 456.924574] F2FS-fs (loop6): invalid crc value [ 456.933807] ? kasan_kmalloc+0xc4/0xe0 [ 456.933823] ? __kmalloc_node_track_caller+0x47/0x70 [ 456.933842] ? __kmalloc_reserve.isra.40+0x3a/0xe0 [ 456.933856] ? __alloc_skb+0x155/0x770 [ 456.933874] ? unix_stream_connect+0x2c1/0x11e0 [ 456.933892] should_fail.cold.4+0xa/0x11 [ 456.939315] attempt to access beyond end of device [ 456.940102] ? do_syscall_64+0x1b9/0x820 [ 456.940120] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 456.940143] ? rcu_is_watching+0x8c/0x150 [ 456.945382] loop6: rw=12288, want=12296, limit=20 [ 456.949915] ? rcu_pm_notify+0xc0/0xc0 [ 456.949949] ? find_held_lock+0x36/0x1c0 [ 456.949983] ? check_same_owner+0x340/0x340 [ 456.954248] F2FS-fs (loop6): invalid crc value [ 456.958980] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.958997] ? __alloc_skb+0x4c6/0x770 [ 456.959012] ? rcu_note_context_switch+0x730/0x730 [ 456.959029] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.959052] __should_failslab+0x124/0x180 [ 456.964036] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 456.967864] should_failslab+0x9/0x14 [ 456.967880] kmem_cache_alloc+0x2af/0x760 [ 456.967897] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 456.967916] ? unix_create1+0x588/0x670 [ 457.063577] ? trace_hardirqs_on+0xd/0x10 [ 457.067742] getname_kernel+0x54/0x370 [ 457.071664] kern_path+0x1e/0x40 [ 457.075043] unix_find_other+0xdd/0x5b0 [ 457.079016] ? unix_stream_recvmsg+0x2e0/0x2e0 [ 457.083598] ? unix_mkname+0x11e/0x1d0 [ 457.087507] unix_stream_connect+0x35e/0x11e0 [ 457.092004] ? security_socket_post_create+0x9f/0xd0 [ 457.097130] ? unix_shutdown+0xa60/0xa60 [ 457.101204] ? kernel_sock_ip_overhead+0x570/0x570 [ 457.106155] p9_fd_create_unix+0x258/0x370 [ 457.110388] ? p9_socket_open+0x220/0x220 [ 457.114594] ? p9_client_attach+0x250/0x860 [ 457.118935] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.123963] ? kmem_cache_alloc_trace+0x616/0x780 [ 457.128818] ? __lockdep_init_map+0x105/0x590 [ 457.133313] ? lockdep_init_map+0x9/0x10 [ 457.137398] ? __raw_spin_lock_init+0x2d/0x100 [ 457.141995] p9_client_create+0x8ed/0x1770 [ 457.146239] ? p9_client_read+0xc60/0xc60 [ 457.150481] ? find_held_lock+0x36/0x1c0 [ 457.154554] ? __lockdep_init_map+0x105/0x590 [ 457.159060] ? kasan_check_write+0x14/0x20 [ 457.163301] ? __init_rwsem+0x1cc/0x2a0 [ 457.167286] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 457.172323] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.177341] ? __kmalloc_track_caller+0x5f5/0x760 [ 457.182181] ? save_stack+0xa9/0xd0 [ 457.185818] ? save_stack+0x43/0xd0 [ 457.189436] ? kasan_kmalloc+0xc4/0xe0 [ 457.193321] ? kmem_cache_alloc_trace+0x152/0x780 [ 457.198158] ? memcpy+0x45/0x50 [ 457.201436] v9fs_session_init+0x21a/0x1a80 [ 457.205769] ? find_held_lock+0x36/0x1c0 [ 457.209851] ? v9fs_show_options+0x7e0/0x7e0 [ 457.214280] ? kasan_check_read+0x11/0x20 [ 457.218419] ? rcu_is_watching+0x8c/0x150 [ 457.222559] ? rcu_pm_notify+0xc0/0xc0 [ 457.226460] ? v9fs_mount+0x61/0x900 [ 457.230185] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.235198] ? kmem_cache_alloc_trace+0x616/0x780 [ 457.240082] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 457.245633] v9fs_mount+0x7c/0x900 [ 457.249176] mount_fs+0xae/0x328 [ 457.252545] vfs_kern_mount.part.34+0xdc/0x4e0 [ 457.257127] ? may_umount+0xb0/0xb0 [ 457.260758] ? _raw_read_unlock+0x22/0x30 [ 457.264931] ? __get_fs_type+0x97/0xc0 [ 457.268827] do_mount+0x581/0x30e0 [ 457.272374] ? copy_mount_string+0x40/0x40 [ 457.276632] ? copy_mount_options+0x5f/0x380 [ 457.281040] ? rcu_read_lock_sched_held+0x108/0x120 [ 457.286056] ? kmem_cache_alloc_trace+0x616/0x780 [ 457.290953] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 457.296499] ? copy_mount_options+0x285/0x380 [ 457.300992] ksys_mount+0x12d/0x140 [ 457.304619] __x64_sys_mount+0xbe/0x150 [ 457.308589] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 457.313636] do_syscall_64+0x1b9/0x820 [ 457.317547] ? finish_task_switch+0x1d3/0x870 [ 457.322046] ? syscall_return_slowpath+0x5e0/0x5e0 [ 457.326982] ? syscall_return_slowpath+0x31d/0x5e0 [ 457.331914] ? __switch_to_asm+0x34/0x70 [ 457.335979] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 457.341366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 457.346211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 457.351399] RIP: 0033:0x457089 [ 457.354609] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 457.373512] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 457.381227] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 457.388494] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 457.395762] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 457.403027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 20:07:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x11, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x3ef) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000)="340367", &(0x7f00000002c0)}, 0x20) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400082, 0x0) ioctl$RTC_WIE_ON(r1, 0x700f) 20:07:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/keycreate\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 457.410308] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000017 [ 457.417926] 9pnet: p9_fd_create_unix (24157): problem connecting socket: ./file0: -12 20:07:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cachetag={'cachetag', 0x3d, 'wfdno'}}, {@afid={'afid', 0x3d, 0xfffffffffffffff7}}, {@access_uid={'access', 0x3d, r3}}]}}) accept(r0, &(0x7f00000004c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4}}}, &(0x7f0000000000)=0x80) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:18 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:18 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000100)={[0x1, 0x80000001, 0xfff, 0x10001, 0x7ff, 0x7, 0x8000, 0x5, 0xf213, 0x9, 0x7fff, 0x7f, 0x100000000, 0x8d, 0x1, 0x4], 0x10001, 0x88010}) mkdir(&(0x7f00000000c0)='./file0\x00', 0x144) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000580)='./file0\x00', &(0x7f00000001c0)='ramfs\x00', 0x0, &(0x7f0000000700)) umount2(&(0x7f0000000200)='./file0\x00', 0x5) 20:07:18 executing program 3: modify_ldt$write2(0x11, &(0x7f0000000000)={0x5, 0x20001000, 0x0, 0x97, 0x0, 0x6, 0x1, 0xc196, 0x100, 0x8}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r1, 0x701, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3fa}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4001}, 0x4000080) [ 457.559922] FS-Cache: Duplicate cookie detected [ 457.564758] FS-Cache: O-cookie c=0000000090557318 [p=00000000223f4c25 fl=222 nc=0 na=1] [ 457.573035] FS-Cache: O-cookie d=00000000fec31132 n=00000000ff7cd60c [ 457.579568] FS-Cache: O-key=[5] '7766646e6f' [ 457.584230] FS-Cache: N-cookie c=0000000066e21ba9 [p=00000000223f4c25 fl=2 nc=0 na=1] [ 457.592258] FS-Cache: N-cookie d=00000000fec31132 n=00000000c287e927 [ 457.598800] FS-Cache: N-key=[5] '7766646e6f' 20:07:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x6, 0x40000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="2a0000202901005cecc93cafd1685cff7fd9c4978d6b24e42f5d66c90623904ddb0800000072a1e9dd3348b16bf1b02cfdecd987ffe6ff4d0151805eab2b"], 0x7) timer_create(0x3, &(0x7f0000000140)={0x0, 0x32, 0x2, @thr={&(0x7f0000000380)="93f630d722694aa1ba13c2364ee94e17f4c369e8c3457e0a71015191fea8fc8c011b8ddc0096cd536f8edc350778c27f9bae55c727774727c1860f2746f305d30a0848ddfe76d4a05e97eba3c5714cf0ec6928f81c479bd5ca56af7be86f243f96099445666c9fda8a5e8e63b9e32c69ba14bd24f271ec04ba883741756430b272b820e0c434282a091d9784414405e4713ea3f7469455a96f20ed0fd1c41bfa4786102f9ee22cad6fef49c7be5addd4e79770f430abc1c0196be158060796ff477dbcf863125968973f7a12", &(0x7f00000004c0)="2023e865660c0da776029b5dfee74189003821bff895afa527fb664ac5130118b943bd3e434744629604ba3eecd1d75c172c6487a90056ab81b7ef2203b4e5d6ad54f51fe2fb8cbb596435af6be15e9d13e775d3821019b623a9a4f3843af6691b441da1f8947ed86a6a4557c420a74cbac5c7a8e84ca15b5b3050d9c58ff6a548ef3fe4e55e4a89131fc49fa4a04158936afc888c66e482d0dd945df0cfa1e8a283ae1859ca4854"}}, &(0x7f0000000580)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x82) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:18 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x242, 0x1, 0x9f1, 0x9, 0x7}, 0xc) sendto$inet6(r1, &(0x7f00000000c0), 0xfd01, 0x8800, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x639, 0x4) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f0000000080)="00000017", 0x4) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000809000)={0xa, 0x0, 0x0, @loopback}, 0x1c) 20:07:18 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 457.667559] attempt to access beyond end of device [ 457.672662] loop6: rw=12288, want=8200, limit=20 [ 457.728440] attempt to access beyond end of device [ 457.733591] loop6: rw=12288, want=12296, limit=20 [ 457.741851] attempt to access beyond end of device [ 457.746925] loop6: rw=12288, want=8200, limit=20 [ 457.752182] attempt to access beyond end of device [ 457.757274] loop6: rw=12288, want=12296, limit=20 20:07:18 executing program 0: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000000600051a524c24bb000000000000800000000000000000000000000007002e2f"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000700)={0xa0, 0x19, 0x1}, 0xa0) openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x591000, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWRITE(r1, &(0x7f0000000400)={0xb, 0x77, 0x1}, 0xb) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000380)={0x100000001, 0x0, {0x3, 0x3, 0x8, 0x2, 0xfffffffffffffff7}}) write$P9_RGETATTR(r1, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000007c0)={0x2a, 0x29, 0x1, {0x1, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x0) 20:07:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x40) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2804c000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xa4, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xeedb}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3f}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x8010) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:18 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/hwrng\x00', 0x40c402, 0x0) write$P9_RREMOVE(r0, &(0x7f0000001700)={0x7, 0x7b, 0x1}, 0x7) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)="7763ae436e00") socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000500)) sendmsg$inet_sctp(r2, &(0x7f00000004c0)={&(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0x6}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="21713d0b1c407ce574e2c40812c5024fcc0140520d010e4a339dbc88dbc8d840e69a08d54bbe2db54b0bb2e5bee4ac542eef808bff6742f30b6fa4bce67f82eeb8564ac9a0a7e78b5ee9230e4b3cfadf355a27b456", 0x55}, {&(0x7f0000000180)="92d2af90fed58906a734cb1bfdf5bec0930e3b83c5aa37efd60df81fb6420146df0114625770303e1234b589505d287c64bbb26f817fc88c5a0b18d463ba75308952b3faeac93de2eeeea3b105f304e03d40124b3cc3b1ca56f1fac4cbd30acb1088aac86948e25ab8176f8e092fcc975a3268e99055025f3a4040be66925298ad660b26f1c9998e6c282748bfbea47a63f43181dea55c2af37fec17dbf07282d51e575367f0d334067a4c328e9d", 0xae}, {&(0x7f00000005c0)="17e9647858c715d75dfbe8a1429168a6d3a208a0f9bdac0ae69e09eff94c3e3b7d49ec41c0f903b03782c920589e25f892a352a05644927543abf45b3b7b83c8e383336f114d23c837266a804f8cadac795430468c2e2b9757a86ebd5fd372bb50fbc79552dd24df099ca09570794b461ee71d4ba0e8f6d6725a20e8d301cc044ebb5b811ee28ed41b74f1e09765c68fec44683d7cf310e68fb09f2d8892ac3e3fcdff89d4fd9f7a24a5f7d42f12cc2909612524532e3007eff80622c712522398e2a27104d4d5def0ca50b1137361a02382f29ca1254b78414be7e29cccf5acd434c9587d09d3bd90f01e4f9b94dab92b032bf9a659dc6ce584da30ebcddd7a0a9e0ba1a5e867cacc8b950314e51c42e7073c83226703eb174d59f94a7f3097d1a476ebeddb2e63af009fc78f8f8e0c48946e4ccb64bd4f851c322401e5751eb7b34dd82b0425a05a7f89756083f81804b85a4b2766b078e9a863759d8f0892205c19395951307b6359e9c1ca60e2bdeeeeb850711ab565c5a4a475e02fa701922999020a85944a0561daabe73a43bf10bd6017689e647c8c71bfbb803e4d52edd6687789b8edf01ce9d7548391413f11ef5efe5f5d0347afefc1f4c9eed35f3744e5ebce8b1e0614e817bd65c9593224ac44f9e23412e712a653a10f3cf0c65cd5f1741c69b1a5845a1f4a9c11fc7efe882fb322baebc2ac34a12343a07517f93e4e68bc5723325ee048a603f698ed02b46675e9884220e13b199f32e17c77744ff1ccd824c73d2b580bbf8b9c17defdddca67b5876a9b8cd6485f863409f20179154cf2278fb1ce72340d1473674b3d0e06b5c9fe392b1ba7b21712fc6f10016931b3133c3e0e73d24aa6060636db3529fc12f6055b17196c49e30e089b6007db2f784a74cbede78fc4fd13062839a4e4caf0469cfad8f6f9bd15276b032742432d71658b669ba3f6f20e472eebc7a61e1cf4a5b45045998ba73727f54c923ad985b1db843d0de44f85316d1534f146559086d3c461916035d0ebbe31cea7ee802e63dc71092e5b0486ea06d6cbdd0ac4126e672d5040552387a8dd49503c4cfe1204b0c2351067a308d1360fca7e791f62a296ec5e132a650310b8561930d0a5266b4abe6633ea31ec2d1394829ffa66ec92f1239d0988133aa78b8149ec12c73548708844fb8baa26e3f460ed34f52d73bba6cf947535a9a21fdaf2ee72e948b0ac9e30c805b6b1abc7fd2f3e56183dec541b1628565bcccb9425379e0780ab14e9ee24690b17b934d9729d15e3f47627fbdd07c350091ab3c5e28924dfecf2bdf5f46c3c55587f6f1d991f8308e09d8f54d815035043076c8f9e50c10b23bf577646d630b39e824c71970ab23b80f32af6cb91e903b189c566611416c61be0579a0b670f66f33be1b82502f0de644e97960140ee969f1abf07295328b9b3723b9b26551d6c2a2d770a391e88622cabfc7161b40ae5002898d2bf0a6f02c35e0a302db5f273fc422268d911893edc159f099f5da579d93ed2fc69035ade74ecda09fca2c92263a75dd7b988004875417a58035c4af02f2dce69846978e77244952f13ca01f3557e4fa61673e0f02650be9934e050aa40cf50dda979a6b2a60909c578e35354ae668c57303d159ce44a12c97058c0f5e25f18bb0d7b8f165d0ac21a226cb992c33e27c83949d462eef3a886f42d9757fd0a97811a083084711251a290172377228ead7396d52bf6351fd24e7ba2ed4920e8655b7a336aba16b06b746b967ed0927686d96c894ebbabe5d09e37063f0560b05108242929332292c0fd2168db918d91290735141bced7d067e050769ab6f8d1649f0085b1c33bb15cd8f59fc1ee35855a06e7f4fbb55754e4ddf58f4653a9cc2de099a8b877be0a797b7aa88b017d6028d9d235e165a2875a41364de31e45eb4f3a200ac44d4687452b1a396db29338fe05784ee8f107d5e62c1c72de2c58588e07fd2fa3b0964dbb08579b143bdb2dfd64712b19a019929cfae816ecdb67e80e17d97a2928631a938352b5534ba008430d1bfbb08443d1c569e9b7e2ee3b655e02ba27bbbdab9ea046b6bd334d08a8d294b0585f48c15e666db8b96d7e44ed22d3ab34ddaba14909c073e4ad040255c1d7f890175e303eab497c2fe788ea453b686291693bae68dac40a745c9884cfceea28a7310ad1b1e6991225b81f99f921c757f6203e8e2f46adb6812a39394543fca9b3c131b665a72869dfa27377faebbc1afeba1696afeef04504f6398f8b8553e28a861dc656a17abb693e2a1c3d67522dfaef94d8de23809754ba0d4cbdf68859a96cf0f943f9a7e0241e6ddb2b0abd0fe851ac50110614e10fe5da6f7ac16819876e80c635565b65fd14ee79ae296668cc098d8cf49b989db1385083c4c0c89fd9c29f6ade7297df9da583786e71c77694e322c9d900d934ebaa376d8b0c74759b18e20d6938d4270767741d59867b0d570b0551cb23df500c0d1be5d0455310c0d1c1f6b413791933da8f641b10ce5388a77469f358ceb635c2aac6120e75b237f3572e56eecef2a2cb5aa21b50e8f3582ca31c235377b0369ddaad476db89c82ed555d607dc250a3ca4b219ea0be2f146dd7e122d913bfe7b034e9fdd3584569ba66fc664e26f7850a56eae194a97d0cbea8af8753c2e297faccbc45449d6648c9c6653fbe74f7310bb2dfb15df60e0a6ca8a1561bef47a21353f23631f2b10b9ea90035effba427628fa79d5b5b10d1ff2c8b3fb0d104f0fe924ea288fc9c4931ac15e636d1e580d07e3cd2ffe0d364270827af0a8dd04c4f39bb7773ea165e86eaf8b0051d4b12170290fb920aa3194cae2fc97290703b4243a11abdf8a626f82497edc50cf53de77404f3e81ecd3ae835dc8a37662e6d7f7a98a7282cc9030ceb452e5c41859824fd102415c89c6ef59ef6ce9ca58b25f0d40275af014053a0ee0182900c301db4e2c8d01a18ed792e8e9f6621f0a6fda8cda0e276994e47739d158d6c5643a6709b79256636e9afa468cfd72b599a531d8e25b8cbbc51af16905a962066e89ab794c5de0c9b94868757f6abed75f5216b44f722ad07aacf3c230d497e84cee9158a4edef24cf16c223458ef2535009a61f11a2cf03ee697efc5822cba6c3a431b1acfb6f4b6f68bde098a3867cd269f8e1c3b325b58893f55204c2057ebb2efba2a64c63582d2680ad6fbfec5e62c31ed877d5263ac91119912e48624d78d8529bcf2cb8126c4b0b48518338662bd2e8e6a39c4bb88f88fd952134f211703d4f0f7e9096f9fc0ad26d6c44607912c30d091881d988b64b55003082ea3c4adf3990d2e89f1bd594c58f2b92461e0183d3999b30d232bd8be3b2543b2e03a24818d0de9b0b1c921f5bcdc906d5b228b055137ad879a186edd06d3bfbea51dfb66adc0aa76a0bf157d5232b3ae0dd09c867565db3296a91d81dce4b8736d3d19c06c8ce398e0dd1b17a71d45e75d3d6c7e1dff88223638b6abd31e9aa7151cba0af04bd2aed66e4aa4409e4cd6ee9c04350fd76013545bffbf52434949ac5efe31526dcd98286963f6e8f67667109f8dc542ad6196b9e68e70110b0cebfa690e8ec09424d8ad747e903e2452955728c88c17785e7ac71e6ff65cca6c4f056ce28eadca3d38a58eec1f9800021edcf164520dac6f5cf486fe46971e86c96452a34433618c1b273ca4b06380cc7abe14fff0363b28ec8197e45170f0e07f31571e00b23d8d9c2bf065c1f318af7a190fa8a3fb25b412dc7bcd2ee0020bedafe1bbaf03625bc3503786637cfda25b643143eb3bb0355a77e113b56c54b544ba3eee50683d35f54a83224c107b4bda64143bc28d0d6f5a322f248eb5bcabb13da0e4dd199724ee5920e75b14a2f5c600af70d89916049e6b271d61359a346d3cd737bcc9d4b56daee8e2861748ee37bea2806a7549907b9fd3399f19f540f5ecde88a34f918b53e3aa53b0a56afa3220fb047080dac11517930c6d56c1500c01916be3a6e72e5231bea94dffe602d31c2b0c70abe8fc98912fce413fe4215a098ee11e7d7273a4dfc7ef091d931d4bb0908491cbb0b3f0c8b94e3ec34706f0524c9929ac2807aa12464899d6892366e1ee85ac6beb02492423803f140767d0911ce4989be42f24b29d28f304a448137edb118b418c7ff44fb5ecd766842c461f1125ddf969392617d12d6ba825791625d37c27ea1b4b592123425e71532e2c158895c8cf77be20235324e06b462a06d4c8a53614c71fbf06c7fdee2fd3619be3fc161e98438ca55e80a57094e949423ed85dad21a4074c16cc6abe6bcfbc5c74d862edf658e27159bbeae0bd5fdc9e32595da6a2d8b3c28c9a5627ce40110f4edb05f4bc5389978362384c0ca3973fa906c67abb07fb83ad307efc904930af321b5c5ede79812502f425b638b64c31f9975424cbde092c8b6d380014297e17b5bf1f4426f089606546498d6215dc5e191bd8b1a10aa3cfc8823ca46343d829d2c47d3276a823a8d811431940172544c2f56ff1450a4123abb0e3bf118b6ead66222044eccea8a731f365505732ffea5a1f025b192255bbbefc229e5c88a5aa6d43d42e6577b7764a86e5367621ce473cbd2c91ed848a9b9bf18205e27633dae78f78a998708b70f68d2a79ecd22fc5cd27e851cece9d0487713611c4492d03812c29c6ea579a52cf39197b3ab7aa2071b09af0fa65b214a07e4aa09d68111a3e1736773dc6c60ce273f56ac9c30612bfbfb39f0bc0f2f4bfa1c36ee74110d417e1c3904f7174aa6b90b795447f80ef51b285d1a86ef421f83b933fac79ab3810823aa4b55732edd7de1ddd6a0e5b9f13b9309f1fe705a0f471b39f4eb322deef85ff7e98d05dd48d72cf3c8b6616f454de35281b7340b4d7a75383fe61722fd3a414ec64b8ae21ea9ab900532fd61f3deab3ebf5a0be7060803229985e235136f348ae8320cc68020795f92880ef8799f3f03f1968c0dc9acac6f93ddef25f642056c7751ca93c38c3e487aa2b89b1b5f91aba351864da25e36490fe18184ed6f204e2ba08f5b5d5b4ddde373d5f53d7fd5413e236b0bb7512988bce68e3bfa906786967b886d668c55fb5e6c86ee5e3e44d4a3f5d86cdd3df62243d2a5fe90ed6dd4ce2986550746412585730844eac748ee53556bd8a77d64e226500dcf5c7b3a07c2a8adf4edce31c509e8917de916e28dd7c6919be872d05ec1d7c1daa7a18aeecf3a87f89032cbdc042e6f3cbe5b600ba8694530b050b6f6085bc154910b03d14a19d9843a8fd5d8c394a936cc627c8e0cb6de43a8f239bcd2ad1478bdf5c2ed9dc7e0023b6aa0d953f75bd3d6d0fa5e9b926f095ea3fabf93c00a9c24c162566e73d1099eddde406116322b555d3129bd2b64054ec1c83f61219d8efd4d53e0788ddbf96ce8b33bcc3fd02736ed94d1e0410c4b4b1f8533967dce8cd96ab2cba8b99acfa425b480eac9cb0207cd59766eef15321c7eacb412b1aa256745c8de5bacacd7c5afe594ef66cf02c11f627ac1a7f9decc1aa76d6a18534057bd63a793cd0a98dc4905189d90f214da562a39ae2dd9f80cc2683bab8afa356f6c8e566a34275fb327c97cfb0238edd692db7b9ace59d3f2bc79aa40153ba0aaca8464f2cfa3ebf9bbda1b3e005ab67fc9582e58296be907f3c3d0a05e582a3ee00cb7d37fe5abc18ad0005dc85715a440ffc4dc1e21ff5946a4a5c496154acc26c8e3eba16fb7d08ba7c375f53f5fea1813f41d928f2e8404160e2688392f5596abf765481d82befa61dd625e8", 0x1000}, {&(0x7f0000000080)="d987c133a7474d201600b4cb1be74f3967b787d13fd1", 0x16}, {&(0x7f0000000240)="bb47f17bba576381c087ea46234c7647c5085585ed9efc1440d29d0d83972e8be4ac71756db4cc584f8e16c3fe1fa4f25fbf8f57660fbbc71e16d9e2b4103572a19f89ae1401d80b02d0ea1cafed8c1e9f5c1b20f2bdceca531ecc0b5368b407452bdb6a832795873a431224c32a0f49db95a1d5fa0f0d9cb347799a51123512a43d1ff2d585a2667f3b8d7ca6e985b695eadf07b4bcfb721b9c11ad6f62e59b749c8cdc941dc4141117dd47e651bde1e91e991e81f92feb73f3fceff6406c2321522a8d423c", 0xc6}, {&(0x7f0000000340)="63c22714d20d210189771b01f3759c05afde96e1de726b9be69ecd9a2cfbef581c214a8be439bb674e8a7447a76c74187208619db2a86b04cb", 0x39}, {&(0x7f0000000380)="f341d825bc480ca041f82f67630667402d7c6419af98e6edd28333e56425a90e66e90f5352e7536e6fc4c3eb1ba867a2838f46a4a02e8d969ea0bdb5737e937b535569822aa06c34ddf378c4e66bf5d9f08afccf6fb72f8a75b65ce8ce7ae76bc8bda2dd4ba0eb84bafda6897cf1106d0784257d09e3c829cdef90a66a4734e39741ea3b1e93dbf3941aeefff7bd1a14c177098a1d3d", 0x96}], 0x7, 0x0, 0x0, 0x8000}, 0x0) readv(r2, &(0x7f0000000580)=[{&(0x7f0000000540)=""/18, 0x12}], 0x1) r3 = msgget$private(0x0, 0x100) msgctl$IPC_INFO(r3, 0x3, &(0x7f00000015c0)=""/251) [ 457.798775] attempt to access beyond end of device [ 457.803862] loop6: rw=12288, want=8200, limit=20 [ 457.833865] attempt to access beyond end of device [ 457.838945] loop6: rw=12288, want=12296, limit=20 [ 457.860571] Unknown ioctl -1067429051 [ 457.887775] Unknown ioctl -1067429051 [ 457.909209] attempt to access beyond end of device [ 457.914422] loop6: rw=12288, want=8200, limit=20 [ 457.931485] attempt to access beyond end of device [ 457.936578] loop6: rw=12288, want=12296, limit=20 20:07:18 executing program 2 (fault-call:3 fault-nth:24): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 458.081690] FAULT_INJECTION: forcing a failure. [ 458.081690] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 458.093512] CPU: 1 PID: 24228 Comm: syz-executor2 Not tainted 4.18.0+ #188 [ 458.100531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 458.109877] Call Trace: [ 458.112486] dump_stack+0x1c9/0x2b4 [ 458.116209] ? dump_stack_print_info.cold.2+0x52/0x52 [ 458.121416] should_fail.cold.4+0xa/0x11 [ 458.125491] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.130638] ? is_bpf_text_address+0xd7/0x170 [ 458.135159] ? kernel_text_address+0x79/0xf0 [ 458.139593] ? trace_hardirqs_on+0x10/0x10 [ 458.143844] ? save_stack+0xa9/0xd0 [ 458.147475] ? save_stack+0x43/0xd0 [ 458.151103] ? kasan_kmalloc+0xc4/0xe0 [ 458.155003] ? __kmalloc_node_track_caller+0x47/0x70 [ 458.160116] ? __alloc_skb+0x155/0x770 [ 458.164001] ? sock_wmalloc+0x16d/0x1f0 [ 458.167999] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 458.172858] ? v9fs_mount+0x7c/0x900 [ 458.176603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.182132] ? should_fail+0x246/0xd86 [ 458.186027] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 458.191134] __alloc_pages_nodemask+0x36e/0xdb0 [ 458.195803] ? rcu_is_watching+0x8c/0x150 [ 458.199972] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 458.205031] ? find_held_lock+0x36/0x1c0 [ 458.209113] ? check_same_owner+0x340/0x340 [ 458.213436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.218999] cache_grow_begin+0x91/0x710 [ 458.223104] kmem_cache_alloc+0x689/0x760 [ 458.227258] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 458.232290] getname_kernel+0x54/0x370 [ 458.236183] kern_path+0x1e/0x40 [ 458.239547] unix_find_other+0xdd/0x5b0 [ 458.243531] ? unix_stream_recvmsg+0x2e0/0x2e0 [ 458.248135] ? unix_mkname+0x11e/0x1d0 [ 458.252038] unix_stream_connect+0x35e/0x11e0 [ 458.256548] ? security_socket_post_create+0x9f/0xd0 [ 458.261667] ? unix_shutdown+0xa60/0xa60 [ 458.265743] ? kernel_sock_ip_overhead+0x570/0x570 [ 458.270706] p9_fd_create_unix+0x258/0x370 [ 458.274964] ? p9_socket_open+0x220/0x220 20:07:18 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:18 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\t\x00', @ifru_names="04707000"}) [ 458.279122] ? p9_client_attach+0x250/0x860 [ 458.283458] ? rcu_read_lock_sched_held+0x108/0x120 [ 458.288490] ? kmem_cache_alloc_trace+0x616/0x780 [ 458.293358] ? __lockdep_init_map+0x105/0x590 [ 458.297870] ? lockdep_init_map+0x9/0x10 [ 458.301953] ? __raw_spin_lock_init+0x2d/0x100 [ 458.306551] p9_client_create+0x8ed/0x1770 [ 458.310810] ? p9_client_read+0xc60/0xc60 [ 458.314990] ? find_held_lock+0x36/0x1c0 [ 458.319089] ? __lockdep_init_map+0x105/0x590 [ 458.323604] ? kasan_check_write+0x14/0x20 [ 458.327858] ? __init_rwsem+0x1cc/0x2a0 [ 458.331852] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 458.336887] ? rcu_read_lock_sched_held+0x108/0x120 [ 458.341914] ? __kmalloc_track_caller+0x5f5/0x760 [ 458.346769] ? save_stack+0xa9/0xd0 [ 458.350400] ? save_stack+0x43/0xd0 [ 458.354031] ? kasan_kmalloc+0xc4/0xe0 [ 458.357926] ? kmem_cache_alloc_trace+0x152/0x780 [ 458.362804] ? memcpy+0x45/0x50 [ 458.366103] v9fs_session_init+0x21a/0x1a80 [ 458.370434] ? find_held_lock+0x36/0x1c0 [ 458.374517] ? v9fs_show_options+0x7e0/0x7e0 [ 458.378939] ? kasan_check_read+0x11/0x20 [ 458.383096] ? rcu_is_watching+0x8c/0x150 [ 458.387250] ? do_raw_spin_unlock+0xa7/0x2f0 [ 458.391665] ? rcu_pm_notify+0xc0/0xc0 [ 458.395569] ? v9fs_mount+0x61/0x900 [ 458.399289] ? rcu_read_lock_sched_held+0x108/0x120 [ 458.404330] ? kmem_cache_alloc_trace+0x616/0x780 [ 458.409193] v9fs_mount+0x7c/0x900 [ 458.412746] mount_fs+0xae/0x328 [ 458.416131] vfs_kern_mount.part.34+0xdc/0x4e0 [ 458.420726] ? may_umount+0xb0/0xb0 [ 458.424375] ? _raw_read_unlock+0x22/0x30 [ 458.428531] ? __get_fs_type+0x97/0xc0 [ 458.432435] do_mount+0x581/0x30e0 [ 458.435992] ? copy_mount_string+0x40/0x40 [ 458.440251] ? copy_mount_options+0x5f/0x380 [ 458.444668] ? rcu_read_lock_sched_held+0x108/0x120 [ 458.449690] ? kmem_cache_alloc_trace+0x616/0x780 [ 458.454557] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 458.460100] ? copy_mount_options+0x285/0x380 [ 458.464607] ksys_mount+0x12d/0x140 [ 458.468260] __x64_sys_mount+0xbe/0x150 [ 458.472253] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 458.477281] do_syscall_64+0x1b9/0x820 [ 458.481173] ? finish_task_switch+0x1d3/0x870 [ 458.485676] ? syscall_return_slowpath+0x5e0/0x5e0 [ 458.490617] ? syscall_return_slowpath+0x31d/0x5e0 [ 458.495556] ? __switch_to_asm+0x34/0x70 [ 458.499629] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 458.505009] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 458.509868] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 458.515063] RIP: 0033:0x457089 [ 458.518259] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 458.537161] RSP: 002b:00007fcaba83bc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 458.544874] RAX: ffffffffffffffda RBX: 00007fcaba83c6d4 RCX: 0000000000457089 [ 458.552142] RDX: 0000000020000240 RSI: 0000000020000180 RDI: 0000000020000140 [ 458.559439] RBP: 00000000009300a0 R08: 0000000020000480 R09: 0000000000000000 [ 458.566710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 458.573981] R13: 00000000004d2358 R14: 00000000004c7a5d R15: 0000000000000018 20:07:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) quotactl(0x9, &(0x7f0000000140)='./file0\x00', r3, &(0x7f00000004c0)="a583d20e08bb3f82124e27abf59f4751ce9710295721b21fac5edbe8b99f8b3e8e563f85651370dad0cbcadd5da6f9cb590e96c70e62788ab1435a5a6772dce56fbb07c8952acd3386d6f2899070882d66704fac628c41dee6eeef789e75a39e3c") pipe2$9p(&(0x7f00000001c0), 0x0) 20:07:19 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='numa_maps\x00') ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000080)) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000240)={"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"}) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) write$sndseq(r1, &(0x7f00000000c0), 0x24b) syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x901, 0x0) write$cgroup_type(r3, &(0x7f00000006c0)='threaded\x00', 0x9) syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x8080) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(r3, r2) 20:07:19 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000340)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000280)={0x3, 0x1, 0x1, 'queue1\x00', 0x7}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000380)=r2) 20:07:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') ioctl$TCGETA(r0, 0x5405, &(0x7f0000000100)) rt_sigreturn() readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:19 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667304", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 458.584568] 9pnet: p9_fd_create_unix (24228): problem connecting socket: ./file0: -111 20:07:19 executing program 2 (fault-call:3 fault-nth:25): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x800, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000180)) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') ioctl$KDSETLED(r0, 0x4b32, 0x9) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 458.715578] 9pnet: p9_fd_create_unix (24258): problem connecting socket: ./file0: -111 20:07:19 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fsh', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:19 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000000001", @ifru_names="04707000"}) 20:07:19 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfNno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="160000006f01000100000000000000000000000000000a9875e6324a7a236ce5a0d49ae3c0b60075dd7a16fadab980728971371c091b4c3f1f909042601a5af6f05d1c3f736c9f66e06ed15c14b366aa15985dd56a406959c8f472a163aaa03e127ae982a05e6e9719ebbb08d5a5836a2623694c98a00df0de450f19b9f23f7ca51897cb88b116e892a5bf7d1606beaa0f1b0b5c718f10bd5010a1f041512f190a27729572da2e5ce1947fa9"], 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x900}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}}) listxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)=""/57, 0x39) 20:07:19 executing program 3: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000340)) gettid() r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000180)='net/netfilter\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xbc, "507ecc98f98b27ec94830629d78c4aa7fdb25a356cbda8a54f61a09746c829c350158ded27d764b7d86e16a662076577e5a05dbea1ca895b3f1627dd9d62d96c21beaffeef1c41ab9aa62885ff56e9584fac8be092c5febb0aa624d509afccb18263c6147026b93c93c762a69e31dfb80211f835acdf337a5d38778764003cf144c4b1f5372f85d34721def2ad6d124afc043aac255f4c63ecf5bf5299a2c31b81cfe8aa50eb1d6878f536e6398392151d781198c7b8073a671103c3"}, &(0x7f00000002c0)=0xc4) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000300)={r3, 0x4, 0x8, 0x74, 0xfff, 0x4243}, 0x14) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x18) syz_open_procfs(r4, &(0x7f0000000100)='fd\x00') 20:07:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./file0\x00', r3, 0x0) [ 458.908510] 9pnet: p9_fd_create_unix (24280): problem connecting socket: ./file0: -111 [ 458.923467] 9pnet: Insufficient options for proto=fd [ 458.966804] 9pnet: Insufficient options for proto=fd 20:07:19 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='Zp\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:19 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0xe5, "a207029aa42ae2b3292752c6694ab0216a36cc957037532692bfcdbd789d8dc0a0a7e8fe112ac40855314149425bc830e5bb08384aa5e7ffe92aa27728bc0bd25204ed5d699798d4946e3f66d427e0edba02633ee9cb26d63ca0a080c93a7208b3dc0e4a195748b5c2a2e6b76ca06b425c0efa6fdda98c7465ffa1a872b9bae220377f5fe1f6af2221951d6559ce34e1e283df7b49c583bf625ab193bda3f92f3635b36012358b31f2b613435ce030a43d52e8276c46a16912b72e0a6c8abdeef080178cf585d9fefc9a093edcab0e46835161be72e97b36f4488bc340ddc0294f85eec786"}, &(0x7f0000000080)=0xed) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r2, 0x5f, "5a1bd0ee9fac706efece3750e45d1fd26d66c9473c4d9e58b918089f149353dd7dde199d1c6c7e1ac46f7b35f93b65875713087a03ddf91d60ea632906047f42a423b56f32265fbb654d7eb86b69917fbf734e7f414aadf46254e46bbe2661"}, &(0x7f0000000280)=0x67) 20:07:19 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 459.200672] attempt to access beyond end of device [ 459.205755] loop6: rw=12288, want=8200, limit=20 [ 459.221183] attempt to access beyond end of device [ 459.226405] loop6: rw=12288, want=12296, limit=20 [ 459.238116] attempt to access beyond end of device [ 459.243143] loop6: rw=12288, want=8200, limit=20 [ 459.250088] attempt to access beyond end of device [ 459.255134] loop6: rw=12288, want=12296, limit=20 [ 459.285891] attempt to access beyond end of device [ 459.291061] loop6: rw=12288, want=8200, limit=20 [ 459.296409] attempt to access beyond end of device [ 459.301473] loop6: rw=12288, want=12296, limit=20 [ 459.316925] attempt to access beyond end of device [ 459.321973] loop6: rw=12288, want=8200, limit=20 [ 459.327561] attempt to access beyond end of device [ 459.332664] loop6: rw=12288, want=12296, limit=20 20:07:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r1, 0x101000000000013) 20:07:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) getpid() setrlimit(0x8, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0x0, 0x4, 0x70, 0x0, 0x1}, 0x27) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000340)) mq_open(&(0x7f00000deffd)='-$\x00', 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x3}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4080, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000200)=""/72) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x40247007, &(0x7f0000000000)) 20:07:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x404100, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000003c0)=0xb, 0x4) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r3, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r3, @ANYBLOB="aff199d90e08ea48cb145600d192b925f4f550a72b5f9cb6f0d976e3723d690231aef221bba7e74a06687a6351d36e854100cda172f81cbca333f282fa3cdc3024461b83cc57cbb5c86b8fdfc7dd998dea2d1298e3e14af89be55dfc41d33da2fdd10ec5f2e11ec9d6f0f8e25c53f052c463e27797c4e9532b37f19902d73be610ffdc329425e5daee86880574b040c6ee881f99fd02084162b0eb0894c26ea651a08b2fff1c78224dde7a50290c409482ce0a9967ad089ee17579b609a9cd06aa997175a939a4b7d5e9e99ce57135fc56be81b590e1605e9d36a46b301159980ccdd841618883b5236ffc1425625d32163d0648ec", @ANYRES32=r3, @ANYRES32=r3, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYPTR64], @ANYPTR64], @ANYRESOCT, @ANYRES64=r0, @ANYRES32=r2], 0xfffffffffffffe08) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x44882, 0x0) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000180)={0x0, 0x3ff, 0xa06, 0x100000001, 0x6, 0x4}) 20:07:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000600", @ifru_names="04707000"}) 20:07:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'erspan0\x00', 0x3002}) 20:07:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='\np\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:20 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 459.564927] attempt to access beyond end of device [ 459.570043] loop6: rw=12288, want=8200, limit=20 20:07:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) 20:07:20 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) getpid() setrlimit(0x8, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000002e40)={0x12, 0x0, 0x4, 0x70, 0x0, 0x1}, 0x27) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000340)) mq_open(&(0x7f00000deffd)='-$\x00', 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x3}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4080, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000200)=""/72) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x40247007, &(0x7f0000000000)) [ 459.622335] attempt to access beyond end of device [ 459.628040] loop6: rw=12288, want=12296, limit=20 20:07:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="74723e360f36907d873d0000000000e90620c0a68076abe0fd8f9b7c890e53a2019dddd0554fd5c2245923cb98fd84558a78197fc0625d970670262c58085100edb55bddf669f225409ad96fef4022582d07a62891fc9c8854d0ca38cc2216481aa47e04cf1df5fc262479c2fe2e1a8c83372cdb2bc6df0000000000000000", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) fcntl$setown(r1, 0x8, r3) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='%p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 459.666955] attempt to access beyond end of device [ 459.672087] loop6: rw=12288, want=8200, limit=20 20:07:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\t\x00', @ifru_names="04707000"}) [ 459.719934] attempt to access beyond end of device [ 459.725133] loop6: rw=12288, want=12296, limit=20 [ 459.768978] 9pnet_virtio: no channels available for device (null) [ 459.792830] attempt to access beyond end of device [ 459.797894] loop6: rw=12288, want=8200, limit=20 [ 459.814300] 9pnet_virtio: no channels available for device (null) [ 459.837086] attempt to access beyond end of device [ 459.842265] loop6: rw=12288, want=12296, limit=20 [ 459.855182] attempt to access beyond end of device [ 459.860314] loop6: rw=12288, want=8200, limit=20 [ 459.873168] attempt to access beyond end of device [ 459.878253] loop6: rw=12288, want=12296, limit=20 20:07:20 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:20 executing program 3: syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') 20:07:20 executing program 0: r0 = epoll_create1(0x80000) eventfd(0x0) r1 = socket(0x10, 0x2, 0x0) recvmmsg(r1, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000002e40), 0x0, &(0x7f0000002e80)=""/131, 0x83}}], 0x1, 0x0, &(0x7f0000003080)={0x77359400}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000e47000)={0x10000000}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000), 0x4) 20:07:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9\n\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:20 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000280)={0x8000, 0xcf, 0x4, 'queue1\x00', 0xfffffffffffffffb}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)='./file0\x00') ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) 20:07:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2a00ca00003d07e3be155900290100000059283c7a04373e26e6bdbed0770cf084fe43b7ef984c3e0001018000008f87240022f6752ceaa89a3ff1aec461e4e92f0fc98fae9b174ad58e9e2ad47e4f758f22eec09298608b707a2f6b31fe000000000000"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x940, 0x0) 20:07:20 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000600", @ifru_names="04707000"}) 20:07:20 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs&', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:20 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 20:07:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9%\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:21 executing program 3: socket$unix(0x1, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x80000000004) write(r0, &(0x7f000058bfe4)="29000000140005b7ff000000040860eb0100100006a40e07fff00fd57f25ffffff0100002a00f3ff09", 0x29) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\a', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:21 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:21 executing program 7: r0 = socket$inet6(0xa, 0x4, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6e6f5b787465d2642c08"]) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', '.', [{0x20, 'noextend'}, {0x20, 'trans=fd,'}, {0x20, 'rfdno'}], 0xa, "1512c5d569019c83135f7050ac58519e1d7a6d2dfd931ca74e17eae86786bf1bc1f1fd1e735baa968ce97d4cff83c254e76cd85844ae0fe09c074cc0a9fb4459132def16d642756006b3b11d63cc2f87a774b64f84e990df6d97ec3997"}, 0x7b) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0xc8c, @remote, 0x100}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:21 executing program 3: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)="6e65742f6eb365746c696e6b00") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_names="04707000"}) [ 460.732736] attempt to access beyond end of device [ 460.737978] loop6: rw=12288, want=8200, limit=20 [ 460.875327] attempt to access beyond end of device [ 460.880446] loop6: rw=12288, want=12296, limit=20 20:07:21 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="7472e18900000000000000646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)="397010", 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:21 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x181000, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000140)=0x80, 0x80000) accept4$bt_l2cap(r1, &(0x7f0000000240), &(0x7f00000001c0)=0x9478d1fe95ad7b21, 0x800) r2 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x400, 0x20000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000200)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000280)='loginuid\x00') readv(r4, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) [ 460.939720] attempt to access beyond end of device [ 460.944867] loop6: rw=12288, want=8200, limit=20 [ 461.063627] attempt to access beyond end of device [ 461.069088] loop6: rw=12288, want=12296, limit=20 [ 461.099941] 9pnet_virtio: no channels available for device (null) [ 461.128420] attempt to access beyond end of device [ 461.133479] loop6: rw=12288, want=8200, limit=20 [ 461.146513] 9pnet_virtio: no channels available for device (null) [ 461.180077] attempt to access beyond end of device [ 461.185147] loop6: rw=12288, want=12296, limit=20 [ 461.216742] attempt to access beyond end of device [ 461.221892] loop6: rw=12288, want=8200, limit=20 [ 461.260161] attempt to access beyond end of device [ 461.265265] loop6: rw=12288, want=12296, limit=20 20:07:21 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:07:21 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x4, 0x200) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000200)={r1}) recvmmsg(r1, &(0x7f0000002d80)=[{{&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000001380)}}], 0x1, 0x0, &(0x7f0000002ec0)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40000, 0x0) accept$nfc_llcp(r4, &(0x7f0000000140), &(0x7f0000000040)=0x60) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) 20:07:21 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_names="04707000"}) 20:07:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)="397002", 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:21 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f726172666452d3b4074479540600", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:21 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:21 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="66326673a7", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 461.426963] 9pnet_virtio: no channels available for device (null) 20:07:22 executing program 3: sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="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", 0x1000, 0x1, &(0x7f0000001500)={0x2, 0x4e23, @broadcast}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/18, 0x12}], 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000380300002801000000000000280100002801000000000000680200006802000068020000680200006802000003000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x398) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000001540)) [ 461.483284] 9pnet_virtio: no channels available for device (null) 20:07:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00\x00\x00\x00 ', @ifru_names="04707000"}) 20:07:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)="39707f", 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x9, 0x16, 0x7, 0x1, 0x100, 0x4, 0x9, 0x3, 0x4000000, 0x4, 0x1f, 0x4, 0x0, 0x4, 0x8]}, &(0x7f00000002c0)=0x100) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000380)={r3, 0x7a2}, &(0x7f00000003c0)=0x8) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:22 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 461.710264] f2fs_msg: 80 callbacks suppressed [ 461.710279] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 461.722106] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 461.786147] attempt to access beyond end of device [ 461.791273] loop6: rw=12288, want=8200, limit=20 [ 461.796348] F2FS-fs (loop6): invalid crc value [ 461.801287] attempt to access beyond end of device [ 461.806470] loop6: rw=12288, want=12296, limit=20 20:07:22 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f2670f23ed0f4968a2678242ca08ba420066b81b95000066ef66b99d0b000066b8f100000066ba000000000f300faeea660f6c25640fc72e47b90f1f00d8d1", 0x3f}], 0x1, 0x59, &(0x7f0000000100)=[@cstype3={0x5, 0xa}, @dstype3={0x7, 0xc}], 0x2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x100, 0x4) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) read$eventfd(r0, &(0x7f0000000340), 0x8) getsockopt$inet_mreqn(r0, 0x0, 0x2b, &(0x7f00000003c0)={@empty, @loopback, 0x0}, &(0x7f0000000400)=0xfffffffffffffdbe) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000240)=0x20f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x4, &(0x7f0000000140)=@raw=[@jmp={0x5, 0x4, 0xb, 0x3, 0xd, 0x5c, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x3a}], &(0x7f0000000180)='GPL\x00', 0x4, 0x77, &(0x7f00000001c0)=""/119, 0x0, 0x1, [], r1, 0x4}, 0x48) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000280)='ns\x00') 20:07:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000003, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xfffffffffffffdef, 0x4d, 0x1}, 0x35ec2a96378d70d1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c7766646e9a3dc2c708f16296fcdc5eb9933e6b7a3847b3c434734c74c63ac0c1655c3c4d53593fbe5732c117bf8c7055d2d23d66bb4984db833d13171edab80ea1f70809b91ec116158ceb4d024f738b8af41c0ed3c94f337fd59d8849d4cee2f099219673", @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) unlink(&(0x7f0000000140)='./file0\x00') ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00\x00\x00`\x00', @ifru_names="04707000"}) [ 461.833148] F2FS-fs (loop6): invalid crc value [ 461.837887] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 461.876180] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 461.883359] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 461.889974] 9pnet: Insufficient options for proto=fd [ 461.902860] attempt to access beyond end of device [ 461.907963] loop6: rw=12288, want=8200, limit=20 [ 461.913110] F2FS-fs (loop6): invalid crc value [ 461.923686] attempt to access beyond end of device [ 461.928773] loop6: rw=12288, want=12296, limit=20 [ 461.933868] F2FS-fs (loop6): invalid crc value [ 461.938621] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 461.952146] 9pnet: Insufficient options for proto=fd [ 461.990625] attempt to access beyond end of device [ 461.995727] loop6: rw=12288, want=8200, limit=20 [ 462.012467] attempt to access beyond end of device [ 462.017558] loop6: rw=12288, want=12296, limit=20 [ 462.035880] attempt to access beyond end of device [ 462.040956] loop6: rw=12288, want=8200, limit=20 [ 462.055221] attempt to access beyond end of device [ 462.060338] loop6: rw=12288, want=12296, limit=20 20:07:22 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/rtc0\x00', 0x400000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x1000, 0x218140) fanotify_mark(r0, 0x80, 0x1, r1, &(0x7f0000000440)='./file1\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/ptype\x00') ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000300)=0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000340)=r3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000500)={0x9, &(0x7f0000000480)=[{0xfffffffffffff765, 0x3f, 0x0, 0x9}, {0x9, 0x9, 0xfffffffffffff801, 0x4}, {0x10000, 0x1, 0x1000, 0x9}, {0xff, 0x4, 0x6, 0xfffffffffffffffe}, {0x3cb, 0xaea, 0xffff, 0x6}, {0x4, 0x4, 0x4, 0x7}, {0x9, 0xc762, 0x3}, {0x3, 0x8, 0x8, 0x8}, {0x7, 0x1, 0x2, 0x6}]}, 0x10) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000540)) r5 = openat$cgroup_procs(r4, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={r4, 0x0, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) umount2(&(0x7f0000000380)='./file1\x00', 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r6, 0x101000000000013) 20:07:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:22 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c300000000300", @ifru_names="04707000"}) 20:07:22 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs@', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)="71616861e8d17203683e0d00000000000000056087fd484aac58906b76203a8e0000000000f2ffffffffffff39e5d431e8369e7100000000000000") readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{}, {}, {}, {}, {}]}) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x7ff) 20:07:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x30) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:22 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:22 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580), 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x5dffd0b6, 0x7f, 0xab, 0x5, 0xfc}, 0x14) r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$int_in(r1, 0xab04, &(0x7f0000000000)) memfd_create(&(0x7f0000000000)='wchan\x00', 0x3) [ 462.265907] 9pnet: p9_fd_create_unix (24579): problem connecting socket: ./file0: -111 20:07:22 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="6632667304", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:22 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc8070014838f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x1c1000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x117, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x101, @dev={0xfe, 0x80, [], 0x16}, 0x9}, r4}}, 0x30) r5 = getgid() lchown(&(0x7f0000000140)='./file0\x00', 0x0, r5) 20:07:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00@\x00', @ifru_names="04707000"}) [ 462.480922] 9pnet: p9_fd_create_unix (24611): problem connecting socket: ./file0: -111 20:07:23 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:23 executing program 3: r0 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10, 0x80800) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000140)=""/29, 0x1d}, {&(0x7f0000000180)=""/60, 0x3c}, {&(0x7f00000001c0)=""/247, 0xf7}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000340)=""/88, 0x58}], 0x6, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/sco\x00') sendto$unix(r2, &(0x7f0000000440)="6863d013cf6da03caf02a35706381d7f40d382877208fa7fdcfb91008b900fc65b5a146e2b1baa971439d0f37ae8ebc101378e50bfebf0356691bce98ff8773f9cfa88c12a6ae47d8e76d4294a0a86eb6c1b5ce7584a8d000a8961b940abc4c03053dc400bddff7a4c4a69e6db69fd9146f65fc7e0bb1d86a793e1cd55c3e2c8c4a4969f515d001710b90cb03f3302d9f8e60b777f4bc34d7e4d14dcdc44383ce12fddd52a", 0xa5, 0x4000040, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) readv(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) fcntl$setsig(r2, 0xa, 0x21) 20:07:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)="3970fe", 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x100000001, 0x3, &(0x7f0000000580)=[{&(0x7f0000000380)="4ee28101305ff52bf9d8c7ab8818e646393f2fbc070a4ba9528f84e8ae844f207e699aa50f96f24e7f8ed13b4711894cd214e214d1db6428dad618597889adad09df9eca5a40c85a2f27c7c0bb81d842ba46924815fd8e0097575c74c83a54bd6b0ca297e3983db6d7cdd57a1188546d625bb99b6c2fd284e44f1f380ebd937ca43e16ffebc8d3d23ab7853df18d2c0f32237ffcea145cf0fb0975347586f0cc33bd459e289e7c9706b8c3643135bd781b10e4884d61542fdca07b6574e3df2911b885f6e162c37a6ada4f4ae5f5a0ad811b6113d0ada7954b05d9edaa8ad7541977c85c1971818ba51f4dfb5d25", 0xee, 0x1ff}, {&(0x7f00000004c0)="dfbe61f2127f1635138ffef4b05bf97a91b1ce9d25166c49788b6cf2fb91ce845527c1fdf07ce30d7befa7fe06e1b08cd6c154cd185f47e84b5271d2164ed5f20feacc20a05bd08cd57c912f5846e6029a5c6c3f52eaaa1753a69e2ba165d34ba35f560b858153f9ed527a01f9567d894902c7d2171eda2476a210c44c61ee15595576633d2b4de3c6ba29acdf951faa43eaa3bf072ed906c69c35c2ff2c1577b321d4892a10c8e6a93be3fc73b27bbfb1e43acfd8", 0xb5, 0x5}, {&(0x7f00000001c0)="2209340ff578774182765ec872708317c6d761cd23e51aaca4b507be9d66c827b67c934a304eb45bb30018c9a4a2c64b9c22737f16cadc5e19d4f15ce6fe8738", 0x40, 0x800}], 0x404, &(0x7f00000002c0)={[{@bsddf='bsddf'}, {@debug='debug'}, {@grpjquota='grpjquota='}]}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 462.772752] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 462.841153] EXT4-fs (loop7): VFS: Can't find ext4 filesystem 20:07:23 executing program 4: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x30043, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00000002c0)={0x5, 0x0, 0x8004, 0x9, 0x8, 0xfa, 0xffff, 0xfffffffffffffffd, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000380)={r1, 0x7}, &(0x7f00000003c0)=0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0x12) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) timer_settime(r4, 0xfffffffffffffffd, &(0x7f0000000080)={{0x0, 0x989680}}, &(0x7f0000000300)) utimes(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000280)={{}, {0x0, 0x2710}}) pause() tkill(r3, 0x101000000000013) 20:07:23 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="663266738c", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\t\x00', @ifru_names="04707000"}) 20:07:23 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rfkill\x00', 0x408000, 0x0) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffedb, 0xfa00, {0x1, &(0x7f00000004c0), 0x103, 0x100d}}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000280), 0x382) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080)={0xffffffffffffffff}, 0x8000000004, {0xa, 0x4e23, 0x1f4190f5, @dev={0xfe, 0x80, [], 0x1c}, 0x3}}}, 0x38) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000300), &(0x7f0000000340)=0x4) accept4$bt_l2cap(r0, &(0x7f0000000400), &(0x7f0000000440)=0xe, 0x800) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000000), r4}}, 0x18) readv(r3, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x3, 0x7, 0x8}}, 0x30) fcntl$getownex(r3, 0x10, &(0x7f00000002c0)={0x0, 0x0}) sched_getscheduler(r5) 20:07:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0xf) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="00060000000000", @ANYRESHEX=r2, @ANYBLOB=',\x00']) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:23 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:07:23 executing program 3: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)="0000000000634000d19679fd87228b6b5fec147b9d532f53f45ba57a") readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000180)='./file0\x00', 0x89, 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="13a831e69e84002b7c8bf5983f27dc0b995a568e2a689a48628b8d87b508d53fbb136b4384d1278079f981ce9ec37f43529209f21c70e8e1b0f67931cec9e6b18b8ffc88ebb171f467dfc3f7ac14d50b655c18925c7f150e283e3cefde1c869b76da31abb962cb43665e0977b7242863ade6ef430b0db769c54952a180423dcdc71b53b6b4f62d6704e40e7ff5b1b90267a9b4", 0x93, 0xfffffffffffffff9}, {&(0x7f0000000280)="d4c9b82ccc", 0x5, 0x5}], 0x100000, &(0x7f00000004c0)=ANY=[@ANYBLOB="646f74732c636f6408000000000000003934392c6e2c646f7473a38e2c0000000000000000000100000000000000fe869a589723db4cbc05c3ae6dace7ae41c98ed2195c20fe30a5df7c16c2ca3e4e2ef9a6bf0e5c96b32badc2122fa62264157d59321c9d7f7bab7867434fda0abb"]) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000000)=""/18, &(0x7f0000000080)=0x12) sendmsg$nfc_llcp(r1, &(0x7f0000000a00)={&(0x7f0000000440)={0x27, 0x1, 0x1, 0x5, 0x7fffffff, 0x53da, "d3456c52d3e5795f90c164ae28e61b06943f9b0d3a15102f6b1407a0f6286c9246b2c59e9cd472823a9ba93226d12f3d58ed85b10744534cf9799e80ab28ba", 0x3e}, 0x60, &(0x7f0000000900)=[{&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000006c0)="2a16003af6865a66acb6350fe6e233e5b694fafac2f5f5ae0fa5aa2eee0ea88d31418dadbb5162a6d400508b7a56a5cfe6b6b483fc11b78c885d6ca3c00f7efa25e7e3", 0x43}, {&(0x7f0000000740)="2412ea3ffdd62a7e949d09a3d8aa0364970f6e3d518073b782a709a1c0fd5edd4b6678e9608090acc93f51b66f0801482d795650f6d02e5f76926a1c600b02f62727dfea13a82555cfdbb2174707195fc1908d1269a2b9504c47205648c9c94d54696ba3a0048544f92639588116d084ab2b0bb6fb433a8822704eb57dd30918ec72ad5dded5f433f65ecbadb0d4f3f063bc271603c8c2c139218c91813b7c48547b9fd6ebfc810aef66453142531650ace6d87282a3a7432110a1089a26dd529870c3606f39b5cc7b", 0xc9}, {&(0x7f0000000540)="0130a2a77509e32dab190909f56042c4a61b4223e1ddfb89edabb2e443ff3d14a138", 0x22}, {&(0x7f0000000840)="d627e3a958999eec60edd8df6b8fe8db552b4e0f7a0e0f73e8145b7874c4678fa7841766540b7d5955ec930ddb3bedb80acf9ba861017b44c9a434a75981b4326dce6b709b0dd6f226fbba434c37037004017c4331cd7dd9d890e34e811e335ff9771eeec5c06da2929e8a7eca305c6a13bf0ecc4d283ff6ca35b9def467c0ad45cdb326", 0x84}], 0x5, &(0x7f0000000980)={0x78, 0x10f, 0x2, "652282376de6d41f745b1bf40dfb7036818a2a9ea7426916fcccb185d4976ab60768b35b8c81251b6321810dc0a7a3e224a0c87480f71b794e102b4bdc861b86da1813e510f0b2cab5c2d6e3d1831297a346278706988dfcf290a377cb9475eb621b60c4d21706d4"}, 0x78, 0x8010}, 0x4) sendto(r1, &(0x7f0000000380)="3f3dbe775535e5f5d1b6f518f81195b4b445a6bfc296929a90c10b79e09c29778063cd276f209f9d82a199b3f007a113018749ac8900836e1fa4fb90ff83ab4be51973875eb95ba476f3fb10a76f6d6e9d2b1cb4806dcfc793a41a4c1e761e1b4624b0e654deacc4233900834a93d549633f11afdf7c1b1bd083e3d31403f90b81", 0x81, 0x3ffff, &(0x7f0000000300)=@in6={0xa, 0x4e22, 0xfff, @remote, 0x1}, 0x53) ioctl(r1, 0xffffffffffffffff, &(0x7f0000000040)="7f2dd0febbf465c9ba6dbfa9540b15c1b573f014021a4cc854b1faf1afbe4e0dc508a0c4c42dd219f15da5") [ 463.170232] 9pnet: p9_fd_create_unix (24669): problem connecting socket: ./file0: -111 [ 463.173908] 9pnet: Insufficient options for proto=fd 20:07:23 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fsz', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9pl', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 463.272518] 9pnet: Insufficient options for proto=fd 20:07:23 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000300", @ifru_names="04707000"}) 20:07:23 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="456e6f3de770b24b00000050bc20df2c7630b106a189202cd1c5c9769c371eb70eb93a3f2792aabe0060c8339c914cbbc6a22945f40bab6a5bf7e163d9e3479e853dd63099cf0bc0b07083d21ec0bb1980b787b3cf7bd48d596dded1e2489c49e592a0286481754588b009c0493c9644a0917acc13", @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3, 0x82400) ioctl$KDADDIO(r3, 0x4b34, 0x101) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 463.487381] 9pnet: Insufficient options for proto=fd [ 463.533733] 9pnet: Insufficient options for proto=fd 20:07:24 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:24 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) r1 = getpid() r2 = geteuid() lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000380)=[{&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000180)="2a210f0e6f0426f541176246f7199dbaa806d0edb8edb83151c0e178f62845908faceca65320c605e0b2c0bb214a47f1ff0405e638853123e1ba9559a4ec64c31a369ea5c0b22413a4a112baf8c71a0e795da414c0ef24b917be4d1cef0b439011b0640ea764c88d1edd1e78ce64edb3a8fd80016b", 0x75}, {&(0x7f0000000000)="c0b53a650d8e9cbc", 0x8}, {&(0x7f0000000080)="7a940eab4b240fed74718bb2693749b13f418fa1bd0b1608f44f27b1c176d6eded7e85740191d2c2", 0x28}], 0x4, &(0x7f0000000300)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}], 0x50, 0xf62fbe2b246cd5c0}], 0x1, 0x80) 20:07:24 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:24 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 463.613431] 9pnet: p9_fd_create_unix (24724): problem connecting socket: ./file0: -111 [ 463.632120] attempt to access beyond end of device [ 463.637164] loop6: rw=12288, want=8200, limit=20 [ 463.655382] attempt to access beyond end of device [ 463.660445] loop6: rw=12288, want=12296, limit=20 [ 463.686764] attempt to access beyond end of device [ 463.691879] loop6: rw=12288, want=8200, limit=20 [ 463.696949] attempt to access beyond end of device [ 463.702037] loop6: rw=12288, want=12296, limit=20 [ 463.738096] attempt to access beyond end of device [ 463.743322] loop6: rw=12288, want=8200, limit=20 [ 463.748590] attempt to access beyond end of device [ 463.753650] loop6: rw=12288, want=12296, limit=20 [ 463.760443] attempt to access beyond end of device [ 463.765553] loop6: rw=12288, want=8200, limit=20 [ 463.771147] attempt to access beyond end of device [ 463.776299] loop6: rw=12288, want=12296, limit=20 20:07:26 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 20:07:26 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_names="04707000"}) 20:07:26 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x400, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RFLUSH(r3, &(0x7f00000002c0)={0x7, 0x6d, 0x2}, 0x7) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="2ccb66cc550d00000000002e002034b4a020206892"]) write$P9_RREADDIR(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000965d412100000000000a0000b5e6bdbed077ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setns(r3, 0x20000000) 20:07:26 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000340)={0x4, 0x3, 0x6, 0x101, &(0x7f0000000280)=[{}, {}, {}]}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)=0x0) r4 = add_key(&(0x7f0000000180)='blacklist\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="660bdb9da18dcde4efe60f5f4c15a345bf2b521e3294e6d5b40f32cee66866465c1157f6866d7654e02f08c53fa9126cce4f9bd6a1e7b054acd92b99b040cfc0f298e6b588fdcfd642761dd7afbec3467acd6a275b3fdb3130a9a6e52b979effc84479b46f70eda3b2886dd2f40a3606191472f055be68792fd1f19890792dcc61f9fe8a70b3af1f5e89fa1708fd2c82f744ff6ab6", 0x95, 0x0) keyctl$assume_authority(0x10, r4) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) timer_settime(r3, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000500)) 20:07:26 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:26 executing program 0: syz_emit_ethernet(0xa5, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004500001c0000000000119078ac2314aaac1414000000d90000089078"], &(0x7f00000000c0)={0x0, 0x2, [0x2, 0x7db]}) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x8400) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x8, 0xe8c9, 0x200, 0x8001, 0x80000001, 0x3f, 0x8, 0x9, 0x3, 0xffffffffffffff01, 0x4}, 0xb) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000100)=0x7, 0x4) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x3}, 0x4) 20:07:26 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:26 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f00000030c0), 0x1000) read$FUSE(r0, &(0x7f0000001000), 0x1000) rename(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300)='./file0/file0\x00') socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, 0x50) umount2(&(0x7f0000000180)='./file0\x00', 0xa) write$FUSE_DIRENT(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="9000000000000000020000000000000001000000000000000000000b000000000066ce656d316e6f246576656d310000000000000000000000000000002c000000000000619fcd3823b7c94f5a3276ce8c9461000000000000001c000000000000002b7379737465746a48be1b31486dcc6370757365746367726f7570246367726f0004000000000000000000000000"], 0x90) [ 466.273416] attempt to access beyond end of device [ 466.277179] 9pnet: p9_fd_create_unix (24746): problem connecting socket: ./file0: -111 [ 466.278529] loop6: rw=12288, want=8200, limit=20 [ 466.306607] attempt to access beyond end of device [ 466.311736] loop6: rw=12288, want=12296, limit=20 20:07:26 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000100)={0xe1, 0x6, 0x2, 0x7fff, [], [], [], 0x0, 0x7, 0x15, 0xfff, "2ef9ede99770ba57b080a11b80d35e2a"}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) fdatasync(r0) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000340)=0x100) fgetxattr(r0, &(0x7f0000000240)=@known='security.selinux\x00', &(0x7f0000000280)=""/106, 0x6a) 20:07:26 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=@in={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000940)="0b020c461ab73ea584065bd326d4a5c1fc43631646c1932864ab77bc3cc9ee1eab9b6804f065551edcbf8ad64ec75e96dc8be3e19d65be39376d34e079ea2e428154d913d3c75896cabc636bb421bb2564819ce248375a4ad8ff8f00ea530cf38392299e53d7d131f8289ece7c5feec29c5034f95b2e04d402144e1032b42c9835c44714f9d1568b83f6c813c5007d8bc6476c167177ae61e0fd17a3ce2a705adc2702210bb729ff487fe133314016a3cf928b12268da25ee6eaa2ff8e9ef5c533809f4a10", 0xc5}, {&(0x7f0000000300)="f23d5b19087bd259f38d444892cb84166b7bfd540f53c48511177a6ac59817f725aae61d", 0x24}], 0x2, &(0x7f00000005c0)=[@dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x20, 0x4010}], 0x1, 0x20000011) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r3, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="57470bfc2788433a3b896500866a510780219c46a7143f6fd605c0f24b06a2f2b13e7d5c6a23595fd8a9b1f287745c7c835900b4b30c16e52d1c8c83fdd8d85fbdee253367d60e3b7ee1e3a851e3893914243ae457e03fa554d960ee4b42122492bc4b9bfe869a760f9ce777405c0d8546abf411851f52f2ff762ca0214d76d522ad6084c42133223ebdf0d7ba871a6094eb72bf8184fea126f7885a9f1de9da628c4945909f58ec4224ac823bdbaaae8501fc7913e494dffac79a268588537e46b51f97319ba9f0bd043dec9b500a03e1cf24d90a8a46f097eba3da5d97cc4743dda8dee969b39ce5a02b2122461523487fb211403d242245"]) r4 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x10001, 0x4000) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000640)={0x93, 0x8, 0x800, "a0b4403c9b54bae5779a24da3b79278baa60ad5280a4afe25e2865ce7fb8dc7874f67aa9f722930be730bdcaf4593d45375d2917ff7f2338a1038c19a853bf11ea2bf35b50df7ad1e9698018cdcf4fb7f1bcb3e8677e997ef10790e9d9464b083352802a468087ce820292e338a8be1548b6c4f883060cb6c9b01002c8001e8a88d6759eacb77227effe2a1bad7447a6dcb6d7"}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) r6 = getgid() write$P9_RGETATTR(r3, &(0x7f00000004c0)={0xa0, 0x19, 0x2, {0x2000, {0x10, 0x4, 0x2}, 0x8b8594022d56f645, r5, r6, 0xfff, 0x9, 0x9, 0x75f, 0x80000001, 0x985, 0x14178000000000, 0x4, 0x4, 0x0, 0x8, 0x2000000000000000, 0x80000001, 0x2, 0x3f}}, 0xa0) [ 466.345688] attempt to access beyond end of device [ 466.350797] loop6: rw=12288, want=8200, limit=20 [ 466.359580] attempt to access beyond end of device [ 466.364794] loop6: rw=12288, want=12296, limit=20 20:07:26 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000000000300", @ifru_names="04707000"}) 20:07:26 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 466.455898] attempt to access beyond end of device [ 466.460995] loop6: rw=12288, want=8200, limit=20 [ 466.486120] attempt to access beyond end of device [ 466.491169] loop6: rw=12288, want=12296, limit=20 20:07:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='wclan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 20:07:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',Kfrno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 466.547753] attempt to access beyond end of device [ 466.552825] loop6: rw=12288, want=8200, limit=20 [ 466.559265] 9pnet: p9_fd_create_unix (24792): problem connecting socket: ./file0: -111 [ 466.582238] attempt to access beyond end of device [ 466.587410] loop6: rw=12288, want=12296, limit=20 20:07:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f00000005c0)={0xd2, "972b0e631cc143303b45dab96ee76d68e50a2f278b8a5f47acdfc50c1b2a729286d67a191489b230efde14549d757577a3f1a3ed43e39916473941bf3c58a4e650d9ebcc3471e420c9d0cb783fa7db2a0cb549aabc27157c4d3e2ee923b32beaeff14182607181d1c50af66df9264064f293cad163a9f63e147b6a2b275b7b3608e817f95f9825021e2dee3d51a0e03b6d1790b1d2301a51943e235e986bf1989c064d9c9b8992daa6f5faed95d7784d9b6c92f4349e416c9f5ac2e81e4ed3f5a7719a0563c3abdf79fb0aed634b2475247c"}) readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000100)={"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"}) 20:07:27 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00)\x00', @ifru_names="04707000"}) 20:07:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) recvfrom(r2, &(0x7f00000001c0)=""/1, 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getrusage(0x0, &(0x7f0000000080)) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000010000000000000018000000ff"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [0x488, 0x0, 0x1]}) 20:07:27 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) [ 466.654473] 9pnet: Insufficient options for proto=fd [ 466.671169] 9pnet: Insufficient options for proto=fd [ 466.811114] f2fs_msg: 50 callbacks suppressed [ 466.811132] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 466.822918] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 466.850344] attempt to access beyond end of device [ 466.855447] loop6: rw=12288, want=8200, limit=20 [ 466.871378] F2FS-fs (loop6): invalid crc value [ 466.876354] attempt to access beyond end of device [ 466.881513] loop6: rw=12288, want=12296, limit=20 [ 466.886917] F2FS-fs (loop6): invalid crc value [ 466.891712] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 466.898755] F2FS-fs (loop6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 466.906087] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 466.913975] attempt to access beyond end of device [ 466.919114] loop6: rw=12288, want=8200, limit=20 [ 466.923972] F2FS-fs (loop6): invalid crc value [ 466.928676] attempt to access beyond end of device [ 466.933684] loop6: rw=12288, want=12296, limit=20 [ 466.938601] F2FS-fs (loop6): invalid crc value [ 466.943282] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 466.977440] attempt to access beyond end of device [ 466.982642] loop6: rw=12288, want=8200, limit=20 [ 466.990233] attempt to access beyond end of device [ 466.995339] loop6: rw=12288, want=12296, limit=20 [ 467.000839] attempt to access beyond end of device [ 467.005935] loop6: rw=12288, want=8200, limit=20 [ 467.011407] attempt to access beyond end of device [ 467.016542] loop6: rw=12288, want=12296, limit=20 20:07:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x20, 0x7fffffff, 0x8003, 0x7, 0xfffffffffffffffe, 0x80000001, 0x9, 0x100000000, r1}, 0x20) readv(r0, &(0x7f0000000100), 0x1157) 20:07:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = syz_open_dev$dmmidi(&(0x7f0000000880)='/dev/dmmidi#\x00', 0x900000000, 0x10381) recvmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000180)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000640)=[{&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/83, 0x53}, {&(0x7f0000000440)=""/33, 0x21}, {&(0x7f00000004c0)=""/75, 0x4b}, {&(0x7f0000000540)=""/151, 0x97}], 0x7, &(0x7f00000006c0)=""/203, 0xcb, 0x7}, 0x20) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:27 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x8000000000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) write$P9_RREMOVE(r0, &(0x7f0000000000)={0x7, 0x7b, 0x1}, 0x7) 20:07:27 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f00000001c0)) ioctl(r0, 0x8912, &(0x7f0000000040)="0a5cc80700315f85714070") r2 = socket$alg(0x26, 0x5, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x1, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000100)={0x2b, 0x4, 0x0, {0x1, 0x7, 0x3, 0x0, [0x0, 0x0, 0x0]}}, 0x2b) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x20c240, 0x0) ioctl$BLKGETSIZE64(r4, 0x80081272, &(0x7f0000000080)) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x66) 20:07:27 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:27 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', @ifru_names="04707000"}) 20:07:27 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) [ 467.236608] 9pnet: p9_fd_create_unix (24840): problem connecting socket: ./file0: -111 [ 467.249928] attempt to access beyond end of device [ 467.255129] loop6: rw=12288, want=8200, limit=20 20:07:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f0000000000)) 20:07:27 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8916, &(0x7f00000004c0)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) r3 = accept4(r0, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000001c0)=0x80, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)='9p\x00', 0x1000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x8}}, {@uname={'uname'}}, {@noextend='noextend'}, {@aname={'aname', 0x3d, 'noextend'}}, {@cachetag={'cachetag', 0x3d, 'noextend'}}, {@privport='privport'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:27 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)="397006", 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 467.289728] attempt to access beyond end of device [ 467.294842] loop6: rw=12288, want=12296, limit=20 [ 467.338416] attempt to access beyond end of device [ 467.343530] loop6: rw=12288, want=8200, limit=20 20:07:27 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c3000000000000600", @ifru_names="04707000"}) [ 467.388923] attempt to access beyond end of device [ 467.394057] loop6: rw=12288, want=12296, limit=20 20:07:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) 20:07:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) capset(&(0x7f00001b4ff8)={0x19980330}, &(0x7f000077ffe8)) stat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x20280, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)={0x98, @tick=0x5, 0x7ca5, {0x1f, 0xffffffff}, 0x5, 0x0, 0x7}) lchown(&(0x7f0000001540)='./file0\x00', 0x0, r0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x80) setsockopt$inet_buf(r2, 0x0, 0x2d, &(0x7f0000000080)="9c2e66fa37895757aead12e9fcd858004e679b04f7b9dec29c7c694a2a2ab3e07340ccbe032c1dc026bf0e2da98cee22055bbe1e46752bb5ec05b2093b42e278950d3fad8ef90dfb9535a09435de4e30ceff8223fa8ccaf8d9a411934e02036387493be9dd0bc4760819833b37a9f6fcdbf6cdaa3dc1669f396e116fb9fa8b7e98b31918cc421ccac2809c5fbd2029758f8ad9ac901f2ddcff5d8b8aa3766bc44f078260e624f6ea17841cb445fc6d3662eed5c7ad715ecc6bbb71b1d83831a56255fa091b729e44cb866fdd47cbb91977508bc2d0190b0af1f75fb65c5cc1aa8d4384134c2e64", 0xe7) 20:07:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)="39708c", 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) [ 467.465235] attempt to access beyond end of device [ 467.470351] loop6: rw=12288, want=8200, limit=20 [ 467.500244] attempt to access beyond end of device [ 467.505385] loop6: rw=12288, want=12296, limit=20 20:07:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400def803c92a15d37f74f0c8d2b268790bbd0e684f342b03f2867c0cd20a9796399f167e6ef4396b9f1773bf8aa800ac526b0d5e7f39a9743cd29d1c7d68b1f5e0f2b8c6e0aed46e0265bd70d3bef3ab5e5b85d20565fce456822e459f8df72d429aefc7c24a8a42396dd2a89d1ac57567b0e07e6c139bbbf3f78609296a815078340fd373b25ae76eb7030eeca994db9da904dab01497e2e1f60eb94190ce5933042fff5071e72914a312e24635"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RSTATFS(r2, &(0x7f0000000140)={0x43, 0x9, 0x1, {0x3b, 0x200, 0x8, 0xf632, 0x800, 0xf6d6, 0x3, 0x1, 0x20}}, 0x43) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 467.543848] attempt to access beyond end of device [ 467.548927] loop6: rw=12288, want=8200, limit=20 [ 467.582586] attempt to access beyond end of device [ 467.587715] loop6: rw=12288, want=12296, limit=20 20:07:28 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200001, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpu.weight\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') readv(r1, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:28 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)="663266738c", &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:28 executing program 0: r0 = socket$inet6(0xa, 0xfffffffffffffffe, 0xffffffffffffff81) socket$inet6(0xa, 0x5, 0x1ff) setsockopt$inet6_int(r0, 0x29, 0x40040010000004c, &(0x7f0000000000)=0x1, 0x4) 20:07:28 executing program 7: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000180)={0x5, 0x6, 0x7fffffff, 0x60c1, 0x2}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r3, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 20:07:28 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00\x00\x00`\x00', @ifru_names="04707000"}) 20:07:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)="397004", 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:28 executing program 0: socketpair(0x11, 0x1, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '$keyring^mime_typeproc^vmnet1['}, {0x20, 'xppp1+'}, {0x20, 'usermime_type'}, {0x20, '@'}, {0x20, '+-selfvmnet0vboxnet1vboxnet0keyring'}], 0xa, "d2f5044fe07f72e653ac8aece0d4f5d2ea7400e7a097a43aa1fab220756e41b8a40093980372104fc37eb159d3c87db47aeec3c495d5f341edc699e19ace52f423ece54e7b9f074482438bb287241bdd02ed0e"}, 0xb8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000000180), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002c0019010000000000000000030000000c0000000800010055e219f6"], 0x1}, 0x1, 0x0, 0x0, 0x3}, 0x0) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/8, 0x8) faccessat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x400) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x9c}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r3, &(0x7f0000000380)=0x4) 20:07:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0x8900000000000000, 0x1, 0x1, 0x1, 0x16}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x101000000000013) 20:07:28 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='wchan\x00') getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x980a, 0x8, 0x0, 0x1, 0x5, 0x8000, 0x33, 0x1, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r1, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f00000001c0)=0x4) 20:07:28 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs#', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:28 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x80800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000016) dup2(r0, r2) 20:07:28 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="7b1af8ff0000000069a2f8ff00000000bf2000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x10000011, 0x80002, 0x8) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x18}, @local}, @gre={{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}, &(0x7f0000000000)={0x1, 0x1}) 20:07:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='9p\x00', 0x0, &(0x7f0000000480)={'trans=unix,', {[{@msize={'msize'}}]}}) 20:07:28 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xfffffffffffffff8, 0x3ff, 0x7, 0x100, 0x3}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r1, 0x5, 0xb8, "6d7fdf6e194844a23ecf494d7b41f874483d08c0e9fbe476c519a04d1e4c1117b4a6d9a9ca7323564ee971bd1841683d92fd0808a3706e5a0681c8b42a58593f6eb69db32956cac95b70a60cf34876e83def2b94c23e07584afb368d7452ece1f8db31ac7ac1d9ac209917146317bd4c540550fdca999f4a936e8702c85646c03cb03c37b3ba6ac3366784653a4ac63c265b42cb9d22787c55ed40c988dfe854ca9b5638b96f9499afba90a20134470450d0da9c0d43a001"}, 0xc0) readv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/18, 0x12}], 0x1) 20:07:28 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pause() tkill(r2, 0x101000000000013) 20:07:28 executing program 6: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs&', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010400)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 20:07:28 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r0, r2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f00000000c0)={"697036746e6c30000000000000ffffff", @ifru_names="04707000"}) 20:07:28 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0xffffffffffffffff}, 0x7) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000000000000000b5e6bdbed0770cf084fe43b7ef984c3e0000a73d11108f872400"], 0x2a) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), &(0x7f0000000180)=0x4) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="2a000000290100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) lchown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) [ 468.271467] 9pnet: p9_fd_create_unix (24967): problem connecting socket: ./file0: -111 [ 468.367414] BUG: unable to handle kernel paging request at ffffebe000000008 [ 468.374556] PGD 0 P4D 0 [ 468.377266] Oops: 0000 [#1] SMP KASAN [ 468.381120] CPU: 1 PID: 24983 Comm: syz-executor7 Not tainted 4.18.0+ #188 [ 468.388143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.397525] RIP: 0010:kfree+0xa0/0x260 [ 468.401426] Code: 82 cb 01 00 00 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 89 df 48 b8 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 c2 <48> 8b 42 08 a8 01 48 8d 48 ff 48 0f 45 d1 4c 8b 6a 18 49 63 75 74 [ 468.420344] RSP: 0018:ffff88019723f520 EFLAGS: 00010086 [ 468.425722] RAX: ffffea0000000000 RBX: 0000000000000282 RCX: 0000000000000000 [ 468.433003] RDX: ffffebe000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 468.440291] RBP: ffff88019723f540 R08: ffffed003b6246d7 R09: ffffed003b6246d6 [ 468.447574] R10: ffffed003b6246d6 R11: ffff8801db1236b3 R12: 0000000000000282 [ 468.454859] R13: ffffffff868037aa R14: ffff88019723f690 R15: ffff8801872fb140 [ 468.462147] FS: 00007fef50341700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 468.470384] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.476333] CR2: ffffebe000000008 CR3: 00000001d0b34000 CR4: 00000000001426e0 [ 468.483619] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 468.490898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 468.498183] Call Trace: [ 468.500817] p9_client_create+0xfea/0x1770 [ 468.505077] ? p9_client_read+0xc60/0xc60 [ 468.509262] ? find_held_lock+0x36/0x1c0 [ 468.513360] ? __lockdep_init_map+0x105/0x590 [ 468.517879] ? kasan_check_write+0x14/0x20 [ 468.522126] ? __init_rwsem+0x1cc/0x2a0 [ 468.526118] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 468.531155] ? rcu_read_lock_sched_held+0x108/0x120 [ 468.536186] ? __kmalloc_track_caller+0x5f5/0x760 [ 468.541068] ? save_stack+0xa9/0xd0 [ 468.544707] ? save_stack+0x43/0xd0 [ 468.548344] ? kasan_kmalloc+0xc4/0xe0 [ 468.552258] ? kmem_cache_alloc_trace+0x152/0x780 [ 468.557117] ? memcpy+0x45/0x50 [ 468.560421] v9fs_session_init+0x21a/0x1a80 [ 468.564758] ? find_held_lock+0x36/0x1c0 [ 468.568843] ? v9fs_show_options+0x7e0/0x7e0 [ 468.573388] ? kasan_check_read+0x11/0x20 [ 468.577549] ? rcu_is_watching+0x8c/0x150 [ 468.581707] ? rcu_pm_notify+0xc0/0xc0 [ 468.585615] ? v9fs_mount+0x61/0x900 [ 468.589348] ? rcu_read_lock_sched_held+0x108/0x120 [ 468.594382] ? kmem_cache_alloc_trace+0x616/0x780 [ 468.599254] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 468.604816] v9fs_mount+0x7c/0x900 [ 468.608374] mount_fs+0xae/0x328 [ 468.611769] vfs_kern_mount.part.34+0xdc/0x4e0 [ 468.616366] ? may_umount+0xb0/0xb0 [ 468.620009] ? _raw_read_unlock+0x22/0x30 [ 468.624173] ? __get_fs_type+0x97/0xc0 [ 468.628100] do_mount+0x581/0x30e0 [ 468.631653] ? interrupt_entry+0xb1/0xf0 [ 468.635732] ? copy_mount_string+0x40/0x40 [ 468.639993] ? retint_kernel+0x10/0x10 [ 468.644077] ? copy_mount_options+0x213/0x380 [ 468.648588] ? audit_kill_trees+0x450/0x450 [ 468.652929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.658485] ? copy_mount_options+0x285/0x380 [ 468.662995] ksys_mount+0x12d/0x140 [ 468.666640] __x64_sys_mount+0xbe/0x150 [ 468.670628] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 468.675659] do_syscall_64+0x1b9/0x820 [ 468.679560] ? syscall_return_slowpath+0x5e0/0x5e0 [ 468.684503] ? syscall_return_slowpath+0x31d/0x5e0 [ 468.689447] ? __switch_to_asm+0x34/0x70 [ 468.693525] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 468.698908] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.703772] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 468.708977] RIP: 0033:0x457089 [ 468.712184] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 468.731118] RSP: 002b:00007fef50340c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 468.738945] RAX: ffffffffffffffda RBX: 00007fef503416d4 RCX: 0000000000457089 [ 468.746244] RDX: 0000000020000340 RSI: 00000000200000c0 RDI: 0000000000000000 [ 468.753521] RBP: 00000000009300a0 R08: 0000000020000a40 R09: 0000000000000000 [ 468.760796] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 468.768123] R13: 00000000004d2310 R14: 00000000004c7a36 R15: 0000000000000000 [ 468.775416] Modules linked in: [ 468.778621] Dumping ftrace buffer: [ 468.782163] (ftrace buffer empty) [ 468.785899] CR2: ffffebe000000008 [ 468.789442] ---[ end trace 20f4a7e7e7869f59 ]--- [ 468.794236] RIP: 0010:kfree+0xa0/0x260 [ 468.798137] Code: 82 cb 01 00 00 48 ba 00 00 00 80 ff 77 00 00 48 01 c2 48 89 df 48 b8 00 00 00 00 00 ea ff ff 48 c1 ea 0c 48 c1 e2 06 48 01 c2 <48> 8b 42 08 a8 01 48 8d 48 ff 48 0f 45 d1 4c 8b 6a 18 49 63 75 74 [ 468.817067] RSP: 0018:ffff88019723f520 EFLAGS: 00010086 [ 468.822441] RAX: ffffea0000000000 RBX: 0000000000000282 RCX: 0000000000000000 [ 468.829719] RDX: ffffebe000000000 RSI: 0000000000000000 RDI: 0000000000000282 [ 468.836997] RBP: ffff88019723f540 R08: ffffed003b6246d7 R09: ffffed003b6246d6 [ 468.844276] R10: ffffed003b6246d6 R11: ffff8801db1236b3 R12: 0000000000000282 [ 468.851554] R13: ffffffff868037aa R14: ffff88019723f690 R15: ffff8801872fb140 [ 468.858834] FS: 00007fef50341700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 468.867065] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 468.872959] CR2: ffffebe000000008 CR3: 00000001d0b34000 CR4: 00000000001426e0 [ 468.880246] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 468.887595] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 468.894869] Kernel panic - not syncing: Fatal exception [ 468.900658] Dumping ftrace buffer: [ 468.904216] (ftrace buffer empty) [ 468.908056] Kernel Offset: disabled [ 468.911678] Rebooting in 86400 seconds..