0b8b62bcb68df2bc03c830731963896abccd5712975c2a94009dd8bae928677201c1ae73b8bcba6af453", @ANYRESDEC=r6, @ANYBLOB=',nodevmap,version=9p2000.L,cachetag=msdos\x00,euid=', @ANYRESDEC=r7, @ANYBLOB=',smackfsfloor=&},subj_type=msdos\x00,obj_type=syz0\x00,smackfshat=msdos\x00,smackfsfloor=msdos\x00,appraise,euid<', @ANYRESDEC=r10, @ANYBLOB=',\x00'])
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:18 executing program 4:
perf_event_open(0x0, 0x0, 0x20000000000000, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:18 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:18 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaade9724461c2086dd6020920000240600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90c2000090780000080b0000000000000000030300040200760c5d4eef172849ecffb602d3a5707d1c90327e508b14a871aecb3b5b842dc3"], 0x0)

07:56:18 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x0)
r5 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080))

07:56:18 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
recvfrom$inet6(r0, &(0x7f0000000040)=""/106, 0x6a, 0x20, 0x0, 0x0)

07:56:18 executing program 2:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="660f382b1a0f01df0f300f32d9e90f086665676426f7c5000000000f2245deef1e03e5", 0x23}], 0x1, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100), 0xc, 0x0}, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x0, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x1c}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x100, 0x40000004, 0x0, 0x0, 0x0, 0x4cc], 0x10000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, 0x0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)

07:56:18 executing program 1:
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x224341, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)=0xd3, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
set_robust_list(&(0x7f0000000140)={0x0, 0x4, &(0x7f0000000100)}, 0x18)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x8, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
io_setup(0x0, &(0x7f0000000040))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

07:56:18 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r6, 0xc0305602, &(0x7f0000000180)={0x0, 0x0, 0x3016})
r7 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa412d0cf508d89d2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f2, 0x200, 0x70bd29, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x488d0}, 0x40000)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

[  867.424939] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  867.476776] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x4000007c data 0x2a
[  867.514316] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000036 data 0x54
[  867.516731] FAT-fs (loop3): Filesystem has been set read-only
07:56:19 executing program 4:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00')
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:19 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  867.566809] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x4000007a data 0x54
07:56:19 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3)
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$RTC_ALM_READ(r6, 0x80247008, &(0x7f0000000040))

[  867.643526] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x4000007e data 0x54
07:56:19 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

[  867.703142] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x4000004a data 0x54
[  867.774638] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x4000001e data 0x54
[  867.799681] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x4000004c data 0x54
[  867.850922] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000052 data 0x54
[  867.903910] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x4000002f data 0x54
[  867.927053] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  867.943082] kvm [3197]: vcpu0, guest rIP: 0x48 Hyper-V uhandled wrmsr: 0x40000016 data 0x54
[  867.974638] FAT-fs (loop3): Filesystem has been set read-only
07:56:19 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r4, 0x80026101, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x61e30528})

07:56:19 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:19 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000040))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:19 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:19 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x8804}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x2004010, 0xbf8, {}, {0x6, 0xc, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x9}, 0x4d1c, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:19 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0xc2)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000523b9a650516117fbaf5c3dadf4380255854e73c2989c11c41a7c67b221176c80bd8068e9dc086cda9b5fc913bbead539b5c54168e"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {0x0, 0x2710}, {0x2, 0x1, 0x0, 0x5, 0x3, 0x9}, 0x8, 0x2, @offset=0xfffffffe, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  868.410206] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  868.460707] FAT-fs (loop3): Filesystem has been set read-only
07:56:20 executing program 4:
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200))
r0 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(r0, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(0xffffffffffffffff, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080)={0x0, 0x7, 0x9160})
statx(r4, &(0x7f0000000000)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@rand_addr=0x11, @in6=@remote, 0x4e24, 0x1ff, 0x4e22, 0x6, 0x2, 0x20, 0x0, 0x33, r2, r5}, {0xfffffffffffffff9, 0x7f, 0x8001, 0x7fffffff, 0x800000, 0x4ab6, 0x20}, {0x6, 0xc, 0x8, 0x8}, 0x0, 0x6e6bba, 0x1, 0x1, 0x3, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x2, @in=@local, 0x3504, 0x3, 0x3, 0xff, 0x3, 0x0, 0x400}}, 0xe8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x80026101, &(0x7f0000000080))

07:56:20 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:20 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e802550a2f9d46d46ab6e02a1d684e570700"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:20 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xa0080, 0x0)
sendmsg$AUDIT_ADD_RULE(r1, 0xfffffffffffffffd, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000380)="a4c302f712ca95fa9da2327e37601565151ed91d0b1484e7185db183bc39e59d26ef445b51d010b50ae9384f7fa87a37c3cddb9764b27c94309772fde0963df960aa64198e63dfa33214f990bbcc85fcc126f5ffd9051028bee480a5685248449e743af8659ec033b76320086d5d5d714816f1b1e34916edfc2e31f6edf9990e4df0a619d7eaccf17e79d3561a623e20070f516f604011f3fc2a56d4fb68029ad9fd82873d35d1ef07bd3efc140b70b2916d5c48e5bfb97c44f41eaa006b4f6ff216c37a510a71d571564b5e37661668df6d333e607218fe7f85d5cb2b143e1629bf35d6b9860aa6", 0xe8)

07:56:20 executing program 1:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0)
r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90)
fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1})
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)
write$P9_RREADLINK(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffd9000000b5dc29894f121c930007000011e48e0000000000f247b274bd4363ec1f405e5e13000000a0ff", @ANYRES32, @ANYRES16], 0x31)
sendfile(r2, r2, &(0x7f0000000240), 0x7fff)

07:56:20 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
sendmsg$nfc_llcp(r2, &(0x7f0000001480)={&(0x7f0000000000)={0x27, 0x0, 0x1, 0x7, 0x3, 0x0, "be5581ed5de78ccaefb1d868a1e4f7a94b84f124988206781dcf59156d8093e27a25c3b4873bb6d41d2c7b0da0ac68cd7408a634330e8c0819179fb5040b3f", 0x2f}, 0x60, &(0x7f0000001300)=[{&(0x7f0000000180)="5f2673142f9ddff644bc393bec908533b46e04e66e418ea036e4ec846b815eb4e1afdc42f4b14fcf3dd4e47ee8d218b72fbee5c2ab0d1dec40db32cbe907658c9eada22e2fc1ba7a33312fe30653bd4b2227a3e4ebed176139fe433ee72a128aa0b13abf1830a1726439b545f22f23c732939c910e7ae9fe8ff58867a792a375a03e9e70904efa9a66a9bfbec1c5280697bc949d8bf247c1", 0x98}, {&(0x7f00000000c0)="9487253d", 0x4}, {&(0x7f0000000240)="507f5ad145bc83155f618822f77bbfacedd6522bae85fcd25984f563cbeef7a59570ca2acf1edb2984adc3ab305a5074a8bacee5ebfeec324144f975e756759133b3018007f4bcdc7cb49fd96b565f917d2fec3693c7a32232c2fa4c44c53e8b2b92c9c9db1de8cb4139b524e8f65dc9c1145112f6827d19b698eb86a4be0a222bb711bb8bed68a6aa05403818f1d66b5539ee524ea5277e438fbf4139977c9e0e698e208d3f1b1a697315e92e1c28e94af9b18f961514a40ef8a6f6d7ea9a20a6ae2bfdfb611590472e1acd400180e0d13852ea56b63fc91c34364dfb755d255a236eb8c657738b822a2e5fb07e6760c341e741f39a133725153a789bc56dcefa91ce9ef0d381d06aa67344d5ab1e7c15c1400b8b36d8fb5c77ff2d73e90e40f8e5f6306494e5be94311d7059a548ae40202ae4e5721d9b471ded90d23380d7b402a80b98f24abfb446adb5ad453cf6b70ef252107be16b3d338fa83f4caf2c36cb875ee7539dca4df00ad0bb5cfbfce1ad7f27b067e8d77d1aa15609dfa0a94db239e995fdfa9ae80fae580738a08448ee6b99f741c185d22613e0e481bf4b73fb6e2261daad4096e244c34c799895a180d4994bb69b41ba7d19bb828e439bfd7a969185dbd14de0fa892c2a8b589e0615efb99e32450214b3af798222b05d23c6eaa1ba948a244804064e052b3343e805318ba50733a6566b3293eb4e2c098ef303a1bc27cb431b2b68f7c3bdec10b2e57fe6ff29d1c50e51d185ce755d583b2ef2e27eef6f8e414fa623f4a57caad1075fdf2ff3896d253bc3c0e5fae3e71ed06e247e4b1bdc5a09e2159769f0157440f5f0cc4e734e533c6bea5a3ba48d7611e0380e949141ccc6558623fef89d0389f635e4e426f74f4253d6bfb201906dabd84f458c916c8541c6d2b1595448631c9724e881303bdfe28595af7dc9d4374a6f728eb41e3e3a72007e3643123d7a5f3201e904fce002902f89888a04c4286b4aafb73381dd7a6fa201b1e05704b04f8d8d1302f487e6cc812dea34ad845618d17aa607d8f00754ebc86b588d069611183947e212cdb4074540e681ca42ac7626becac1219d196c5560b014387702408299b6d0cbd93bc12240e25ede93bfdde37b4715ba19f4291f12864f552f918d194998beb98cc2779ca29952cad6ce40bf2537a27f0b97539a733f4d5aa728051261bf918341f194817eda0438eaa643dfe5c34e1edef5c680419678b7ba4fb61d6b6fe790eeb8ccf4c970323ff183f9ba5bc9c9a2ba286cb3ad7b076142b0978fbdc16227d88a72d198063231094a0c282f173240e5828c9833dbec7481e22a9c7fee701f5c72ca1a3fcae670490801be1a5587cf4ad10d61eae68487e571a792fb17a00bfff71cc6abe15189a5b6e938228b0e9ddd97952489668bb8f673c2b2c9bc688dab171a35d04a2aa3000104347a14f523a8b0f8ca92b97e176bc3811071746602db1a3227d8eef4b035f199d10874881eabd3c4ee4ccb3afde4a9af9781ad8c17cfcda4a2a13437ac79f57c2fd4dd23e30190c9c6a1cecc95b3dcffcc652c6a48d677c9e786c26b57e89a2ba7cf888ad49e6d5a8c453cc715ead02629de0f95142d2fc74c4fb6f4d0f3e842999c5bdf75d13d5fefe96eeddd10f8e2d9e94f5237c7f6eb2d99a75fee7f131fbc0e09dd3f81e26d886802f647a64940fcf47e8b819422ee77f26f7f7aeb93c263ab1480b1ec23c7503e3dc38473d2ff37a2fe7b7e1e8d25e3209de814f59149f6d887a80c9040bdee7705369aecc24e0e20a3bb4a7cbf1d2bd406305ff040e235407ddba7c71d17996b135c681e6034051d7f11d52539df82531dbd4340d70d31c7a5f6437d4abd34d9b845f960857f26e50b690f057855f2d88179bf53fd7a2a3d88867d1f24b96d0dfac13e428a0eb576b6f0f09708d609ac23990f422902be96264d086242cd2a989bfae25a281dc55ea0546410608f9a6fa31a5bd4c8b3a170f4c9af08574ed9d39e0c236281028b315a156b3848d902883b39c4ac51b808118bce5ece1b905e6ce70106178526807b9f8c1e301663eb636d3ae0eee92825c0439d69775ba22f0e6a273ac9a2b02ed292a46e69b81791c1717cb5076d8c5a006ca036a78b41d25f28fe2bc58c2106b73aae8097031156f4a9363fe5f9ea7e2553e4a1cc09575006c07bb1421adc6223b09d3719913856635183a670201f4e5aa54e5ba7339bca69d7a4a3b4e769084867b0f53b991069162b41ebb04abea1b1f3a846a79b9cde58643a6f3216af43e7a6153194395989b7389dc23f47bf88c96cd999a190d368c32b3b05d2c3397433fd292922946aa5188c4b30d4f3fa2539e6bf0038d54edc65a9a0ff04845f354efd0b987cadfaf00d0b4a8519deb0d669543d17fb020e7bd055d0eca0ab1d1e357cd4a4d698031721d83eeaa0432cf50905742b8b8ba3a8272a8225b0141307345557ca983ea8f2e5033b1a220b3b4d89b10875abc8a800ffae4e8dade94676aa53a3682c92b9da7abe177d3fe4492f0f947a3062048b7a58eaf1dc8825f5dffcb0d579c3ba814abf863a6644047d8776a461895be1e2779426d6f7797057c24cd6246de9cc17bc6751eb9934fede4190f0744136f988886e4cc52eadfe58df456c3e2506c4c671e488c42ab0154befc0c24ddd4facd2c49d14a0bc23744cdd07da41ffd381122685816e7bdce0f401192940a773e0c9435e5e86acb55319df30a3f6c4788dc7275edf69f4fc7eae9dbed57b2abc351a08eace498d102794278c5945d41fd10cbb9f69651216a36ab444828436e7a3c29bb21bba9812bd088a955e6a858c1b25124c428557ee64b584fbfe046022e7187c90f2279e9b25976ca79f1d40be85cb313b3972fade66f1580179b27283bdf125c17bc42f026565c4ce9cb3ab46c6f0eee893cbdfc6b14bb522991a4dd566e98fb5e6c00408f533501a1b12cb427272a3e811dcdd6406cb582fed0ccbf92a9f76e5657db1265605967c3f710c45474f7c31a58baa27987c7e322a0e0a2f5e15cd315f3a06458c776fa05efa676f8802361621ba11dd42c2a7825636e8336e4b7cfd2a24236345e93c68ca1f7c408449df6e9f4936f673f5cad3d9e99e60156b208c984f9b0aabc29543d407106415bfd140889189d4cfb05d9366f3e764f33acfe6da6e37d650179db16eaba7ca5149db28fd4b8f8c0ce24171555fa25adaf78bbced4189db4d9a04820796810d1cd72587db78407c4cfb01c1e4b61843cc019b860c2513a6fc8427d4d51e880b87d512fe006664722f5b6fca43c83f36e96f18196ab97cf3dab97f0b7a64b28c7d58cf92f001e3104342bd022290be94ea737252369e8ac6ab7c75acd255395eb2051934fce3bc966f85152bf66fd410d1c2a867228214d01d77782e08a3d1c4b0a8d4546cc67e0bc314ee1302e8554852ff965dec18338135040f7ea6c41fb54a2ab2cde9c459214187792ddd0b5575c80cb82b33cef7354f523a3711fef062268650a950c2ffb0559b825891b256bc37da5ce5e044b4fd21acb738d565c6687719bf5054564b17ca5130c7f2151f879395a739aeaa01e3a5ec13e46819d72f2202556b25e23e088aeb59d9fd3253b72724c1f4d16988671074875b07b9d6ea4f87a005eb1f3cb610b0c9a9580b052cce22872eb89978227abaf1cd34c8545a5cfbbb5a9fc2a7e1a95eb57d10da869aa4fae9c1b98e9d08a7b0e95c1f634e445f1bafabc4317df0b8037eee5e45d9f74fd8c795f92be622fb3454b1dea1b69a01c0aa3b330149c61bd29a1249557838ae405dbb1570ce743e132f0a26cd2ac8baf6e7a739ca7d3a4c8d33fd8b72bd4954c010184b9aebaf26d803b99ee9519dc4453e5eb7def68fb1cd8564451b2d4e77f4b8b0e356088c28c53be153f822debe6df17e9ff222f7c0c92f0e6fbe9834b4f316ea7477b9910107bafae76e56a4d173034782e4a074d870bfecce067aed9a428eedbac0eceaca1f2f2de00d966977f86549855a3e58176e07ee4eee1dc9241e6e7b7423f58ccdae613755ffd65775a94b857948258505bc2b462cd6232f51e8b7a99b299ef57cade0bc1491e8a271c981c539fa0be904a971ce1238a71b46fba2bbd1d8d77975dfd8540ce75060cc62d6c7fb5d9e157e6bfe97791dd7a00a19d915f4aff5237f9bde1476fce2f6917dd34ebcf98011b6fb16529ae562153b2d481e46c39129b6c13a0652c4d0704e6ef50cfb08305a343b03fa2973fa22606cac61e0cbaf13062afc8d0817e0def74c4824766261cba017d83dc9a84174de55cade96d37357fbd048d6d28e73e35f67c1ffaece99fb187a3597063de31eb1899e3715791aefc612a7d0ebbf69a173eaecdfb0b97142854d78c1e037c9ce44d3de458e3a586005cfa7dd53145795e2e46fc2d1bf3bc0ddfe76544d75876aec1de2f92f7a2bca7118a1936004054631a753dd8bd93128e0d586ddef67490fc733be532fc2611c5e8c047988e823f6a3e6018eda0d8ee82a3e89316012131f8353908f60748018cf6f393260cd77349cc57378d89b919e813419eeeffc9686f17a3f8ddd5a0128c1a05736b5e92ac131ebd80d50c4b34a2d34b0984c2cbb20491504ee38e12a2c8f88ede29bdf0dfbe20ba8e0632a92cbe6a13c45e3814f8e1e55085e9544d69fded021ff0bf471fc6bc6fd04a9140dbfe52fcdd34890d8c8a46f7f0c9a997dbfd31c33d48157daa863efe755160c09cbbc4b77edeb190de0952c9ad036b8459a07c12ecbb90216883b35517e37b031192934de169bec490b88f9cfe33a8b503cc898f95dc2a31958ddef6465ded0ef043a3005709adaf1a089c0950d9e78c4fb470f0266eb86d1c0082c7d43ad6d1a798b657a5267a6b14814116175b1cf9a5c978c76df30366989c8ced90ad885fa85d5fbb6660984fcc91c546f0fa176900d4b62f12d80d89f085072407887e94305d1336e696e5c0570bdd4a6a9e5273e292a0589bc809d8d888220dd004cd6f7a9978d2067ff73801715bb209c90584d1166c4b6b341c578e10cf1a4c55715568d9bf522bce46d09ad29b3e544c73a3dc4811f36209819012737997c7b14cbf4b2fbd7165d477c7a3b141050c821c61f10f6b9d97f05ccf7052dde5110329783e6b2e0fff873fa77f4de0614e851ab072ce9710bb1a50fcfa97249f97db2d38669b7fd30009aa6c2cbe27c277adff8bfb617e201f02f037b658b75a045c610ba4949bfd1e39db5541594e7720b7d06cd20493243ce67bf3b942c83d43335ed90785b0de0c355b8a155a6aac8098503506b9e768e176a0fca2e706f31fae9d39e71e2d240e195c9e8673b0ec66f3be905a192d6acf7529153a856be6281b774106867b336e9ce93bc11dc13af3d75ccefc618d0c0813477a81cdd8934f93821f7cf467fb2a5afd74c695b4b7e811f593e172df22bd7a50e2f3b9801c135087b846af831b8824d54394a3c3c88b55d3ff8843be8b9b23c55785c46bcf1b3f2b39105b133febd00555a165a363ce655093762b6d3e00aece5f7e2bbdc0bbdfd5f6bec5cb74553417dd87318f256931730935a85ebd1b158754e25bac9d23d86e8c47c028ed0ec093de411922645d6fe0baac20b778a8ae5b33e904be665aabbaf1ff7552749dfbab0cbc38dfb670ebe86295810556aa3676f107f440b10a6d974078a9ca3e629f15caf53ef057ccf72adcfe681e5392b67668af194b85173dd566291070c29149d04da68bab834145152d1a7f4de936720381c84dfb51d87c36f52c5", 0x1000}, {&(0x7f0000000100)="ca053141c4704d99d66fc92f433138ad337e4fe09cdc9cc4066b635f0f4b9c5c9a34ab7fec0f3faba75d46a4ae7082ee381fdadcbc6b1a", 0x37}, {&(0x7f0000001240)="54e890115c4fb926bc6d8d186759810c3fc5f7ca67e63f8378366708fefb93fbab96d358d88fc478f5922096a020d2f73a23ec0c92d8dd6d43a4100d956e6b5f0ce28e329c48192ed2b063360b92f303a6f8bb36db0ed5b8004211efe336786e82f25ca30a6ffe855ca81c965fceb756c3db096960d9eeee8a593e0d86791ae245efe05540550549293af3fb", 0x8c}], 0x5, &(0x7f0000001380)={0xd8, 0x6, 0x20, "3ac88f4b43df2df718a552c8d7e0bb7b1ed806c4cf7aaa76acc34bda90d4d89806ec8eeb6901e1ca2cb4d5a1e91fc18dc32fa8bea38b13dbf03b50e6a1d9d060b133a24782a90d3a1215711942fc66b61baaa20c00ef7004f1e6f893ae2c8853d6ab72c0631b6daf0c62a66bbdcbdbebb8d01a58b2a17c1b0161d2dd8431ced94b164c6091a3040e0b777d0d9617cfe292b386801aec3ac3c3c583b035d3a7312b2157d5294e7ca51c1ec4152531a78ee14c964acbaa57901e77eb4f856ea62ef620"}, 0xd8, 0x4010}, 0x881)

07:56:20 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYBLOB="000000000000000000006709c059003928b4f1dde31294b819d853783da28875f6ccb348a27c79787c81312420681f022ba23ab6905f171c71f4b359e91c6443a07dc410637d326cbce11b4b07c1e8f4e27002fc4f68ca070000d8f386907a33f69d90b72d0aa2d6e6e6dbb0a24de39d13fc904e80b7a61a5eb98d35660bacb9ba9b2fe05826bb4472bd8bcc53aec6"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r1=>0xffffffffffffffff})
accept$ax25(r1, 0x0, &(0x7f00000000c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000180)={{0x1, 0x0, @reserved="07285313759a241e6fe2ed272b86468023f377b153ca46501c006b809eb62bb8"}})
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f00000001c0)='s', 0xffcf)

07:56:20 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  868.931252] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  868.996763] FAT-fs (loop3): Filesystem has been set read-only
07:56:20 executing program 1:
syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x34e1, 0x0)
mlockall(0x1)
syz_open_procfs(0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x8}}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
getsockopt$inet6_buf(r4, 0x29, 0x2b, &(0x7f0000000880)=""/4096, &(0x7f0000000100)=0x1000)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0)
pipe(&(0x7f00000000c0))
sysinfo(&(0x7f00000007c0)=""/154)

07:56:20 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
r3 = accept4(0xffffffffffffffff, &(0x7f0000003c80)=@rc={0x1f, @fixed}, &(0x7f0000003d00)=0x80, 0x800)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000003d40), &(0x7f0000003d80)=0x4)
tkill(r2, 0xe)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
r4 = syz_open_procfs(r2, &(0x7f0000000000)='ns\x00')
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0x59558c4256f8f4b7, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRESOCT], 0x1}, 0x1, 0x0, 0x0, 0x8010}, 0x15)
r8 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x80026101, &(0x7f0000000080))

07:56:21 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000200e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:21 executing program 3:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000080))
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0xa, &(0x7f0000000040)=[{0x100, 0x5}, {0x2, 0x5}, {0x5, 0x7}, {0x6, 0x7ff}, {0x9, 0x3}, {0xf000, 0x400}, {0x1000, 0x3}, {0xf432, 0x6}, {0x9, 0x1}, {0x80, 0x66c}]})
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODESET_CTL(r8, 0x40086408, &(0x7f00000001c0)={0x6, 0x8})
mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:21 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:21 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x9, 0x3f, 0xf6, 0xa2, 0x1, 0xfe, 0xfe, 0x20, 0x3, 0xf2, 0x1f, 0x0, 0x7, 0x4c}, 0xe)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
prctl$PR_CAPBSET_READ(0x17, 0x22)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080))
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000))

07:56:21 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd04000000df25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:21 executing program 4:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
perf_event_open(0x0, 0x0, 0x0, r0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x80026101, &(0x7f0000000080))

07:56:21 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
getpeername$packet(r7, &(0x7f0000000000)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@dev, @mcast1, @dev={0xfe, 0x80, [], 0x2a}, 0x1, 0x2, 0x0, 0x500, 0x0, 0x380, r8})
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc, r8})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffffb}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x36e6}]}, 0x34}}, 0x8044000)
sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020729bd7000fbdbdf250c0000000a000600aaaaaaaaaa180000050008000200000004000b00100050800400050008000700010000000800090005ac0f0010005080080007000100000004000500400050801100010011e668455fc9ff4a57f20336a300000008000700000000000800030005ac0f000d000400dacf86cfd9f63a7e380000000800030001ac0f00"], 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x24000850)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:21 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  869.938723] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  870.030888] FAT-fs (loop3): Filesystem has been set read-only
07:56:21 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:21 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

[  870.513872] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  870.542972] FAT-fs (loop3): Filesystem has been set read-only
07:56:22 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$int_out(r1, 0x4, &(0x7f0000000040))
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:22 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket(0xa, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x44, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xcdc}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81d4}, 0x4008000)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r5)
setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x7ff, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x6c, 0x0, r5}, {0xfffffffffffffc00, 0xd641, 0x545, 0xffffffff, 0x800, 0x9, 0x400, 0xffffffffffffffff}, {0xfff, 0xffffffffffffffff, 0x7}, 0x4, 0x6e6bb1, 0x6b601848a598cc0e, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x0, 0x2, 0x2a, 0x4, 0x9, 0x9}}, 0xe8)
ioctl$SIOCAX25GETUID(r2, 0x89e0, &(0x7f0000000100)={0x3, @null, r5})
r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc0205647, &(0x7f00000000c0)={0x9f0000, 0x5, 0x6, r6, 0x0, &(0x7f0000000040)={0x980919, 0xa6, [], @ptr=0x6}})
r9 = syz_open_dev$cec(0x0, 0x3, 0x2)
r10 = dup3(r9, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r10, 0x80026101, &(0x7f0000000080))

07:56:22 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000340))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="10202807d69bfff5df25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x9, @empty, 0x2, 0x3}, 0x20)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f00000001c0)='s', 0xffcf)

07:56:22 executing program 1:
syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x34e1, 0x0)
mlockall(0x1)
syz_open_procfs(0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = gettid()
process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x8}}, 0x20)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
getsockopt$inet6_buf(r4, 0x29, 0x2b, &(0x7f0000000880)=""/4096, &(0x7f0000000100)=0x1000)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0)
pipe(&(0x7f00000000c0))
sysinfo(&(0x7f00000007c0)=""/154)

07:56:22 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x116080, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRESOCT, @ANYBLOB="100029bd70007ffa9ac521010184c86b0507908942000600e8020000e494fc3b7521379ebf5bac07b4dd10e66f49a1209e3d4a5a3b094a2527b5c97a86368438bc832e7b9479f00b72c39d315e0fab40e9e2", @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x2}, 0x404e094)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x400004e21, 0x0, @rand_addr="678bdf8654065737dde52c1806be2bf8"}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:22 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:22 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000001940)=0x1, 0x4)
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080))
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r6=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/234, 0xea}, {&(0x7f00000000c0)=""/101, 0x65}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/222, 0xde}, {&(0x7f00000003c0)=""/65, 0x41}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/222, 0xde}, {&(0x7f0000001540)=""/163, 0xa3}, {&(0x7f0000001600)=""/185, 0xb9}], 0x9, &(0x7f0000001780)=""/215, 0xd7}, 0x12)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f00000018c0), &(0x7f0000001900)=0x4)

[  871.080126] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  871.140206] FAT-fs (loop3): Filesystem has been set read-only
07:56:22 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd70ff00"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:22 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000040)=0x1e)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:22 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x3, &(0x7f0000001380)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401080200027400f8", 0x16}, {&(0x7f00000002c0)="2c5a421fd8b0c4ddd8542b7d6cdd9ddf2f9c3282e3e43cd9ea722d052ad17156ba0039644c25ec2de2a713ec0dd2a2bd9b12157f829c03a7afe5f984f3d64299b9e1dcf12e94aa", 0x47, 0x9}, {&(0x7f0000001400)="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", 0x100e, 0x1}], 0x3000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0))
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

[  871.439717] FAT-fs (loop3): invalid media value (0x48)
07:56:23 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
r3 = socket$inet(0x2, 0x5, 0x1f)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
sendmsg$sock(r3, &(0x7f0000000200)={&(0x7f00000000c0)=@in={0x2, 0x4e23, @empty}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="5a331b9e149c6f667324644a476dff7c064e4a828093cc6af52d6f447ac3a9f43cedb430aa5a1593a49e5f72a5fb64f5c517559ddf7ce4c8e157f2335a6e04d82f9ba112584622ef7fe783d33acbebe2a92055be8978b7bfe7d51e188be4a5ec3b1994c877", 0x65}], 0x1}, 0x0)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r5, r4, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000000)={0x8001008, 0xdcaa, 0x2})

[  871.484013] FAT-fs (loop3): Can't find a valid FAT filesystem
07:56:23 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  871.571068] FAT-fs (loop3): invalid media value (0x48)
[  871.586490] FAT-fs (loop3): Can't find a valid FAT filesystem
07:56:23 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd9efc000600e80200"/23], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:23 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080))
r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x14}, 0x6, 0x2, 0x1, 0x4, 0x2, 0x2}, 0x20)
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r4, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:23 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x80100, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000", @ANYRESOCT=r1, @ANYRESHEX], 0x4}, 0x1, 0x0, 0x0, 0x2}, 0x180)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @remote, 0x80000001}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000380)={0x0, 0x7000000}, &(0x7f00000003c0)=0x8)

[  871.979977] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  872.028898] FAT-fs (loop3): Filesystem has been set read-only
07:56:23 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:23 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x4, 0x0)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000040)=0x1)
r3 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0xf, r3, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x80026101, &(0x7f0000000080))

07:56:23 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
truncate(&(0x7f0000000040)='./file0\x00', 0x8001)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:23 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180)={0x7}, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:23 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf2521010100060000000000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:24 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:24 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:24 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000180))
r2 = dup3(r1, r0, 0x0)
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r8, r7, 0x0)
r9 = fcntl$dupfd(0xffffffffffffffff, 0x406, r8)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x50, 0x1407, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4000840)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

[  872.604247] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  872.643428] FAT-fs (loop3): Filesystem has been set read-only
07:56:24 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd0700ffd3df252e2828ddd4795867db91bded77210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220001, 0x8, 0x4, 0x1000000, 0x7ff, {}, {0x6, 0x0, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @offset=0x53, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0xffff7fff, 0x4)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:24 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:24 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x80800)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000810, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@local, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8)
r9 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:24 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
pipe2(&(0x7f0000000040), 0x4400)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$TIOCMBIC(r3, 0x5417, &(0x7f0000000000)=0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080))

07:56:24 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r3, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)

[  872.985784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  873.015993] FAT-fs (loop3): Filesystem has been set read-only
07:56:24 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:24 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
r2 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r3=>r0})
accept$ax25(r3, 0x0, &(0x7f00000000c0))
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @loopback, 0x6}, 0x1c)
write(r4, &(0x7f00000001c0)='s', 0xffcf)

07:56:24 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000340)=0xc)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:24 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e666174000204010000f8", 0x12}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$RTC_UIE_OFF(r0, 0x7004)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r4, r3, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000200)={0x2, 0x0, [0x8, 0x0, 0x7, 0x1, 0x101, 0x3, 0x3e, 0x10000]})
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x1, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
mkdirat$cgroup(r7, &(0x7f00000002c0)='syz0\x00', 0x1ff)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000380)={&(0x7f0000000300)=[<r8=>0x0, 0x0, 0x0], 0x3})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x49, &(0x7f0000000140)})

07:56:24 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r4)

[  873.500352] FAT-fs (loop3): bogus number of FAT structure
[  873.548672] FAT-fs (loop3): Can't find a valid FAT filesystem
07:56:25 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:25 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
readahead(r2, 0x0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:25 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdadf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:25 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0))

[  873.608878] FAT-fs (loop3): bogus number of FAT structure
[  873.614789] FAT-fs (loop3): Can't find a valid FAT filesystem
07:56:25 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:25 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
shutdown(r5, 0x1)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
write$P9_RSYMLINK(r2, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x816914d9cc368733, 0x0, 0x8}}, 0x14)
r7 = dup3(r6, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
r8 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x200)
setsockopt$PNPIPE_INITSTATE(r8, 0x113, 0x4, &(0x7f0000000040), 0x4)
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$TIOCCONS(r7, 0x541d)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0x0, 0xa})
ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000240)={0x76, "e635fb4fb92bbed4bd31735b52b6ebfbc70091f25564a737ad33d359f4902d48b1e5fba387b07c653f6b3fcbfa0155ad28ccbcf9984ffe668c8a79aa9f8792fa1ca4b2ab3bee8642e90eb2173da107bdef704846adb49e3d2336f1ae7a302f60db8d8534f9056b69848c9f55dcbcb6ed0216820ee2e9f33e7afe64ed0105bc55"})

07:56:25 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))

[  873.886273] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  873.928700] FAT-fs (loop3): Filesystem has been set read-only
07:56:25 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000080)='./file0\x00', 0x0)

07:56:25 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x2, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
r4 = dup3(r2, r0, 0x80000)
ioctl$IOC_PR_PREEMPT(r4, 0x80026101, &(0x7f0000000080))
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000000)={0x9, 0x4, 0x4, 0x84416101, 0x91, {0x0, 0x2710}, {0x1, 0x0, 0x0, 0x14, 0x6, 0x5, "0f5b5647"}, 0xd8, 0x2, @offset=0x9, 0x3ff, 0x0, r6})

07:56:26 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))

07:56:26 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$SOUND_PCM_READ_RATE(r4, 0x80045002, &(0x7f0000000140))
ftruncate(r0, 0x2)
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r1, 0x0, r5)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:26 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @rand_addr=0x1}}, 0x0, 0x0, 0x14, 0x0, "efa1c29c39e961b6b53756a454594186cb41148cecbcfabac0709f89c1ba7f7f43ad6857046f54ef86a4dae1e9b1f4621a91e4f0b7371b5ef2032dac92b54947fae988a5f05ee3ff78e008c842b2f052"}, 0xd8)
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r8, 0x80026101, &(0x7f0000000080)={0x0, 0x7e2, 0x0, 0x1})

07:56:26 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029e847df727cd7ccd0530000000000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0xc, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:26 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:26 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa7b0}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4008004)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:26 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:56:26 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x199280, 0x0)
r5 = dup3(r4, 0xffffffffffffffff, 0x0)
r6 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x800)
write$selinux_attr(r6, &(0x7f0000000180)='system_u:object_r:gpg_helper_exec_t:s0\x00', 0x27)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}]}, 0x38}}, 0x0)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000200)={0xfffffffffffff3b8, 0xfffffffffffffffe, 0x2, 0x2})
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x5})
accept4$rose(r5, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@remote, @remote, @rose, @default]}, &(0x7f0000000040)=0x40, 0x1000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f00000001c0))
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

[  874.751258] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  874.808383] FAT-fs (loop3): Filesystem has been set read-only
07:56:26 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x40})

07:56:26 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:26 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x32)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r8, r7, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r7, 0x400c6615, &(0x7f0000000080)={0x0, @aes128})
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:26 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1610a2, 0x0)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x2000, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000100)=0x7)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20)
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x7, 0x2, 0x200, 0x800, 0x6, {r5, @in6={{0xa, 0x4e21, 0x8, @mcast2, 0x9}}, 0x3134, 0x4, 0x4, 0x1e54, 0x6}}, &(0x7f0000000040)=0xb0)
r7 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x80026101, &(0x7f0000000080))

07:56:26 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x40})

07:56:26 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0xe)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r6, 0x0, 0x0)
fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x1, 0x6, 0x6497, r6})
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:26 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x40})

07:56:26 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000180)='./file0\x00'}, 0x10)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:27 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:27 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x3fff8000})
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0xfd)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="b545000000000000000010"], 0x3}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000f0", @ANYRES16=r4, @ANYBLOB="02002dbd7000fcdbdf250e0000002c0001800a0006006c626c637200000006000200210000000c000700060000000200000008000500000000003400018008000b007369700008000b0073697000060004004e220000060004004e240000060004004e2200000800050000000000"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x1)
sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9fe}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe887}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x4)

07:56:27 executing program 3:
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r5, r4, 0x0)
r6 = dup2(r5, 0xffffffffffffffff)
getsockopt$ax25_int(r6, 0x101, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:27 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:27 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000180)=0x7f)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:27 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYBLOB="250029bd70ffe802000000b30e2c93c2a19b31ad93f0c0685a3bb7720281c02aabd0601dcf5f84afa36f989b8154c0e41f527a49097bc05743d4d4df12c50978b020fc98594203c626a4d3d76142b1e5b1c20202bed7c4ecd4a818abb99fb02d11a310e3ee23dee0853751130902fce856f78659876a8d1b16a6e2ff8ee8e1655d075d008c3cecf66a5f2842a77651a6292f5aa2e520039aaf2bff72973ba76a3feed2b99aa60c2f6e268425a81ba5defd6ff6c07699e43fb5f875c22f8300481d6f9b798d5e2d6e6c0b16a1bc115674b7f8e968eb113e749e112d678fd57895707cf84dfb091afd018565e340452a229090c7064c491591e185d04989fbcf9a23f169a3881f8210e146e794f56be6b5425ce2976dcc2e4553841f2a60984ad180671c92e5466e393bcc06668b533bfeeb421fa77054"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:27 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:27 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x601, 0x0)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040))
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x80026101, &(0x7f0000000080))

07:56:27 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@dev, @mcast1, @dev={0xfe, 0x80, [], 0x2a}, 0x1, 0x2, 0x0, 0x500, 0x0, 0x380, r6})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000140)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc, r6})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffffb}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x36e6}]}, 0x34}}, 0x8044000)
r7 = socket(0x200000000000011, 0x5, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(r7, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x20008000, &(0x7f0000000280)={0x11, 0x1, r9, 0x1, 0x2, 0x6, @remote}, 0x14)
sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000029bd7000fca7a725161c000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x80)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:27 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:27 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xa2)
ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000040)=0xfd0)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x80026101, &(0x7f0000000080))

07:56:27 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:27 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

[  876.191187] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  876.256858] FAT-fs (loop3): Filesystem has been set read-only
07:56:27 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x446001, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r4, r3, 0x0)
dup(r4)

07:56:27 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:27 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdb0000000000000000000000007c68ae05caeaf65588c506f2b73fa9210069911fad9ab59cc3cbc3209266f9a6a4ee2793d0bc2c7a341e2fe415c131f45850bddc1c7c1c87ce45367173dd83085d331cc77b8352b382eb1b9349d781f5b83070b5d7861b602b825748de0b6c114f5a76c8f066d5506913aa541517a8cb068e2e40426cd0be0fab0c15092cdcf83d3a050aaab8d3dce081d94317aa471406934eb529ae647cf86e13c6d85c28be66e54425"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0x3, {}, {0x1, 0xc, 0x0, 0x5, 0x3, 0x9, "c3aa2ee0"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:28 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYRESDEC], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x3, 0x4, 0x40000000, 0xbf8, {0x0, 0x2710}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000380)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r4 = accept4$inet6(r2, &(0x7f0000000040), &(0x7f0000000340)=0x1c, 0x80800)
bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:28 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)={@remote, @empty, 0x0, 0x1, [@rand_addr=0x4]}, 0x14)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r8, r7, 0x0)
poll(&(0x7f00000001c0)=[{r2, 0x8200}, {r4, 0x10}, {r1, 0x203}], 0x2000000000000048, 0x9)
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r4, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:28 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r2, r1, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
write$FUSE_INIT(r5, &(0x7f00000000c0)={0x50, 0x0, 0x5, {0x7, 0x1f, 0x9, 0xc02, 0x7, 0xfff7, 0x4, 0x101}}, 0x50)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000040)={0x4, 0x81, 0xfffffff9, 0x49c, 0x98})
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x80026101, &(0x7f0000000080))

07:56:28 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:28 executing program 1:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

[  877.095372] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
07:56:28 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:28 executing program 4:
r0 = dup(0xffffffffffffffff)
getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@dev, @mcast1, @dev={0xfe, 0x80, [], 0x2a}, 0x1, 0x2, 0x0, 0x500, 0x0, 0x380, r1})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r1}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0xfffffffb}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x36e6}]}, 0x34}}, 0x8044000)
sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x1040, 0x0, 0xc0b1da71676b89ef, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_IE={0x73f, 0x2a, "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"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x91}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_FTM_RESPONDER={0x16c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x92, 0x3, "05e3f99763b48c7eb0c311a4b82e4e9203cc88ac99eac9fe84eb6bd05737a4f6ce3f3ef2ae3ace2070f6f4fb5096874221a870721abe082f852c1d57ce596346056443856d4c82ab03367a5aee9f181f49c1d9e763330eb0a67d6b158a1940fce7996c8ffee1e9db110606eada3dc7106568f94994e49cbc8a4861c1b1bdeccfc568c46a6e4feeb7dd6d82fcc538"}, @NL80211_FTM_RESP_ATTR_LCI={0x3c, 0x2, "a876f27866520e6a5e8cbfa7a751b5d63be284a9a71a3520a71310181b0df349b9afb3ba728f295183a21ff243e86b4104783bd5fa23d9c6"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5, 0x3, '|'}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x29, 0x3, "7130159d930beff13340a3d36b28ddf0b3e496cdb4597b7df86a15d8577454cb02e0e91a45"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5d, 0x3, "1b72adef8fba80d7c67e781229bd3e061cd1821ffabb5e34d8ae7b6081ae4c93c53216c165a07e2830ba1cc0309fc9fdabf0444b390458f33492405dd4199411ed3a8fe1da70b3b1599d9d94c474fa2e7630dee30607a659ab"}]}, @NL80211_ATTR_PROBE_RESP={0x75c, 0x91, "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"}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_PBSS={0x4}]}, 0x1040}, 0x1, 0x0, 0x0, 0x20008004}, 0x80)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
ioctl$FICLONE(r4, 0x40049409, r6)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x80026101, &(0x7f0000000080))

[  877.141104] FAT-fs (loop3): Filesystem has been set read-only
07:56:28 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
write$UHID_CREATE(r2, &(0x7f0000001380)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000380)=""/4096, 0x1000, 0x9, 0x1, 0x400, 0x0, 0x6}}, 0x120)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe8ff, 0x1, &(0x7f0000000180)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2080810, 0x0)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x402000, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f00000001c0))
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000001500)={0x9f0000, 0x3ff, 0x6, <r5=>0xffffffffffffffff, 0x0, &(0x7f00000014c0)={0x9909da, 0x9, [], @p_u16=&(0x7f0000000300)=0x6}})
dup2(r2, r5)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000000)=0x2c0c8eae, 0x4)
r8 = fcntl$dupfd(r6, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:28 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:56:28 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080))

07:56:28 executing program 1:
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:56:29 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000280)='SMC_PNETID\x00')
sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_team\x00'}]}, 0x40}}, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1040}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x48, r8, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x4)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:29 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:29 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf2519000000000000100000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:29 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x2)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:29 executing program 1:
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:56:29 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
sendmsg$kcm(r6, &(0x7f00000002c0)={&(0x7f0000000040)=@llc={0x1a, 0x104, 0x3f, 0x8, 0x8f, 0x0, @multicast}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000380)="f1e59ed0da4f79b9441b0a1242d3ec56af589a6e3033c42e8baf4523851130c0d2bf308b28363227b593a2a9d6ea80720b5905d963afe848317ebc7cea3ca5662766fcef28fddd4b0a2648ece1830293f7e7464f13a420c96dee30d3a9c12cc436842d2696fccc60a2d6cb8bc0f3f05eb0c5098a58943c32d1e4e2a13118c0c970102d163d92aa4da081893adf7b44a302777c831aed5049df50f23b26230e", 0x9f}, {&(0x7f0000000440)="fbf2232513459d656afd0b03cf0137ca336cb6eba7606e55e4b275b9dbe138f9b144dd744d4b1fc10b052817d8e6fe61ba5f25ab7a6a562cad7152df024c05d92962c50909bf465da17e0256e68611fde558e5f12d54dcbef32625558b62672394184820a5d2ebb655e0a76c909754f0d931ec468926da49ad747a2a36a069b567fb26181dc2db320753236c184d50e0d6f4cc354d6b2e57eae7266aeed9870f6559bf8e7e9f7acc0e0bf91283aa8a881bed723ed3218e14656393f8088e82a2e925b54a09b02b63bd2ad71d44f0a0a7c3db0884e5bdb297d9d61ab244c574dc0324846d736081e83bfff9dcd15a8e15e1bb08e1e759be", 0xf7}, {&(0x7f0000000140)="c2b35d53e4c55ed31b78a3", 0xb}, {&(0x7f0000000540)="0af959d8a3d2cf98d1bcd0b23109fcc0b672d5ba218451098a449eec09ebecaf3533ab308f7f2f392fe414253e8830bbe7827b40cf93b7f685ac7860b7f5edb2cd25082602749c08e0f5957b20d5c2f6e3d18bccce91eb66856eca25d440f4e0ffc59559209b76e0e7167c3c2c6ee9b552e8367caaea8c840eedfe1e64e3adb793a96d08aa88799aac6cb1efb1e7dcee5905fe5b645bdaff", 0x98}, {&(0x7f0000000600)="4030523779fa60f50ce348e7f688ddadc5704d8d2f41b47b27b1748f2958f63decf7183c9926a8377f4eb7e71d101a59797994607087433c08de17afd032eb123bab9b515441afc19a254f1e7ab666d46cb6a4de3e65263b9f43f8c18b0409b9e62df280069abf8ec447543a2a1571783c4211fffb6cb3bb869dd956fdbe68b99c13d3dfc84c7665c519d14a5a93e3d8db1fdbcfce51664b6cfaff8f5d506c76bf73df0aba", 0xa5}], 0x5, &(0x7f00000006c0)=[{0xc0, 0x84, 0x5, "9645dfedf44917fdbc6b97fb031ba9c0bd3b2df3efd45bce065b1ed23c5a72854296d892757f713b59942725c58aca884b30f5bb7b000e63a84c47e434997989bb105b29e6887054af61a2fd7176baaef7457e6c5c5ce4e27558c05807add3950c102a9f20b5806e4b6b7b0ed0fd53985b03e310e9200cbf0664685a453cc613d162ea0ea1d26d20b76d4e183632763b54c767c3aab054552ef885c5ff215fa6d9f23c3b6819b074ad"}, {0x70, 0x6, 0x7f, "39be49ce80dc7977478d07bc06e56a2db79653c9f72350cabc81ed6d74bc2544d1ff763d801ad9c7ec9e5ac66bb99e6629a98b8eae4d7f17514b3ba0c30bcd4a431cc789157018594e5e19318ce8c6b97a5b14c998690795183dd9732f4fd9"}, {0x30, 0x108, 0x49, "0fe6627129645e71f2cb0b3ea50ef06a93c40c3aeac953b907187737bccfa11a"}, {0x20, 0x113, 0x4b6, "8ae4f1b8429793ed979071ee"}, {0x100, 0x108, 0xb2, "3579d61ce52c53928b0d2ac2811056cb4665cbf64c8b73565963a1aac089f6937ba97cf6995219bbca26e35e1842206dc10614b02f2e19416a3f52b1de53ed9c3174fdf85ba3e762813b659f9a60b2a1c586eb32d8f7d8d2b7633ea544552c8da1ac054e3ae7073da94435164dddfb00624cb016260db306eb039739ac1aac685f014ff9aa0964b4538408f01adf293209e986148815197ad23f7b50993826a8547ec2b04ef3addb7fd25b4ed86e9b0394cd6ac540cb13a50d68ca209385cb68048fc3c72a7aa2c93b4c483f2e40433256aaa00e80c7e33082f95ea85e73fee076f8a0a1ac4d18718d253ee6b4565cd2"}, {0x68, 0x1, 0x800, "cb9ee1172454f830d1ecae1b8a95b1c4a96180856fa7b430b10d52181d559576f276ccd1cc54c87443946fa8efd3ed5dbb1cb2dc1bebfd2b583c508b3285d5daa396af7dc9a6e88909f08621ee3ed45fc208f30e52"}], 0x2e8}, 0x20040800)

[  877.954591] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  878.007607] FAT-fs (loop3): Filesystem has been set read-only
07:56:29 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000), 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:29 executing program 1:
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:56:29 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000000)={0x9, [0x4, 0xfffd, 0x44, 0xf8c1, 0x2, 0x6, 0x5, 0x4, 0x1, 0xfff, 0x8001, 0x6, 0x4, 0xfffd, 0x8, 0x40, 0x4, 0x6ee, 0x1, 0xb79, 0x0, 0x8000, 0x7, 0x9, 0xca62, 0x401, 0xabc9, 0x2859, 0x3, 0x0, 0x400, 0x8, 0x0, 0x20, 0x8001, 0x5, 0x5, 0x0, 0x1ff, 0x4, 0x6, 0x8001, 0x5, 0x6, 0x1f, 0x7a24, 0xfe00, 0x2], 0x1})
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:29 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x5})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @userptr=0x7, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:29 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x40001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='-em0-mime_type\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f00000001c0)=@v1={0x1000000, [{0xee, 0x5}]}, 0xc, 0x7)
r4 = fcntl$dupfd(r2, 0x406, r3)
socket$bt_cmtp(0x1f, 0x3, 0x5)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:29 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0x0, 0x0, 0x3fe})

[  878.251723] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  878.296551] FAT-fs (loop3): Filesystem has been set read-only
07:56:29 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:30 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:30 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
write$binfmt_aout(r1, &(0x7f0000000380)={{0x10b, 0x99, 0x3, 0x2ac, 0x219, 0x9, 0x1b8, 0x1}, "693dc6899655d1f949b6018dc9937c0b97ab81b1293799fec2e076dc066610d544ca64537e98ccfe2362acc467d10d28ed3ef27afc89c41a8588898008d1a040915e150e452b9913a8ef0f56fa0b4c6d3746f400058c8d830d450065390b73afb0edbbcd170da5bf96f62b85aa6ab6f9608fdf29e670ab38b58332e1a8c45ada2c4d3f2377a3c82c6c1777fc87fa3e3d6ab37cfa31abc85cef8e351d825b5de7f2d481e518d720b107c3700a7c73a3b032ebe9c61f84f19e", [[]]}, 0x1d8)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x8000000000000101)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:30 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:30 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0xffffffffffffffff, 0x20, 0x0, 0x800000})

07:56:30 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd000600e8020100e7e9abd6481d825e30c98a535cc7febfec85db9bd8a3e15baace46f476bed8498b171a65d1b4f5992fe3ee"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x800, 0x3)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  878.929632] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  878.992255] FAT-fs (loop3): Filesystem has been set read-only
07:56:30 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:30 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400000, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r4, r3, 0x0)
ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000180)={0xc, @pix_mp={0x1, 0x1f, 0x35315258, 0x18, 0x0, [{0xad, 0x8}, {0x1f, 0x6}, {0x8000, 0xffffe531}, {0x400, 0x7ea}, {0x8000, 0x6}, {0x1ff, 0x4}, {0xc9b, 0x7fffffff}, {0x800, 0x800}], 0x4, 0x7, 0x3, 0x2, 0x3}})

07:56:30 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r6, 0xc0406619, &(0x7f0000000040)={{0x0, 0x0, @identifier="938d1682e2c603815fb0a2e24e2124e5"}})

07:56:30 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000), 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:30 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="1049a837d54e2805f4f7046cb0e3e781a0f20d"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:30 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x4, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:30 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:30 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x1, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r7, 0x80026101, &(0x7f0000000040)={0x1000000099e, 0xfe})

[  879.435392] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
07:56:31 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

[  879.523656] FAT-fs (loop3): Filesystem has been set read-only
07:56:31 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})

07:56:31 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$KIOCSOUND(r5, 0x4b2f, 0x10001)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r7, r6, 0x0)
dup2(0xffffffffffffffff, r6)

07:56:31 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x406, r2)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r9, 0xc05c6104, &(0x7f0000000080))
readlinkat(r9, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=""/11, 0xb)
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$BLKTRACESTART(r6, 0x1274, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:31 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="10001a0000000000000000000096170bf225eee65ae900000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000340)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty, 0xfffffffc}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:31 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000), 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:31 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x40})

[  879.938969] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  880.004750] FAT-fs (loop3): Filesystem has been set read-only
07:56:31 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x0, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:31 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x40})

07:56:32 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210880000000e8ff0100"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$void(0xffffffffffffffff, 0x5451)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:32 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="1093472b4a00ffdbdf25400101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:32 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x40})

07:56:32 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x9, r2, 0xa)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x40, 0x240)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a40000000101010400000000000000000100000430000e800c00028005000100110000000c000280050001008800000006000340000400000c000280050001008800000008001640ffffffff140010800800014000000e1d08000240000000011800018006000340000300000c000280050001001100000008000c40000000002400108008000140000000000800024000000401080003400000003576a7723bec1c0308"], 0xa4}, 0x1, 0x0, 0x0, 0x40080}, 0x81)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000040))
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r3, 0x0)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000100)={0x0, 0x9, 0x0, &(0x7f00000000c0)=0x5})
ioctl$IOC_PR_PREEMPT(r6, 0x80026101, &(0x7f0000000080))

07:56:32 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
select(0x40, &(0x7f0000000140)={0x8001, 0x47, 0x10001, 0x5, 0x5, 0x3f, 0x100000001, 0x1}, &(0x7f0000000080)={0x7ff, 0xffff, 0x8001, 0x0, 0x5, 0xbf, 0x4, 0xcdb}, &(0x7f00000003c0)={0x5, 0x9, 0x9, 0x8, 0x1, 0x1, 0x3, 0x3}, &(0x7f00000001c0)={0x0, 0x7530})
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xcda1e2327b5a8814}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x3f8, 0x400, 0x70bd27, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0xd)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r5, r4, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc0485661, &(0x7f00000005c0)={0x1, 0x1, @stop_pts=0xba1})
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x88000, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001240)='TIPCv2\x00')
sendmsg$TIPC_NL_NET_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="e4010000", @ANYRES16=r9, @ANYBLOB="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"], 0x1e4}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d800000016b1cf3b3eea", @ANYRES16=r8, @ANYBLOB="00082dbd7000fddbdf2509000000740001800d00010069623a7866726d3000000000380004001400010002004e20ac1414bb0000000000000000200002000a004e200000003fff010000000000000000000000000001040000000c00010069623a68737230001c000280080004000600000008000300090000000800010020000000300005802400028008000100020000000800030000800000080003000200000008000400000200000800010075647000200002801c00038008000100eeb2f80508000100070000000800010000080000"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x20004810)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:32 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, 0x0)

07:56:32 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x8005)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB='H\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB="00000000000000002800120009000100766574680000000018330200142a17924e000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r5, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000034c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0xc, 0x2, [@TCA_U32_HASH={0x8}]}}]}, 0x38}}, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000200)={0x5, &(0x7f00000000c0)=[{0x5, 0x4, 0x40, 0x3}, {0x9, 0x81, 0x4, 0x12000}, {0x3, 0xa7, 0xcc, 0x3}, {0x100, 0x8, 0x4, 0x26}, {0x6, 0x0, 0x77, 0x813}]}, 0x10)
r9 = syz_open_dev$cec(0x0, 0x3, 0x2)
r10 = dup3(r9, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r10, 0x80026101, &(0x7f0000000080))

07:56:32 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  880.871120] selinux_nlmsg_perm: 6 callbacks suppressed
[  880.871136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4092 comm=syz-executor.4
07:56:32 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:32 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, 0x0)

07:56:32 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x2, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}, {&(0x7f0000000380)="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", 0x1000, 0x2}], 0x2020010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
setxattr$security_ima(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x5, 0x1)

[  880.974471] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4097 comm=syz-executor.4
07:56:32 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r1 = dup3(r0, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x80026101, &(0x7f0000000080))
socket$inet6_tcp(0xa, 0x1, 0x0)

07:56:32 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:32 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, 0x0)

07:56:32 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0x39, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[]}, 0x1, 0x0, 0x0, 0x2}, 0x4040040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000340)={0x1, 0x6, 0x3c, 0x3})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0xc, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x8, @fd, 0xc}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:32 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:32 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:32 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:33 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
perf_event_open(0x0, 0x0, 0x12, r5, 0x1b)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x80026101, &(0x7f0000000080))

[  881.557896] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
07:56:33 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))

07:56:33 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  881.630131] FAT-fs (loop3): Filesystem has been set read-only
07:56:33 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e801ffec"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000180)={0x8, 0x0, 0xfffffffc})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @userptr=0x8, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:33 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_S390_INTERRUPT_CPU(r6, 0x4010ae94, &(0x7f0000000040)={0x800, 0x8})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:33 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0x14)
r2 = eventfd2(0x0, 0x80801)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x2, r2, 0x1})
r3 = syz_open_dev$cec(0x0, 0x1, 0x2)
r4 = dup3(r3, r0, 0x0)
bind$ax25(r1, &(0x7f00000000c0)={{0x3, @null, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48)
ioctl$IOC_PR_PREEMPT(r4, 0x80026101, &(0x7f0000000080))

[  882.028125] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  882.044013] FAT-fs (loop3): Filesystem has been set read-only
07:56:33 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @raw_data=[0x1, 0x7, 0xfffffff9, 0x5, 0x40, 0x0, 0x7b, 0x2, 0x2, 0x7fffffff, 0x6, 0x2, 0xbc, 0x4, 0x8, 0x9, 0xd4, 0x401, 0x9, 0x6, 0x3, 0x761, 0xffffff80, 0xffffffff, 0x3f, 0x1000000, 0x8001, 0x9, 0x8, 0x8, 0x3, 0x5]})
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:33 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100032bd7000ffdbd125210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:33 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))

07:56:33 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, 0x0, 0x0)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:33 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00')
r5 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r6 = socket(0x11, 0x800000003, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000380)=@ethernet={0x306, @multicast}, 0x80)
getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(r5, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="ca020087", @ANYRES16=r4, @ANYBLOB="04002cbd7000fddbdfb01f4bbceafdb6bd250c9a6e7ab9c9b4250a00000005003300", @ANYRES32=r7, @ANYBLOB="4cf45ab47ef97c7374eae122f3e13b27c993710536670a6d218ea45221861fb6956174af795440c5f06da7e2020539b090970d799a745d32367051df5a14eed75334eebdcbe33ba7dfd5ee367c9075f1a2ccf2ba8996a217f90a82b9d35793007b9c551d77613a0bdbc86c897e83e9d1b8e183d87aa28a5125cd"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r8, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:33 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x8000000000})
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffc})
write$binfmt_script(r0, &(0x7f0000000340)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[], @ANYRES64=r0, @ANYRES64, @ANYRESHEX, @ANYRESDEC=r2, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRESHEX, @ANYRES32=r1], @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRES64=r1, @ANYRES16], 0x81)
syz_open_dev$cec(&(0x7f0000000240)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x80026101, &(0x7f0000000080))
r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10000, 0x0)
r6 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r6, &(0x7f0000000000)=""/11, 0xb)
r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000})
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f00000001c0)={0x0, 0xa14})
getsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
keyctl$revoke(0x3, r6)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)

07:56:34 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))

07:56:34 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000180)={0x2, 0x2})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
getpeername$tipc(r7, &(0x7f0000000000), &(0x7f00000000c0)=0x10)
r8 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x80026101, &(0x7f0000000080))
bind$netlink(r8, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfc}, 0xc)

[  882.466063] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  882.521810] FAT-fs (loop3): Filesystem has been set read-only
07:56:34 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, 0x0, 0x0)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:34 executing program 1:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
getpeername$netlink(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000340)=0xc)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:34 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f00000000c0)={0x3, 0x3})
dup3(r2, r1, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0)
r5 = socket$isdn(0x22, 0x3, 0x3)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x80026101, &(0x7f0000000080))
write$binfmt_aout(r0, &(0x7f0000000180)={{0x108, 0x1f, 0x20, 0x351, 0x395, 0x3ff, 0x7e, 0x1ff}, "e4b48f696382a276956549ca476447b3ce76fef9d3d6caf478b77e5fc9c7d92f42c8b1ba61424e76ceab123cc43b06e87ec49d612aceaa2c2d945aeb8c1bed8ba3a7a25aaf5f946430918f4178e9f23c6d4b4edaa53740f0c8352e060336527ac5c3b1e2c47f50341d50f5dca099aac7d1bd36f402133745f80e16b5b9b9ce4b15d358da3c6099b22bff46cb24421ee45f9a7da137607c04f5460b6c1e7a5ddf63239eb3c26da876950d46b5853faf6e38d7316b3c697d22f3feabb05c7542766c78e4575256d33709b02559ebcdce1a2be632ce95917504", [[], [], [], []]}, 0x4f8)

07:56:34 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, 0x0, 0x0)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:34 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000340)='[posix_acl_accessposix_acl_access\x00', &(0x7f0000000380)='em0userproc\'}mime_type]selinux@!vmnet1eth1bdev{@eth0$\x00'], &(0x7f0000000480)=[&(0x7f0000000400)='system/\x00', &(0x7f0000000440)='\x00'])
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:34 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:34 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="2931c36b8d1274a79779"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:34 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0))
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x4, 0xa, 0x4, 0x40, 0x1, {0x0, 0x2710}, {0x5, 0xc, 0xff, 0x40, 0x3, 0x6f, "72ea5f1c"}, 0x1, 0x3, @fd=r4, 0x9, 0x0, <r5=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000180)=0x8)
r6 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x80026101, &(0x7f0000000080))
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0)
ioctl$UI_SET_SNDBIT(r9, 0x4004556a, 0x6)
dup3(r8, r7, 0x0)
dup3(r8, r1, 0x0)

07:56:34 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:35 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:35 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16, 0xc0000000000000}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x60, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'xfrm0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_macvtap\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x8080)
mkdirat$cgroup(r8, &(0x7f00000000c0)='syz1\x00', 0x1ff)
signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xffffffff87d591f8]}, 0x8, 0x80000)

07:56:35 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:35 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:56:35 executing program 1 (fault-call:3 fault-nth:0):
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:56:35 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="1000030600beed4456e802001e00000020b87f14c8564e868afb8154204965f212d9d9000000ef95b70fd88e79e01b772892fe8f69a93caa0dd40b3bf71c0e3b5614e95f04b11c86d1644a9ebe3106fbd864a85d76d8cd6d5b8514ea168919b80c8044885623f43b12aedc1f36dbf4170e3ec1e3ae670598dec71264c2e374efb3aa9dc2127170b8c1"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(r2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r3=>r0})
accept$ax25(r3, 0x0, &(0x7f00000000c0))
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r4, &(0x7f00000001c0)='s', 0xffcf)

[  883.755372] FAT-fs (loop3): bogus number of reserved sectors
[  883.773722] FAT-fs (loop3): Can't find a valid FAT filesystem
07:56:35 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r3, 0xffffffffffffffff, 0x0)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x1})
ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f0000000000)={0xa, {0x9, 0x40, 0xffffff0e, 0x8001}})
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x2, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x4000})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
userfaultfd(0x80800)

07:56:35 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:56:35 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000380)=""/181)

07:56:35 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:35 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000180)={0x6, "51c475855326cd0fae8d26eb15f3368e960b395f61f17f12f3b69400d392e800", 0x3, 0x8001, 0x1000, 0x80008, 0x2})
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, &(0x7f0000000240)=""/173, &(0x7f0000000300)=""/198, &(0x7f0000000400)=""/160, 0xf000})
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000000))
r5 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080)={0x0, 0x4})

07:56:35 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYBLOB="10002989964431bc55508a01010006d89000e8020000d2af2c698f6de9bddaed38a53965d858310d217e3e312d92821fe302a5f15b0ae4f02ac42a1c6e4352baa913ea0c15e2ccbf560a25e9bc8fdd671c2d3c35898077b600fb93d7e80b0abe37d786750419eaaf70e345379057eb763f2ea1dfabb56222d9ec4c9a9772982e212cd0cb4fe23b00000000000000000000ebe09da5de0a8f5468a7e43500a1c96ec7bfdf1a5872102640cb967b6fcff02f4655935136447907778362452bbe3e51a5f0db67e99dbca8baac5934c69e82ea5d7578d5bd8517c83002c66ea8972471b29c6c7d68586df973b3006a52d1bd6e"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:35 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd00e8f8ffffa900"/20], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0xfffffffe, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:35 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x2, &(0x7f0000000200)={0x40})

[  884.475070] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
07:56:36 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
fchdir(r5)
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x20)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000000)={r9, 0x9, 0x8, [0x3, 0xe5, 0x7, 0x2, 0x20, 0x1, 0x4, 0x0]}, &(0x7f0000000040)=0x18)
r10 = dup3(r1, r0, 0x0)
setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f00000000c0)=0xd761, 0x4)
ioctl$IOC_PR_PREEMPT(r10, 0x80026101, &(0x7f0000000080))

07:56:36 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x4b47, &(0x7f0000000200)={0x40})

[  884.535338] FAT-fs (loop3): Filesystem has been set read-only
07:56:36 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(0xffffffffffffffff, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:36 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
r2 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000180)=0x20)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r3=>r0})
accept$ax25(r3, 0x0, &(0x7f00000000c0))
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r4, &(0x7f00000001c0)='s', 0xffcf)

07:56:36 executing program 2:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYBLOB="10002989964431bc55508a01010006d89000e8020000d2af2c698f6de9bddaed38a53965d858310d217e3e312d92821fe302a5f15b0ae4f02ac42a1c6e4352baa913ea0c15e2ccbf560a25e9bc8fdd671c2d3c35898077b600fb93d7e80b0abe37d786750419eaaf70e345379057eb763f2ea1dfabb56222d9ec4c9a9772982e212cd0cb4fe23b00000000000000000000ebe09da5de0a8f5468a7e43500a1c96ec7bfdf1a5872102640cb967b6fcff02f4655935136447907778362452bbe3e51a5f0db67e99dbca8baac5934c69e82ea5d7578d5bd8517c83002c66ea8972471b29c6c7d68586df973b3006a52d1bd6e"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
acct(0x0)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:36 executing program 4:
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
socket$kcm(0x29, 0x5, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f0000000000)={0x1})

07:56:36 executing program 3:
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0)
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00')
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
prctl$PR_SET_FPEMU(0xa, 0x1)
r6 = dup(r5)
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@dev, @mcast1, @dev={0xfe, 0x80, [], 0x2a}, 0x1, 0x2, 0x0, 0x500, 0x0, 0x380, r7})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000140)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xc, r7})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000dcb2800a20d78a2bd0634a0bf3cbc2eab9507ea5d93ed1303512e80456ee334bb11f74a8f3e8bd77fd2af7abde03d91cfd9ac4394a4d29e98242cc26bda673a8632bab40f289d7ba96d7ab4d6613bdf8f6341cc839f58495263a77adc6c14c4feb3d", @ANYRES16=r3, @ANYBLOB="080026bd7000ffdbdf2502080003000000000000000000000000061e1c4f87da567e16d054482d3bb3ca5104950c2ea198d303067ccc1cd7fcc580321ce03bac3aed5c725bcf891da69a620607ef7dbbf0890f614cdc6930a34cbb41280a0f9589443f0ee63edc09459faadc15ec10944c69a27b122dbd6c609b8c3a8e81217513f65b565da42642b9b3b2f0d6c3606d0747ed57d8e7488d2c874cd9e4562834ce995cbe562f005e1ee9fd3a2f7ca931adc1bd5a2564ce2f8606355adef6b95424d493f9fa4042f6d4eaeac0a2e93d9acb544424b1", @ANYRES32=r7, @ANYBLOB="08003f00fbffffff08004000e6360000"], 0x34}}, 0x8044000)
sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r3, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000000)
r8 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:36 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x4b49, &(0x7f0000000200)={0x40})

07:56:36 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000000)={[{0x101, 0xffe0, 0x5, 0x3f, 0x20, 0x3, 0x83, 0x3, 0xce, 0x9, 0x6, 0x1, 0x100000001}, {0x101, 0xb5eb, 0x8, 0x3, 0x2, 0x8, 0xb3, 0x6, 0x3b, 0x1, 0x3, 0x40, 0x2176}, {0x1, 0x8001, 0x2, 0x8, 0xff, 0x7, 0x0, 0xfd, 0x81, 0x8, 0x8, 0xfa, 0x1}], 0x9})

07:56:36 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x541b, &(0x7f0000000200)={0x40})

[  884.896804] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  884.921968] FAT-fs (loop3): Filesystem has been set read-only
07:56:36 executing program 2:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fchdir(r0)
getpeername$tipc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x141962, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40000008})
creat(&(0x7f0000000700)='./bus\x00', 0x0)

07:56:36 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0xd0240, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x4001, @ipv4={[], [], @empty}, 0x8}, @in6={0xa, 0x4e23, 0x4da1b01b, @empty, 0xd28}, @in6={0xa, 0x4e24, 0x7, @ipv4={[], [], @broadcast}, 0x9b6}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e20, @broadcast}], 0x84)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:36 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r3)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x7ff, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x6c, 0x0, r3}, {0xfffffffffffffc00, 0xd641, 0x545, 0xffffffff, 0x800, 0x9, 0x400, 0xffffffffffffffff}, {0xfff, 0xffffffffffffffff, 0x7}, 0x4, 0x6e6bb1, 0x6b601848a598cc0e, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x0, 0x2, 0x2a, 0x4, 0x9, 0x9}}, 0xe8)
lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x5, &(0x7f0000000380)=[{&(0x7f0000000180)="eb027f7034641f585a49af1c91c0f00bf1c395508d1dafcb3f4f53c5862fe0f7f8473527740e3462e53d2a42137f30d566d5b132ff4bed2c3bae22851ed137a5ea386cbabe63433545a87a93f6c33c24a6a2e634f41bf101705a903a3386fef3e6c01110e839e2667094470cd9003dfd83788b349122f025736592fbf3406f34909ab05eadfa8f3482c382f5c8f03655018da5fab5a7a9d03859132e962e75a4d4c111cf21508c8d677c3a99e8f4c7701c95a712b1e481b53c4580765d24d8e263a271596c68c7", 0xc7, 0xfcc2}, {&(0x7f00000000c0)="961393a5705bb08ba9af860c45b35c29ca36c581e4fb38e74e6a320735967b4443470ab3a150e6c29c8dcbc1a18e51e8d6ff3fff4eba793be01677ff3088", 0x3e, 0x72c1}, {&(0x7f0000000100), 0x0, 0x100000000}, {&(0x7f0000000280)="d82e299cda20fa9d50f3167ec3d6564b76c6909ae036649ab03ce554fea93692a0d925047399a40a03a46d1e4f9b54036f3e0971c5d73cb52a989ae108786a28202be64278bd21a71fd003c3043d9d515cabf9d35ce6e04400c6481c356ac2f36f9376072e8ea04944a79c5eea110981c6c364b5896161b058d52951f1f9d50b37386408f224860a828de9545888905f5f679740c1ad777966c4524025435b7fda3db6ad52ee", 0xa6, 0x6}, {&(0x7f0000000340)="1843d1418f8f0b79cd35801dd0567e22a362df916567a384b37c29c522be418e71711498b6742ff1518d2b581c9866727eb5bbcc0c5a38", 0x37, 0x9}], 0x3000040, &(0x7f00000004c0)={[{@sunit={'sunit', 0x3d, 0x800}}, {@nobarrier='nobarrier'}, {@prjquota='prjquota'}, {@grpquota='grpquota'}], [{@uid_eq={'uid', 0x3d, r3}}, {@subj_user={'subj_user'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/cec#\x00'}}, {@subj_user={'subj_user'}}, {@measure='measure'}, {@uid_gt={'uid>', r4}}, {@appraise_type='appraise_type=imasig'}, {@audit='audit'}]})
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x80026101, &(0x7f0000000080))

07:56:36 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x5421, &(0x7f0000000200)={0x40})

[  885.263474] XFS (loop4): unknown mount option [nobarrier].
07:56:36 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(0xffffffffffffffff, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  885.391980] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  885.429101] FAT-fs (loop3): Filesystem has been set read-only
[  885.551825] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[  885.560013] FAT-fs (loop2): Filesystem has been set read-only
07:56:37 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r3=>r0})
accept$ax25(r3, 0x0, &(0x7f00000000c0))
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r4, &(0x7f00000001c0)='s', 0xffcf)

07:56:37 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x5450, &(0x7f0000000200)={0x40})

07:56:37 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x80026101, &(0x7f0000000080))

07:56:37 executing program 2:
r0 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x81, 0x42800)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x585}}, 0x0, 0xf, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_FONTX(r1, 0x4b61, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)="b5e6c25af6f309147a2ddae385530f981cc27a7a3e9f9d4a0c1238626fbbf3ecf50feecb383e98e0b2fb669d7acb2620946a5c80cb077c8abbce62aca2b46d2e9c534172dba1888a09a066e7a5e618f0184859f4060e4c544045cea0e3ea53316328a60abac5b99d42505c091399152716ffe4c3ba7718799087b794d23d374042b4ab8377ee05118294f3e76c3f494878a8c270e141d0a992b0d442a0d92be2a5a6468c33ed06ae5ef20190975054a9db9397d1f00f0277c3a02519f76896c484e8806bfa7d5c67b2f218b2d450d1613632a43f53626ba3c88304cf92d2b964329fdef371653f000000ac3673f75ec656f203cd832fbbdb23aa836998a84a86d1747edefe0c6b808992ee18469a5b9eeefeb3324058673730e09f4b5c3c235ec39eb65004dfd81daa40964599d5297b6fdd7626b96f382989ada371eb134061b089d5574edb1558d2675af9ae7cb0fe16501bef10fa0677cfb6ce0c2e0ba5f67290b8beb94f0fac9823e42443620d53895cf6695096c008dadd5f3d14bbaad0474bfb014995df0a970d655d7ff10381d8bb3be3139a4d33c6c21ce142cd54a17b7b1b9b89af2b3632b0d24602989c7474f570816112e356eb1af84c3b316c97cfb61f5eef4e2a9b37211c108e3871b92ec11f89fbcc7a1f47206d57a41f46cf84514cdf2fea7e994682ece0346e5b9b8035cb284b266a42818a9e2d5d776bd10f43829f5913e1481c1f9399e6fdcc88c34700314e5b53941b2ae540a1d2600c91dbfe88d7901811a288a24f76b17b000a7f6cfea9b5e6bd8c0afe2e7f1e9cb93acf318fee289dbfb6e301f8af99262c7c660a5d786222b66c79e8ac39c69e66e5d9aa11e34c0e80a4a99954603da3c1b9ec0bf75e57991bbed18654df374e036378272fa8e9767304417bd9093bdb3e3ba3ccc709c51f9ad9fab90811ec1f9fd5192dd42caac2c85abd6cead47021aad5036c7b0050b63156ca009d1bff2b461ab025a747230ce551588397b37adad508c7bb23efb5ee4dc578b36dda45967800ddfcb33a08d997ed68bf7746c22e20009411491ac58cb960510141c7c2ff1651d4c935821a010400004765050072af5b8ba4e941388b027cc2507143b3fbaeaac2068734ddb9907233973f361a51ea4233e095a75735213015ae9fe873de644083019b39407225dee4f2ac3d9db5bfaa03c16a394d99a0fa1ffb45096ae3e3ac485a912f4795648d64980beb6a4a843f6143f5f691839b67606f3d10d73775445b5416202909b3bee0d99ee19ee012ff20a7b366ec4a9c8bc810fa1aa31f1df20233f46884c2eb36f0f0093d108c13f30ea239d8cd6d512ffca3932a70b9819c8f602594183fa9545c948550c106228a03068538c790229fce92b5c36fb4135fc8884c34e05147506ea8bd5931c534a3bfd01b4aa7eb8fe300"})

07:56:37 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0))
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r7 = fcntl$dupfd(r4, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
mkdirat$cgroup(r3, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:37 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x5451, &(0x7f0000000200)={0x40})

07:56:37 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(0xffffffffffffffff, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:37 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080)={0x4000000000000101, 0x9, 0x0, 0x1f})
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r5, r4, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080)={0x0, 0x20000, 0x207c})
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(0xffffffffffffffff, r0, 0x80000)
ioctl$IOC_PR_PREEMPT(r9, 0x80026101, &(0x7f0000000080))

[  885.849162] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
07:56:37 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x5, 0x0, 0x1, 0x4})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getsockopt$inet6_dccp_int(r3, 0x21, 0x3, &(0x7f00000002c0), &(0x7f0000000300)=0x4)
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r4, 0x0, r5)
openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x667980, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

[  885.849173] FAT-fs (loop3): Filesystem has been set read-only
07:56:37 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x5452, &(0x7f0000000200)={0x40})

07:56:37 executing program 2:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)
ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
accept4$rose(r1, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@remote, @rose, @remote, @default, @bcast, @rose]}, &(0x7f0000000080)=0x40, 0x80000)
fremovexattr(0xffffffffffffffff, 0x0)
r2 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"])
socket$nl_generic(0x10, 0x3, 0x10)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f5, 0x200, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x8000)
sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42}, 0x0)
perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0xdce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
dup3(r3, r2, 0x0)
sendfile(r1, r2, 0x0, 0x7fffffa7)

07:56:37 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_dgram(0x28, 0x2, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
sendfile(r0, r3, 0x0, 0x3)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000040))
getdents64(r7, &(0x7f00000000c0)=""/68, 0x44)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0xffffffff, 0x2, 0x4, 0x7, 0x8})
r8 = dup3(0xffffffffffffffff, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x80026101, &(0x7f0000000080)={0x92})

[  886.203342] audit: type=1800 audit(1586332597.725:54): pid=4477 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=544 res=0
[  886.280001] attempt to access beyond end of device
[  886.329924] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  886.345317] audit: type=1804 audit(1586332597.755:55): pid=4477 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir492086616/syzkaller.mugetH/776/file0/file0" dev="loop2" ino=544 res=1
[  886.371958] loop2: rw=2049, want=130, limit=127
[  886.376795] Buffer I/O error on dev loop2, logical block 129, lost async page write
[  886.385899] attempt to access beyond end of device
[  886.391114] loop2: rw=2049, want=131, limit=127
[  886.395948] Buffer I/O error on dev loop2, logical block 130, lost async page write
[  886.404145] attempt to access beyond end of device
[  886.409245] loop2: rw=2049, want=132, limit=127
[  886.414153] Buffer I/O error on dev loop2, logical block 131, lost async page write
[  886.422333] attempt to access beyond end of device
[  886.427990] FAT-fs (loop3): Filesystem has been set read-only
[  886.434162] loop2: rw=2049, want=133, limit=127
[  886.439078] Buffer I/O error on dev loop2, logical block 132, lost async page write
[  886.448331] attempt to access beyond end of device
[  886.454407] loop2: rw=2049, want=142, limit=127
[  886.464002] Buffer I/O error on dev loop2, logical block 141, lost async page write
[  886.481909] attempt to access beyond end of device
[  886.487100] loop2: rw=2049, want=143, limit=127
[  886.494441] Buffer I/O error on dev loop2, logical block 142, lost async page write
[  886.539169] attempt to access beyond end of device
[  886.565713] loop2: rw=2049, want=144, limit=127
[  886.596410] Buffer I/O error on dev loop2, logical block 143, lost async page write
[  886.648813] attempt to access beyond end of device
[  886.701898] loop2: rw=2049, want=145, limit=127
[  886.721227] Buffer I/O error on dev loop2, logical block 144, lost async page write
07:56:38 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, r0})
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f00000001c0)='s', 0xffcf)

07:56:38 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x5460, &(0x7f0000000200)={0x40})

07:56:38 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, 0x1411, 0x4, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x14}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0xd1)
r6 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x20102, 0x0)
recvmsg$kcm(r7, &(0x7f0000000140)={&(0x7f00000001c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000380)=""/181, 0xb5}, {&(0x7f00000002c0)=""/103, 0x67}], 0x2}, 0x22020)

07:56:38 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, 0x0, 0x0)

07:56:38 executing program 2:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xac}}, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x121000, 0x0)
ioctl$KVM_ARM_SET_DEVICE_ADDR(r3, 0x4010aeab, &(0x7f0000000040)={0x8, 0xd000})
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
write$selinux_attr(r6, &(0x7f00000000c0)='system_u:object_r:watchdog_device_t:s0\x00', 0x27)
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x8}, 0xc000)

07:56:38 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40026102, &(0x7f0000000200)={0x40})

[  886.957899] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  887.007449] FAT-fs (loop3): Filesystem has been set read-only
07:56:38 executing program 2:
r0 = socket(0x2b, 0x1, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=<r3=>0x0)
ptrace$cont(0x20, 0x0, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0xe)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
r5 = creat(&(0x7f0000000080)='./file0\x00', 0x13a)
kcmp$KCMP_EPOLL_TFD(0x0, r4, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)={r5, r0, 0xca})
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
listen(r0, 0x0)
accept$alg(r0, 0x713000, 0x715000)

07:56:38 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r2, 0x0, r3)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x28000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000000080)={0x40000000})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:38 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40049409, &(0x7f0000000200)={0x40})

07:56:38 executing program 2:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000080)={0x0, 0x2, 0xfffffffc, [], &(0x7f0000000000)=0x9})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100005000000e7ae4452aa6ca87f8b71c7248950cbb6056ee3f6074520232b22f701001c11b300009a8299bc3f997f572b07108cf0b62a137e04eebf751d2153e9843b5fc0e73f", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500060000000000"], 0x3c}}, 0x0)

07:56:38 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40086602, &(0x7f0000000200)={0x40})

[  887.336700] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
07:56:38 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24004006)
listxattr(0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r2)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x6)
r3 = socket(0x0, 0x2, 0x0)
connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x644001, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]}}], 0x1, 0x0)

[  887.380631] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  887.436379] FAT-fs (loop3): Filesystem has been set read-only
07:56:39 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="10001a29bd7000ffdbdf7f00a2b38bdd293ba1f65af401ea448b010100"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x65e72d4fdc723ec5, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000340)={0x7, 0x4})
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:39 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0)
r6 = fcntl$dupfd(r1, 0x0, r2)
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080))

07:56:39 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40087602, &(0x7f0000000200)={0x40})

07:56:39 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, 0x0, 0x0)

07:56:39 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x4020940d, &(0x7f0000000200)={0x40})

[  887.932256] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  887.960210] FAT-fs (loop3): Filesystem has been set read-only
07:56:39 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:39 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000200)={0x40})

07:56:39 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80046108, &(0x7f0000000200)={0x40})

[  888.317683] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  888.384673] FAT-fs (loop3): Filesystem has been set read-only
07:56:40 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x6, 0x40})

07:56:40 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80086601, &(0x7f0000000200)={0x40})

07:56:40 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80087601, &(0x7f0000000200)={0x40})

[  888.765046] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  888.783641] FAT-fs (loop3): Filesystem has been set read-only
[  888.865367] audit: type=1804 audit(1586332600.385:56): pid=4560 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir492086616/syzkaller.mugetH/780/bus" dev="sda1" ino=15808 res=1
[  888.935743] audit: type=1804 audit(1586332600.415:57): pid=4560 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir492086616/syzkaller.mugetH/780/bus" dev="sda1" ino=15808 res=1
07:56:41 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24004006)
listxattr(0x0, 0x0, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0)
write$P9_RWALK(r1, &(0x7f0000000300)=ANY=[], 0x6)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r1, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, r2)
ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000300)=0x6)
r3 = socket(0x0, 0x2, 0x0)
connect$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x644001, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]}}], 0x1, 0x0)

07:56:41 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, 0x0, 0x0)

07:56:41 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x805c6103, &(0x7f0000000200)={0x40})

07:56:41 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240))
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0))
fcntl$dupfd(r0, 0x406, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r5, r4, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
dup2(r5, r6)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000380)={0x0, @src_change})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400204)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r7 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0)
fcntl$setpipe(r7, 0x407, 0x5)

07:56:41 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x2}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:41 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc0045878, &(0x7f0000000200)={0x40})

[  889.920032] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  889.997767] FAT-fs (loop3): Filesystem has been set read-only
07:56:41 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc0045878, &(0x7f0000000200)={0x40})

07:56:41 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000380)={0xffff, [[0x2, 0x1f, 0x400, 0x6, 0x5, 0x400, 0x6, 0x5], [0x2, 0x7, 0x80000001, 0x1, 0xffff0000, 0x80000001, 0x1, 0x10001], [0x9, 0x3f, 0x6, 0x8, 0x45e, 0x4, 0xa0, 0x8]], [], [{0x8, 0x9, 0x1, 0x1, 0x1}, {0x1, 0x401, 0x0, 0x1, 0x0, 0x1}, {0xfffffff8, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xd44, 0x1000, 0x1, 0x0, 0x0, 0x1}, {0x10, 0x400, 0x1, 0x0, 0x1, 0x1}, {0x8001, 0x36, 0x0, 0x1, 0x1}, {0xcd, 0xffff, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x1000, 0x1, 0x1}, {0x401, 0xe4, 0x0, 0x1, 0x1}, {0x6, 0xffffffff, 0x1, 0x0, 0x0, 0x1}, {0x51, 0x2, 0x0, 0x0, 0x0, 0x1}, {0x38, 0x1}], [], 0x400})
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200800, 0x0)
ioctl$LOOP_CLR_FD(r4, 0x4c01)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x400000, 0x0)
ioctl$KVM_GET_API_VERSION(r5, 0xae00, 0x0)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:41 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100004000000000071eea435f390a10000210600e80200009143df7d2c1abcaa4f478281000000000000b01144efa940"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x800, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0xfffff6ce, 0x9, 0x10000, 0x3ff, 0x613}, &(0x7f0000000180)=0x98)

07:56:41 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc0189436, &(0x7f0000000200)={0x40})

[  890.312008] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  890.339094] FAT-fs (loop3): Filesystem has been set read-only
07:56:41 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc020660b, &(0x7f0000000200)={0x40})

07:56:41 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x40, 0x0)
ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000100))
r4 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000140)={0x8001006, 0x400, 0x3})
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:42 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000197000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0xa0000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in=@local, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
shutdown(r2, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0)

07:56:42 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x3, 0x0, 0xb, 0x3, 0x93, &(0x7f0000000340)})
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:42 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc0386105, &(0x7f0000000200)={0x40})

07:56:42 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r0 = semget(0x0, 0x3, 0x8)
semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000080)=""/55)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r3, 0x80045700, &(0x7f0000000140))
mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff)

07:56:42 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100), 0x0)

07:56:42 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc0386106, &(0x7f0000000200)={0x40})

07:56:42 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r1, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_SIOCGIFCONF(r7, 0x8912, &(0x7f0000000080)=@buf)

07:56:43 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
r0 = memfd_create(&(0x7f0000000380)='security.selinux\x00', 0x0)
pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0)
mmap(&(0x7f0000197000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0xa0000)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in=@local, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
shutdown(r2, 0x0)
chdir(&(0x7f0000000180)='./file0\x00')
symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00')
umount2(&(0x7f00000005c0)='./file0/../file0\x00', 0x0)

[  891.511786] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  891.539904] FAT-fs (loop3): Filesystem has been set read-only
07:56:43 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100), 0x0)

07:56:43 executing program 2:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e22, @empty}}, 0x0, 0x0, 0x3e, 0x0, "e259530abcf1906fd2cb6b24d407f79af0cabf7fa69978dc22817beb6932f640a506f7987da759a619688e12bd72bb668e8693143fda45f153736cb29b5b2cea51d3856a3c89615fd3c28fda9bd7260f"}, 0xd8)
ioctl$RTC_AIE_ON(r0, 0x7001)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000001c0)={'netpci0\x00', {0x2, 0x4e20, @multicast1}})
r2 = open(&(0x7f0000000200)='./file0\x00', 0x4000, 0x12)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000240)={0x10000000, 0x7, 0x2c})
r3 = socket$inet(0x2, 0x3, 0x5)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
getpeername$llc(r0, &(0x7f0000000300), &(0x7f0000000340)=0x10)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm-control\x00', 0x42000, 0x0)
faccessat(r4, &(0x7f00000003c0)='./file0\x00', 0x48, 0x900)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000400)=@req3={0x7e00000, 0x114, 0x3, 0x3, 0xc19, 0xfff, 0x401}, 0x1c)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TCGETA(r5, 0x5405, &(0x7f0000000440))
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer2\x00', 0x200, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0xffff961f}, &(0x7f0000000500)=0x8)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
close(r7)
getgroups(0x6, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0])

07:56:43 executing program 2:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x2, 0x0, 0x4, 0x3}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="1500000065ffff0190000008003950323030302e4cc74502f987c2cec6ffff0000d74ed8a60ab5632dbb78abd56f94fe58312cbb803a8ecc54a25fba3da80b856445ab100621d6234555d08dc5404737796d507031dbb24a6582d5856b2586cd89e9b08e3f5972fe9ca1624623e19268c89c9dd81c796f27f137cc5a3fb54aff8eaf5b96790700000000000000ff39aec025e19066318515eff27eff000000000000000000e94ccb6ac7c7a3406807ea6e2f114b87bde2b723135e01f5138051d239f0bb199490a7cbf7f8c1d31286df221e0d148f9e74b378eaca3cd7981015b5e85fcb4ace571695144d8052402fbbe9a830f81155ceb8f12d437ef144354178fc8ed35d8a23a62eda7c5751e21500cea498c9ec9da62fe15850c4c760827b88e0ced3c7fdd2a3ec05954f36e77231885a0f6249f0d06205ff1ca141d395214408ac58cc6a54b4f14865dafe8b19bd569f22416a573e07a624313073f4bd8c8797794b93232d2c16a3db804a024274994979d91553373a8812938d01e2af60f8880400000000000000f8b66493e120d77eee7f3a2ff246b16028524be2fd4d2c93a3b9d70d79003059d9e0169cc17f7867a4d957e154b3ca3300ac7c796c4b251d227659d4e14ae13d76d8ce82356ee28dd2a9dc68b75cd6c75bf7db7950c81dcecfb11c4440f1152dde9378b5438258c233a64148bc40e49858e9418e6903a7369fccfd7d0fd39401665320b298cc8964e9706e89b95ec45dd3de465369b968744c3151fe239669c4b120987af7c578a4f5af643ccaaf82f627827900000000000000000000001735d0ad576ea208500a22fc04c717e6e58a2dc619ecbc4d861c477c026a38e672b7d525d744e58d3e41f7f04792fcb7f285940d9a748142f9aaa85b16a5d5436e98a60bee023a926bf6c93818059a316538ed3ba465623e06e91a61ad24df3090ea0147d30db1a71b7de039cb0c468a11528f09fd492bcd745f0befbb2dda141084b318c374a3d0e537b09553000000000000000000c64d4055e09bd13d99e085b9ecd2f6ebf715b9d0f3fd1cb27528af63adc0a46adca9394e3ced8db801c2ee7976d591fc2f3f541f983f1031471d1ecae275f0fb12ce45d57d460214b17b9931c40b38074de7ac4e38ea146a0a4a4a2b1aa571ba9663a93b4ba260d967d81e62fe011e7923c9c182cfda5146f2e39a4f762da0f040000000000000006ff91b7047e56c4f386e976f02f5cc4ace2236687193906db1d9149bb9c428eed52ef787a655df265606cfec17d309af41ab4bc9034fd5745a9b9b6f3ba15b2007d8c85f50cbb4c61e77eede5ff28100443cdc48aa3c1804481e793fb2493c9ec1d2002ea0106808e2118b04cbad8e0feabc8dd340b3747a67ebf63681dc276723ae61b82fe71f04fc8f7620903587b06f0862a5631f2c02a70bc04d8b02478addd27e2ed2e81e097f000000000000000000000000000000007b732132bc1f600bf93cd21c37ae117602cc48916d87a48aff88548d2d1b0872dbe5d510f8b977bf6d1e637664b93102e1a68cc96a98288f39ae1cf8db7d699b496ecd6c02810acefadefb55c4e18775f8202129c7bbff37e614e774db2cfffe424a76e108e074cd181b6030e95e4097c7315f1ff88b7b92a97d8a25a054f7c17924"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
r3 = gettid()
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r3)
getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f0000000300)=@ng={0x4, 0xd, "7122d73ca8a632e5d6621965ecd269ba"}, 0x12, 0x3)
umount2(&(0x7f00000001c0)='./file0\x00', 0x0)

07:56:43 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x5, 0x1, 0x0, 0x5, 0x3, 0x9, "000100"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x8, 0x1ff, @userptr=0x1000, 0x401}, 0x81, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:43 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc04c6100, &(0x7f0000000200)={0x40})

[  892.395826] 9pnet: bogus RWRITE count (2 > 1)
07:56:44 executing program 2:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
getsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000040)=""/33, &(0x7f0000000080)=0x21)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, 0x0})
r5 = dup2(r4, r3)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000280)={0x32, 0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0563044000000000006340400100"/42, @ANYPTR=&(0x7f00000012c0)=ANY=[]], 0x0, 0x0, 0x0})

07:56:44 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc0506107, &(0x7f0000000200)={0x40})

07:56:44 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100), 0x0)

07:56:44 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000200)={0x40})

[  892.754976] audit: type=1400 audit(1586332604.276:58): avc:  denied  { set_context_mgr } for  pid=4785 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1
[  892.808078] binder: BINDER_SET_CONTEXT_MGR already set
[  892.835206] binder: 4785:4789 ioctl 40046207 0 returned -16
[  892.844913] audit: type=1400 audit(1586332604.306:59): avc:  denied  { call } for  pid=4785 comm="syz-executor.2" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=binder permissive=1
07:56:44 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0xf})

07:56:44 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x10})

07:56:44 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xff000048, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac141440e0", 0x0, 0x9}, 0x28)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ftruncate(r6, 0x9)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="002f2d67e453b1a86e7c688c000400aa1c82a44080000000000000000000000000d56eed3a000000000080876f3fd471e6218eb747b2818f7b1ecbb9a09e914a9a001c62dc0a3d26f2fb3babfad1075cc3c84aa31a72af1311c9aba37fbdc214"])
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000200)={0x0, 0x0, 0x1})
ioctl$IOC_PR_PREEMPT(r9, 0xc05c6104, &(0x7f0000000080))
ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000040)={0x3, 0xaf, &(0x7f0000000280)="5b70ab788bb81c52b86a80a918181425c75306a1911255b2597d8c2f6fbb9e404fbd28778ca44916414615ee6fa1a17132b9d54ef66df21371facd1c7cba3a84d7baf8589f92411549e8c8f60ddb7ea84d7454b27358d4d1502a0a992f6882a58b017732d6be8467f62b719d6aebe8dbef63015abc6d7e3491f214abc44ffee4b4b35d4876d59905bcdaddfa1658aef7ca922f85a0aee2abf9b4ab5bc0ba7a13b345a389be499e9630bee564cca0ec"})

07:56:44 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="1000a9bd7000ffdbdf25c9c688f68c07b5ee08721c4c210101000600e82f00004220c1a8bace6f333df9ea6e5c4f385809c3ee03ab0b8554a416abe7df6a8a3431e406df2adc4cc82b822003821fca5a434204013e374f3b76a0a866b7ff4326c069512be54903a9e6206c78898b1ce804e71da4e25dad944a39b8f581b5584821244e68b884b986a672028fef4895834daae301f975180a2d34bb0564da3e14d291195bbcf6"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
prctl$PR_GET_DUMPABLE(0x3)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:44 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x30})

07:56:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0xffffffcf})

07:56:45 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d266051", 0xd)

07:56:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0xffffffd0})

07:56:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0xfffffff0})

07:56:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x2})

07:56:45 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x200880, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x114000})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_GET_XSAVE(0xffffffffffffffff, 0x9000aea4, &(0x7f0000000380))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000300)="66baf80cb820d7e385ef66bafc0c66b8000066ef66edf040197900c401a05f3d030000003666470f71e56bc422a13e504666b8bf000f00d0c744240003ac00000f01b989000000c7442406000000000f011c24410f23fec4a17877460f01f8", 0x5f}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r7, r6, 0x0)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000080)={0x1, @vbi={0x80000000, 0x22d, 0x3, 0x50313134, [0x7ff], [0x9, 0x5], 0x1}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:56:45 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d266051", 0xd)

07:56:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x10})

07:56:45 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0)
r2 = getpid()
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r2)
gettid()
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r3, 0x0, 0x10, 0x0}, 0x30)
write$binfmt_misc(r3, 0x0, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_S390_INTERRUPT_CPU(r7, 0x4010ae94, &(0x7f0000000240)={0x8001, 0x80, 0x9})
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000200))

07:56:45 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd70001ddcdfa3591c171b789c8941c03e"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
r3 = accept$ax25(r2, 0x0, &(0x7f00000000c0))
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
sendfile(r3, r2, &(0x7f0000000180)=0xad6c, 0x1)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r4, &(0x7f00000001c0)='s', 0xffcf)

07:56:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x2000000})

07:56:46 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x10000000})

07:56:46 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xd0ffffff})

07:56:46 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d266051", 0xd)

07:56:46 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xf0ffffff})

07:56:46 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xfdfdffff})

07:56:46 executing program 2:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup(0xffffffffffffffff)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e05b80ecdb4cb904044865160b00170002000000740004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0)
r2 = getpid()
ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r2)
gettid()
r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x615, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r3, 0x0, 0x10, 0x0}, 0x30)
write$binfmt_misc(r3, 0x0, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_S390_INTERRUPT_CPU(r7, 0x4010ae94, &(0x7f0000000240)={0x8001, 0x80, 0x9})
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000200))

07:56:46 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xfffffdfd})

07:56:47 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xffffffd0})

07:56:47 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000380)={"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"})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={<r4=>0x0})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r4, 0xc1db296ba2f28640})
ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000001c0)={r4, 0x38})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000800)={r4, &(0x7f0000000700)=""/216})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000040)={r4, 0x1})
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r8, r7, 0x0)
dup3(r6, 0xffffffffffffffff, 0x80000)

07:56:47 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x8000, 0xf022, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x2, 0x9, 0x2}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
r2 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r2, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r3=>r0})
accept$ax25(r3, 0x0, &(0x7f00000000c0))
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @remote}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000340))
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r4, &(0x7f00000001c0)='s', 0xffcf)

07:56:47 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xfffffff0})

[  895.962576] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
07:56:47 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x200000000000000})

[  896.020164] FAT-fs (loop3): Filesystem has been set read-only
07:56:47 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$NBD_SET_SOCK(r3, 0xab00, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:47 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x1000000000000000})

07:56:47 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339e", 0x13)

07:56:47 executing program 2:
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in6=@remote}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe7}, {0x0, 0x0, 0x0, 0x1}}, {{@in=@broadcast}, 0x0, @in=@empty}}, 0xe8)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0)
r0 = open$dir(&(0x7f0000000380)='./file0\x00', 0x7e, 0x0)
r1 = dup2(r0, r0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x188}, 0x1, 0x0, 0x0, 0x4ccc5}, 0x4000090)
write$FUSE_IOCTL(r1, &(0x7f0000000000)={0xfffffffffffffef9, 0x0, 0xa000000000000}, 0xfffffc34)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)

07:56:47 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000340)=""/126)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:47 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xd0ffffff00000000})

[  896.377559] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  896.449800] FAT-fs (loop3): Filesystem has been set read-only
07:56:48 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000c00ea1101fe0005000048", 0x29}], 0x1)

07:56:48 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xf0ffffff00000000})

07:56:48 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000040)="eb3204398f66732e6661a56574000204010002000274de9d8747b629a428b64352fccb1762581ef30176f3c54316cdcd2d24e0026e42e950fa187c06e9a2055f4f3c365e332e8e5ef9e6305119f3d105c2be91e2430867b3", 0x58}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

[  896.637190] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
07:56:48 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xfdfdffff00000000})

[  896.856145] FAT-fs (loop3): invalid media value (0x74)
[  896.916337] FAT-fs (loop3): Can't find a valid FAT filesystem
07:56:48 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

[  897.027913] FAT-fs (loop3): invalid media value (0x74)
[  897.038322] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[  897.049535] FAT-fs (loop3): Can't find a valid FAT filesystem
07:56:48 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r1, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r7, 0x111, 0x3, 0x1, 0x4)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)
r8 = dup(r2)
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x20000000)

07:56:48 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000000e80001dd0000040d000c00ea1101fe0005000048", 0x29}], 0x1)

07:56:48 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x2})

07:56:48 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339e", 0x13)

07:56:48 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x88802)
close(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

[  897.276673] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
07:56:49 executing program 2:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
setxattr$trusted_overlay_redirect(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1044, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r3, r2, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r5, r4, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r7, r6, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
mount$overlay(0x400000, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="2d53e37554c6f09e19d8abfee0ec2629647c5ca973d17179f8e6ce81eb86ee6ddc84b34bec7ec1799aba5695f28c", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYPTR, @ANYRES16=r5], @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESOCT=r7, @ANYRESDEC=0x0, @ANYRES32=r0, @ANYPTR, @ANYRESOCT, @ANYRES16=r1, @ANYRESOCT], @ANYRES64=0x0, @ANYBLOB="4989e5330f9a2c7dcd01e4ad55d24a43a4a7306daa1abaa401de0da536e11a27b4bbbaae8c64ce419c469c5caf8e9613fcfa8a652fe4fdb8cbf7ced9be50f3844350e99b2346794c89e6da4545e0114522df07e29d5c8cc4e507a84dec7c790e0264214b89b67d209d08554491857a9a932875d1cc7500611b54be8c27e3ed731f264c3518818ac3beac131ba32cf3164c79c44775b5fb55b6c9fa43ad5a4c022575ebcf67adadeddd951231958e202f9435fb5d02c714392b03afb75527534c92198fb7d3bddd698d"]])
chdir(&(0x7f0000000080)='./file0\x00')
mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)

07:56:49 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x10})

07:56:49 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x608, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0xc010, 0x0, 0x0, 0x0, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000180))
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYBLOB="ea52000000000000000000000100eb720600e846ceaa4bb8061f66ee032f509839020000905bc025523e93b6e8a51191fe6c0f600256dd5eb46aee92eabaf04bb0c76152a5721ce4fa1818e0b34532aed5bce73c72246879f2131af3c1cbdc7d2d20f2a733f8ab75e2e090b25615c49044e7f080843f03fa180bd548ee1c5967561b68f8bf241b47f0d9e713c9d1a978679c02746f1d807cd250cd61e8501db7f3252e29e0fbf68d0e09b23257ff905168c178efa1804170f969d4e36498622286fadd4df125f57ad18aa6c63b6b5d0b172d8cf06b58a2540b3049a32e10c6b26bcfb347174eb0a57bac5063f1fad6fd590e1cf03a93faa34f"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000340)={0x0, 0x3, 0x6, 0xf7fffffc})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0x1, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x2, 0x1, 0x0, 0xff, 0x3, 0x9, "996e7cc1"}, 0x6, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0xffff}, 0x4d18})
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x80000005)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f00000001c0)='s', 0xffcf)

07:56:49 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x2000000})

07:56:49 executing program 2:
syz_open_dev$ndb(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x81}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
mq_open(&(0x7f0000000340)='ppp1cgroup+:%\x00', 0x1, 0x8, &(0x7f0000000380)={0x8, 0x4, 0x8, 0x1})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700000000009b010000000100bb0bef3b2226579924975df083463c9786e4ba15010a48b36a8f7c17b71e8b964980031741cb6e8a138fab56415962672a4c98f77f45a70ac87b8fe3513daed2717136ad1f5e63235b1545bb8c076f2fd6946b3e3d1f2396962ae5c34d9c645a4682df1c713bb9060dcfa22872c4050807591c", @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b2000010000049d67b932043c2e20d691484ba3d34473b8b7d7f2ee4ec12c53dbf"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xf}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2e23}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}]}}]}]}]}}]}, 0x5c}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000400)=""/138, 0x8a})

07:56:49 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x10000000})

[  897.746890] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  897.760739] FAT-fs (loop3): Filesystem has been set read-only
[  897.780153] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
07:56:49 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:49 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:49 executing program 2:
madvise(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x12)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000080)={0xa30000, 0x401, 0x1, <r2=>r0, 0x0, &(0x7f0000000040)={0x990a92, 0xfffffff9, [], @p_u16=&(0x7f0000000000)=0x5}})
ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f00000000c0)=0x5422993a)

07:56:49 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0xd0ffffff})

[  897.970726] audit: type=1326 audit(1586332609.496:60): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5089 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  898.148201] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  898.195228] FAT-fs (loop3): Filesystem has been set read-only
07:56:49 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339e", 0x13)

07:56:49 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0xf0ffffff})

07:56:49 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0))
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:50 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0xfdfdffff})

[  898.458820] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  898.499882] FAT-fs (loop3): Filesystem has been set read-only
07:56:50 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "5cd898de18c9d63b", "fe310e0301213c404727d7007f7109fd", "dcdb4f0f", "cfdc485c155b9908"}, 0x28)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r8, r7, 0x0)
fremovexattr(r8, &(0x7f0000000040)=@random={'system.', '[.5systemvboxnet1!#vboxnet1\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:50 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0xfffffdfd})

07:56:50 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0xffffffd0})

[  898.754827] audit: type=1326 audit(1586332610.276:61): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5089 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  898.777414] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  898.797145] FAT-fs (loop3): Filesystem has been set read-only
07:56:50 executing program 3:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:50 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYBLOB="100029bd7000fcdbdf25210101000600e80200003e84c9485bbbb261102874a704006881ea2f0e38883a3e5237821343c4cd62f67ed90bce04be27db200f"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x0, 0x9, "996e7cc1"}, 0xc, 0x3, @planes=&(0x7f0000000080)={0x4, 0x1ff, @fd, 0x3}, 0x8000020, 0x0, <r2=>r1})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x7)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:50 executing program 2:
syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe900, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x2000010, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r1, 0x0, r2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x88802)
close(0xffffffffffffffff)
write(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607)
setsockopt$inet_int(r4, 0x0, 0x12, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff)

07:56:50 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0xfffffff0})

07:56:50 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

[  899.179398] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000202)
[  899.277073] FAT-fs (loop3): Filesystem has been set read-only
[  899.305167] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000202)
[  899.349681] FAT-fs (loop2): Filesystem has been set read-only
07:56:50 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a92", 0x16)

07:56:50 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x2})

07:56:50 executing program 3:
perf_event_open(&(0x7f000025c000)={0x1000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x80000000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000100)="660f382b1a0f01df0f300f32d9e90f79d16665676426f7c5000000000f22fd4545ef1e03e5", 0x25}], 0x1, 0x0, 0x0, 0x0)
get_thread_area(&(0x7f0000000000)={0x3, 0x0, 0x400})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r5, 0x80045700, &(0x7f0000000040))
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb], 0x10000})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$VFIO_GET_API_VERSION(r6, 0x3b64)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:56:51 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x140d, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0xa4}, 0x4804)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:51 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000100)=""/156)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5d, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="b9b8080000b800800000ba000000000f30b9800000c00f3235010000000f3066baf80cb816fbb181ef66bafc0c66ed260f01c5b8010000000f01c166baf80cb8a473e984ef66bafc0cb803000000ef0f20e035200000000f22e00f20e035100000000f22e08fc96092db0f01d1", 0x6d}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r6 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
syz_emit_ethernet(0x1, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0)

07:56:51 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x10})

[  899.594541] kvm_hv_set_msr: 269 callbacks suppressed
[  899.594556] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
[  899.691102] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
07:56:51 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x2000000})

[  899.773956] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
07:56:51 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @multicast1}, 0x10)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x2a8581, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x540c0, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000280)='pids.current\x00', 0x0, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000240)='NLBL_CALIPSO\x00')
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
socket$inet_sctp(0x2, 0x801, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000140)=0x8)
setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0), 0x14)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000400))
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0xfff, 0x203, 0x5, 0x8, r3}, 0x10)
ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000300)=""/222)

[  899.836078] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
[  899.888061] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
07:56:51 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x10000000})

[  899.936808] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
[  900.003244] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
[  900.104068] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
07:56:51 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000000801010000000000000000000000000900010073797a3100000000050003002f0000000c00a00000000000000000030600024000020000"], 0x3c}}, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r4, r3, 0x0)
fchdir(r4)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r5, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendfile(r2, r1, 0x0, 0x100000001)

07:56:51 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a92", 0x16)

07:56:51 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0xd0ffffff})

[  900.202663] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
[  900.278006] kvm [5188]: vcpu0, guest rIP: 0x108 Hyper-V uhandled wrmsr: 0x4000003d data 0x0
[  900.347399] audit: type=1804 audit(1586332611.866:62): pid=5236 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir492086616/syzkaller.mugetH/800/cgroup.controllers" dev="sda1" ino=15877 res=1
07:56:52 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0xf0ffffff})

07:56:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@quiet='quiet'}]})
ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00000000c0)={0xd000, 0x1, 0x8d, 0x7, 0x8})

07:56:52 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESOCT], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:52 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0xfdfdffff})

07:56:52 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0xfffffdfd})

07:56:52 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000380)={0x3, 0x70, 0x0, 0x80, 0x1, 0x8b, 0x0, 0x3ff, 0xe6a46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000080), 0x6}, 0x40000, 0x1e8f, 0xb6373f2, 0x5, 0x7fffffff, 0x1, 0x61d}, 0x0, 0xb, r2, 0x2)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xda00)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_int(r2, &(0x7f0000000200), 0x43400)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r4, r3, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0406618, &(0x7f0000000000)={{0x0, 0x0, @reserved="d8a52d1921ecfee505cf3dd94cb6dc39db199c862f4fefb3762a31ca60e88bab"}})
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x101001, 0x0)
ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000240)={0xc, @sdr={0x20323159, 0x7}})
r7 = dup3(r5, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000340))
ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000040)=0xffff)

07:56:52 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0xffffffd0})

07:56:52 executing program 2:
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
write$P9_RREMOVE(r3, &(0x7f0000000280)={0xfffffffffffffcd2}, 0xff7f)
r4 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
fdatasync(r3)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000200)={0x100000, r3})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
r6 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(r6, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x50, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x30f, 0x3}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c041}, 0x20000000)

07:56:52 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0xfffffff0})

[  901.373540] audit: type=1804 audit(1586332612.896:63): pid=5293 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir492086616/syzkaller.mugetH/801/bus" dev="sda1" ino=16654 res=1
07:56:52 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a92", 0x16)

[  901.452650] audit: type=1804 audit(1586332612.916:64): pid=5290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir492086616/syzkaller.mugetH/801/bus" dev="sda1" ino=16654 res=1
07:56:53 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x3)
ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0)
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
symlink(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='./bus/file1\x00')
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='lowele1,upperdir=./file0\x00'/35])
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1})
r3 = dup2(r2, r1)
dup3(r3, 0xffffffffffffffff, 0x0)
getuid()
syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
dup2(0xffffffffffffffff, 0xffffffffffffffff)
getpid()
link(&(0x7f0000000200)='./bus/file1\x00', &(0x7f00000002c0)='./bus/file0\x00')
lstat(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000340))

[  901.557204] audit: type=1804 audit(1586332613.056:65): pid=5293 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir492086616/syzkaller.mugetH/801/bus" dev="sda1" ino=16654 res=1
07:56:53 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:53 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000000)={0x40040, 0x800008151})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x4e1e01, 0x0)
r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7)

07:56:53 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x35, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0xffffffffffffffff, 0x2}, 0x400, 0xfffffffffffffffd, 0x20003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r1 = syz_open_procfs(0x0, 0x0)
r2 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r2, @ANYBLOB="10000cbddbcf2521e8020020b2edf282a16211dbf0bce619438233f7f2fd0cdfc60f0e161fee709533b800d838118587cdd5f192c18718634cb12ea931b18f91f91c2cd658204e71c3ae571710c93c7c2712ee3559d6ae571fe757"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x2, r1})
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0x0, {0x0, 0x7530}, {0x6, 0x7964d383b249b1d8, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x2, @planes=&(0x7f0000000080)={0x3, 0x203, @fd, 0x8}, 0x4d16, 0x0, <r3=>r0})
accept$ax25(r3, 0x0, &(0x7f00000000c0))
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r4, &(0x7f00000001c0)='s', 0xffcf)

07:56:53 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0xfffffffffffffffc, 0x0, 0x6})
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_PURGE_ALL_CACHES(r4, 0x770a, 0x0)

[  902.136409]  loop2: p1 < > p4
[  902.149284] loop2: partition table partially beyond EOD, truncated
[  902.212842] loop2: p1 size 2 extends beyond EOD, truncated
07:56:53 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x8, 0x0, [{0xa5d, 0x0, 0x6}, {0x2ef, 0x0, 0x2}, {0x84d, 0x0, 0x4}, {0x22f, 0x0, 0x7}, {0xb8c, 0x0, 0xb8de}, {0xb33}, {0x316, 0x0, 0x8}, {0x40000081, 0x0, 0x1}]})
r5 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200)={0x40})

[  902.337441] loop2: p4 start 1854537728 is beyond EOD, truncated
07:56:54 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67", 0x18)

07:56:54 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x80000)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4000})
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0x79, 0x7}, 0x1, 0x5, 0x0, {0x74, 0x1f}, 0x2})
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000180)=0x9)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
setsockopt$inet6_tcp_buf(r5, 0x6, 0xb, &(0x7f0000000000)="9cdbbe71f2b926097b104028114a6f891d1866fdc9e11891a74ee51dce6f297bd351a83e33ed83c3b484b952b45e77b428456ad943e573984b0a70680907de971f7042ef136ac61516c38a3c3b278122d5683e34b9114e5d8a5f07995fca430261fa56d5f07ab380112c7f09a8590246a9d40436fb3757f66d0a74a896da61e6258552b8aeab9fe290405221aa92d910", 0x90)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x40})

07:56:54 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:54 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x100000, 0x4})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x40000000, 0x0, 0x0, 0x13, 0x1, "7746f8053661cac0811c32c911a0ea35630f16636b4aaab6ba532e2070321446d944bb240c7dfdd6d3cc823378cfd51f9d16f3e9e6d9f7e460528cb0ec58bb8e", "3e7c48f44509528ab4d0d4d36f669e3932fb02c72831f5c8fbbac3272cea8ad381073b959168fc74e299c74cd09f8f0cdd5194b4ac723bc18e7adcd0986b470d", "f4ab3c07f9fe22089c5d445df9771bd4be0fc7fa0768ee6f3ee488fed7d8ece0", [0x401, 0x800]})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x20)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={r8, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000000100)=0x84)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200)={0x2040, 0x0, 0x0, 0xfffffffc})

07:56:54 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0xfffffffffffffff8}, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="10000000df27573c91350600195035fb"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
ioctl$KVM_DEASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae75, &(0x7f0000000340)={0x752c, 0x38, 0x80, 0x606})
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:54 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x80000000})
prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000))

[  902.954164]  loop2: p1 < > p4
[  902.957717] loop2: partition table partially beyond EOD, truncated
[  903.036103] loop2: p1 size 2 extends beyond EOD, truncated
[  903.155547] loop2: p4 start 1854537728 is beyond EOD, truncated
[  903.256754] overlayfs: unrecognized mount option "lowele1" or missing value
07:56:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
set_mempolicy(0x2, &(0x7f0000000000)=0x1f, 0x6)
connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10)
sendmsg$can_raw(r0, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000a000)=@canfd={{0x1}, 0x0, 0x1, 0x0, 0x0, "0327e1b22b5fcef75e9c699f5fda86ca08999e39576a7d5eb2bd6e6866856b76004e2f966324af7f3bfd9b0b00000000000000708f00"}, 0x48}}, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8180, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x30, r2, 0x0)

[  903.558724] overlayfs: unrecognized mount option "lowele1" or missing value
07:56:55 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
gettid()
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYRES16=r1, @ANYBLOB="30003f1bb0672238bd7000ffffdf0000004a16cc252a0bf1828867dd303c6f4fee7df099890d9a212870e58d981da998fab91f35832dce1fc9353e18aade4ab291beb033ac46e7b762e7ba7993e96542b7c802b21fa4e963f96505ac14d856ad51b9e8b7587f07889f1ed7c44863d626745ada70a88d4f1fd28b5152ff7f0000599ed955bcc5e4a61cbddef9a364bd00219771596d9588f2f41575ea01019a10685ca7f02707ff2a8c902f8e4d7d2539680b74c7340c32992d61e4987a8a8625b44780000d4d39c30051cdfa648c5615860d92458c02ca8d3d27594db5cf17376104e77a114482ccb512bfdf307fe4f75df7dbd8157f9a00", @ANYBLOB="14fe6cfb8fc00ccc36c560ff657ed1043a2a333e7ca488f87399e8a9d15874696d3035d427551dab6c57839bd3994092e773b7a6cf529b560e3cc54161f46d21d50f6e4f4366e7bcf1b7"], 0x3}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={0x0, 0x100000000})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:55 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67", 0x18)

07:56:55 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000000)={<r9=>r8})
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r10, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x0, 0xfffffffc}}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44490}, 0x0)

07:56:55 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:55 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb)

07:56:55 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000001c0), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x1)
r0 = creat(&(0x7f0000000140)='./file0\x00', 0x20)
r1 = socket$inet6(0xa, 0x400000000001, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x20)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000180)={r3, 0x40}, 0x8)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r4, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60)
r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x80000, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r5, 0x770a, 0x0)
r6 = creat(&(0x7f0000000000)='./file0\x00', 0x188)
mmap$usbmon(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r6, 0x2)
sendmsg$nfc_llcp(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "897ac14da1451f0e7cb94363cee1a10593984cd894ce48d9722c2b9d525993104caed9e6c5649688ebc8832a264003994c4c740a1dd51e8594feba6965dd4f"}, 0x60, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000380)="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", 0x5b0}], 0x2}, 0x0)

[  903.855177]  loop2: p1 < > p4
[  903.867657] loop2: partition table partially beyond EOD, truncated
[  903.917860] loop2: p1 size 2 extends beyond EOD, truncated
[  904.061812] loop2: p4 start 1854537728 is beyond EOD, truncated
07:56:55 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pipe(&(0x7f0000000480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10)
close(r5)
r10 = socket(0xa, 0x3, 0x87)
connect$inet6(r10, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr="ffbbe500000000000040000b00"}, 0x1c)
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r3, 0x0, r5, 0x0, 0x10005, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0xb8, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa499}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x17, 0x4, 0xfffffffd}]}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf11}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20044010}, 0x20040040)

07:56:55 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000002600)='batadv\x00')
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="eba700000000000000000a00000008000300", @ANYRES32], 0x4}}, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r6, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x441e}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040}, 0x0)

07:56:55 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67", 0x18)

07:56:55 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:55 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67", 0x18)

07:56:55 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000000)={0x6, {0x5, 0x40, 0xb59a, 0x6}, {0x7fff, 0x5, 0x401, 0xffff413e}, {0x1, 0x1}})
r5 = dup3(r1, r0, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
inotify_add_watch(r8, &(0x7f0000000040)='./file0\x00', 0x600)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200)={0x40})

[  904.598305]  loop2: p1 < > p4
[  904.629317] loop2: partition table partially beyond EOD, truncated
07:56:56 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="f50829bd7000fedbdf252101010006003f0000005310d20e3ae847eb58758d628928b0eb3c7f86ac2c2442134052238097efec9e46e578d3cc7ee31f692fdbc8adfc62e805e311cfd70b7e1bb07d77edfab6e7b9f0048cf0fe39bb02c5712ecfa672d282b9b4d92ad84857e30be87ddbbfe6980160cc4dc34d73df1d6125bdf30a2323850e4ee4a870de33cb17db0cce5ecd82f24e47c05f91c46dae20373b8aff0000005c7a9dc6"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:56 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x1, 0x2)
dup3(r2, r1, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1)
r4 = dup3(r3, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000000)={0x40, 0x0, 0x0, 0x1})

[  904.704024] loop2: p1 size 2 extends beyond EOD, truncated
[  904.869215] loop2: p4 start 1854537728 is beyond EOD, truncated
07:56:56 executing program 1:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2000, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000040)=0x5)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200)={0x40})

07:56:56 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:56:56 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:57 executing program 5 (fault-call:19 fault-nth:0):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:56:57 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @broadcast}, 0x4, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)="9aef4604", 0x4}, {&(0x7f0000000240)="5f70f25a26fa946a9255a52fa833d3a774ef3c0f775e2da91957e9db972a1dd2596e026fe5008484b32c130a434f89175f7bf438320f324348185b30976a5ce1575dbc39a0c86158394e1a39a14704622d0757337a93ec337ae93fb14044b82128693dce75d324dbba7e3ab65e56c4b1559c28123b92f87be9ef58cb3efab714afc62a1a03c5", 0x86}, {&(0x7f0000000300)="65590e85806eb1843123a9d9423e934ec439a011d709acf92361c04b0c832fc40d703bad77726b6e8c53f275be1ee0b1bb5dff", 0x33}], 0x3, &(0x7f0000000380)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}, 0x1)
ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/498, @ANYRESDEC, @ANYRES32, @ANYRES16])
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000640))
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
ioctl$SOUND_MIXER_READ_RECMASK(r8, 0x80044dfd, &(0x7f0000000040))
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000100)={0xffffffffffffc035, 0x9, 0x0, 0x100})

07:56:57 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x10000, 0xbf8, {}, {0x3, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000180)={0x3, 0x1, @fd, 0x8}, 0x804d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x140e, 0x400, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x9}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040042}, 0x24000804)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:57 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67", 0x18)

[  905.637319]  loop2: p1 < > p4
[  905.640683] loop2: partition table partially beyond EOD, truncated
07:56:57 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x6, 0x24}, {0x1, 0x1}, {0x9, 0x5}, {0x2, 0xacb4}, {0x7fa2, 0x9}, {0x3ff, 0x3}, {0x0, 0x6d7c}]})
syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00')

[  905.688338] loop2: p1 size 2 extends beyond EOD, truncated
[  905.734233] loop2: p4 start 1854537728 is beyond EOD, truncated
07:56:57 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:57 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x69, 0x3, 0x2, "1246df1d31fcb940361a1810c601ec3e138dce322d1b98bac215c702215ed092", 0x34324d59})
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$RTC_PIE_ON(r5, 0x7005)

[  906.031359]  loop2: p1 < > p4
[  906.035706] loop2: partition table partially beyond EOD, truncated
[  906.070164] loop2: p1 size 2 extends beyond EOD, truncated
07:56:57 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x9, 0x0, 0xb4, 0xffff}, {0xfffd, 0x7, 0x9, 0x8}, {0x101, 0x18, 0x0, 0x71f}]})
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'team0\x00', <r7=>r6})
ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000001840)={@empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast1, 0x5, 0x401, 0x2, 0x500, 0x81, 0x400100, r7})
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r8 = dup3(r5, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200)={0x40})
socket$inet_dccp(0x2, 0x6, 0x0)

[  906.097525] loop2: p4 start 1854537728 is beyond EOD, truncated
07:56:57 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  906.216792] audit: type=1326 audit(1586332617.736:66): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5530 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
[  906.412221] FAULT_INJECTION: forcing a failure.
[  906.412221] name failslab, interval 1, probability 0, space 0, times 0
[  906.439626]  loop2: p1 < > p4
[  906.446845] loop2: partition table partially beyond EOD, truncated
[  906.464505] CPU: 0 PID: 5501 Comm: syz-executor.5 Not tainted 4.19.114-syzkaller #0
[  906.472549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  906.482519] Call Trace:
[  906.485578]  dump_stack+0x188/0x20d
[  906.489427]  should_fail.cold+0xa/0x1b
[  906.493644]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  906.498815]  ? __lock_is_held+0xad/0x140
[  906.502950]  __should_failslab+0x115/0x180
[  906.507346]  should_failslab+0x5/0xf
[  906.511115]  kmem_cache_alloc_trace+0x2c6/0x7a0
[  906.515905]  sctp_stream_init_ext+0x47/0x1f0
[  906.520434]  sctp_sendmsg_to_asoc+0x113e/0x1640
[  906.525257]  ? find_held_lock+0x2d/0x110
[  906.529344]  ? lock_sock_nested+0xa6/0x110
[  906.533619]  ? sctp_transport_lookup_process+0x1b0/0x1b0
[  906.539106]  ? lock_acquire+0x170/0x400
[  906.543110]  ? mark_held_locks+0xa6/0xf0
[  906.547193]  ? __local_bh_enable_ip+0x159/0x270
[  906.551882]  ? sctp_sendmsg_check_sflags+0x1b9/0x280
[  906.557096]  sctp_sendmsg+0xf71/0x1610
[  906.561009]  ? find_held_lock+0x2d/0x110
[  906.565094]  ? sctp_id2assoc+0x2c0/0x2c0
[  906.569187]  ? avc_has_perm+0x384/0x5b0
[  906.573183]  inet_sendmsg+0x12e/0x590
[  906.577001]  ? ipip_gro_receive+0x100/0x100
[  906.581372]  sock_sendmsg+0xcf/0x120
[  906.585102]  sock_write_iter+0x283/0x3c0
[  906.589178]  ? sock_sendmsg+0x120/0x120
[  906.593178]  ? inode_has_perm.isra.0+0x175/0x210
[  906.598054]  ? find_held_lock+0x2d/0x110
[  906.602143]  __vfs_write+0x512/0x760
[  906.605877]  ? kernel_read+0x110/0x110
[  906.609787]  ? selinux_file_permission+0x87/0x520
[  906.614653]  ? security_file_permission+0x84/0x220
[  906.619608]  vfs_write+0x206/0x550
[  906.623023] loop2: p1 size 2 extends beyond EOD, truncated
[  906.623164]  ksys_write+0x12b/0x2a0
[  906.632563]  ? __ia32_sys_read+0xb0/0xb0
[  906.636648]  ? __ia32_sys_clock_settime+0x260/0x260
[  906.641690]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  906.646471]  ? trace_hardirqs_off_caller+0x55/0x210
[  906.648212] loop2: p4 start 1854537728 is beyond EOD, truncated
[  906.651508]  ? do_syscall_64+0x21/0x620
[  906.651530]  do_syscall_64+0xf9/0x620
[  906.651551]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  906.651562] RIP: 0033:0x45c889
[  906.651575] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  906.651582] RSP: 002b:00007f5d3a3bac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  906.651595] RAX: ffffffffffffffda RBX: 00007f5d3a3bb6d4 RCX: 000000000045c889
[  906.651602] RDX: 0000000000000019 RSI: 0000000020000100 RDI: 0000000000000004
[  906.651610] RBP: 000000000076bfa0 R08: 0000000000000000 R09: 0000000000000000
[  906.651617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006
[  906.651624] R13: 0000000000000c4c R14: 00000000004ca0ad R15: 0000000000000000
07:56:58 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67", 0x18)

07:56:58 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220001, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1fc, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, &(0x7f00000015c0)={0x74, "d88840dd96133dfa6198290dd2012e62864c3e7f2b2a5bd77bf04c5374d1df0f75ec6a4e157c24403a58ca2f18e359e303b644535192f3417029bbfbbe7e471535194ca32750fc850ff2102634cc7986cbe36c188d6ea3c9c8d64b41b80a28fa9fcfd68acd9aebad01b0e615e56511456a3d80f62b04e6aa1d60f83ac0fc6d7c"})
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:58 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  907.004697] audit: type=1326 audit(1586332618.526:67): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=5530 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f6ca code=0x0
07:56:58 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:58 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000040))
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000000)={0x7, 0x100, 0x2, {0x3, 0x8, 0x3, 0x7}})
recvmmsg(r2, &(0x7f0000004d00)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)}, {&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f0000000240)=""/136, 0x88}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x4}, 0x400}, {{&(0x7f0000001300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001380)=""/140, 0x8c}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2, &(0x7f0000002480)=""/233, 0xe9}, 0x3f}, {{&(0x7f0000002580)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000003600)=""/142, 0x8e}, {&(0x7f00000036c0)=""/158, 0x9e}, {&(0x7f0000003780)=""/200, 0xc8}, {&(0x7f0000003880)=""/76, 0x4c}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/138, 0x8a}, {&(0x7f00000049c0)=""/147, 0x93}, {&(0x7f0000004a80)=""/138, 0x8a}], 0x9, &(0x7f0000004c00)=""/245, 0xf5}, 0x1}], 0x3, 0x40000022, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
ioctl$PIO_FONTRESET(r8, 0x4b6d, 0x0)

[  907.293973]  loop2: p1 < > p4
[  907.299003] loop2: partition table partially beyond EOD, truncated
07:56:58 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0xb9737411f16d789, 0x4)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x28100, 0x0)

[  907.352319] loop2: p1 size 2 extends beyond EOD, truncated
07:56:59 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(r0, r0, 0x80000)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40, 0x8001, 0x7})

[  907.517407] loop2: p4 start 1854537728 is beyond EOD, truncated
07:56:59 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x101000, 0x0)
ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x7ff)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})

07:56:59 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:59 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:56:59 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYBLOB="100083f8a51a356d69203ebd8d36c8a589d65a827000ffdbdf252101"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x1, 0x1, 0x9, 0x1f, 0x11c, &(0x7f0000000340)})
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:56:59 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x34000)

[  908.199621]  loop2: p1 < > p4
[  908.214683] loop2: partition table partially beyond EOD, truncated
[  908.250582]  loop3: p1 < > p4
[  908.266343] loop3: partition table partially beyond EOD, truncated
[  908.292792] loop2: p1 size 2 extends beyond EOD, truncated
[  908.316058] loop3: p1 size 2 extends beyond EOD, truncated
[  908.412496] loop2: p4 start 1854537728 is beyond EOD, truncated
[  908.428288] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:00 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:00 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  909.075015]  loop2: p1 < > p4
[  909.122912] loop2: partition table partially beyond EOD, truncated
[  909.184585]  loop3: p1 < > p4
[  909.202840] loop3: partition table partially beyond EOD, truncated
[  909.206630] loop2: p1 size 2 extends beyond EOD, truncated
07:57:00 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, r0})
accept$ax25(r1, 0x0, &(0x7f00000000c0)=0xffffffffffffff14)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f00000001c0)='s', 0xffcf)

[  909.246993] loop3: p1 size 2 extends beyond EOD, truncated
07:57:00 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x20000119)

[  909.328144] loop2: p4 start 1854537728 is beyond EOD, truncated
[  909.340105] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:01 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:01 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x341203)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  909.850934]  loop2: p1 < > p4
[  909.856880] loop2: partition table partially beyond EOD, truncated
[  909.903021] loop2: p1 size 2 extends beyond EOD, truncated
[  909.944193]  loop3: p1 < > p4
[  909.950388] loop3: partition table partially beyond EOD, truncated
[  909.991926] loop3: p1 size 2 extends beyond EOD, truncated
[  910.016316] loop2: p4 start 1854537728 is beyond EOD, truncated
[  910.192134] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:01 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:01 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000180))
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="f7ff28bd700008000000210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:57:02 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:02 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff3b9}, 0x0, 0xfffffffffffdfffc, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  910.588658]  loop2: p1 < > p4
[  910.602480] loop2: partition table partially beyond EOD, truncated
[  910.660131] loop2: p1 size 2 extends beyond EOD, truncated
[  910.663073]  loop3: p1 < > p4
[  910.714962] loop3: partition table partially beyond EOD, truncated
[  910.729553] loop2: p4 start 1854537728 is beyond EOD, truncated
[  910.783334] loop3: p1 size 2 extends beyond EOD, truncated
07:57:02 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  910.954220] loop3: p4 start 1854537728 is beyond EOD, truncated
[  911.170575]  loop2: p1 < > p4
[  911.217065] loop2: partition table partially beyond EOD, truncated
[  911.282844] loop2: p1 size 2 extends beyond EOD, truncated
07:57:02 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  911.415060] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:03 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88088, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000180)={0xd6bd, 0xfffffffffffffffd, 0xf7, 0xfffffffe})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0xe51e)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x20000000, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:03 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  911.618803]  loop3: p1 < > p4
[  911.636807] loop3: partition table partially beyond EOD, truncated
07:57:03 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x2)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  911.697830] loop3: p1 size 2 extends beyond EOD, truncated
[  911.811661]  loop2: p1 < > p4
[  911.850470] loop2: partition table partially beyond EOD, truncated
[  911.873207] loop3: p4 start 1854537728 is beyond EOD, truncated
[  911.897276] loop2: p1 size 2 extends beyond EOD, truncated
[  911.919287] loop2: p4 start 1854537728 is beyond EOD, truncated
[  911.989442]  loop2: p1 < > p4
[  911.989908] loop2: partition table partially beyond EOD, truncated
[  912.016832] loop2: p1 size 2 extends beyond EOD, truncated
[  912.076653] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:03 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000180))
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="f7ff28bd700008000000210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:57:03 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:03 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x88000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x4, 0x3ff, 0x2, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @mcast1, 0x10000}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  912.563220]  loop2: p1 < > p4
[  912.577719] loop2: partition table partially beyond EOD, truncated
[  912.639332] loop2: p1 size 2 extends beyond EOD, truncated
07:57:04 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x40, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='p\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e1e, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:04 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="2849c8b96a193811df05210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  912.744690] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:04 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:04 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  913.190055]  loop2: p1 < > p4
[  913.206160] loop2: partition table partially beyond EOD, truncated
[  913.252431] loop2: p1 size 2 extends beyond EOD, truncated
[  913.335632] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:04 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000180))
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="f7ff28bd700008000000210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:57:05 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:05 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x5, 0x1, 0x1f}, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  913.801055]  loop2: p1 < > p4
[  913.805863] loop2: partition table partially beyond EOD, truncated
[  913.875456] loop2: p1 size 2 extends beyond EOD, truncated
[  914.036441] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:05 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:05 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x13, 0x90, 0x0, 0x20, 0x0, 0x5f, 0x29411, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x9}, 0x0, 0x20000000001, 0x0, 0x0, 0x1, 0xffffffff}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  914.528059]  loop2: p1 < > p4
[  914.536315] loop2: partition table partially beyond EOD, truncated
[  914.610642] loop2: p1 size 2 extends beyond EOD, truncated
[  914.740470] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:06 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000180))
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="f7ff28bd700008000000210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:57:06 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8e300d847f4e7d300"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:57:06 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  915.200983]  loop2: p1 < > p4
[  915.204248] loop2: partition table partially beyond EOD, truncated
[  915.239058] loop2: p1 size 2 extends beyond EOD, truncated
07:57:06 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000180)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  915.373239] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:07 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  915.822540]  loop2: p1 < > p4
[  915.828800] loop2: partition table partially beyond EOD, truncated
07:57:07 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="2849c8b96a193811df05210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  915.894560] loop2: p1 size 2 extends beyond EOD, truncated
07:57:07 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  916.026181] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:07 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:07 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:07 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  916.470831]  loop2: p1 < > p4
[  916.481675] loop2: partition table partially beyond EOD, truncated
07:57:08 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:08 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  916.566752] loop2: p1 size 2 extends beyond EOD, truncated
07:57:08 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  916.742947] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:08 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:08 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
accept4$packet(r3, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  917.189176]  loop2: p1 < > p4
07:57:08 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="2849c8b96a193811df05210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  917.212985] loop2: partition table partially beyond EOD, truncated
07:57:08 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x2)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  917.283304] loop2: p1 size 2 extends beyond EOD, truncated
[  917.430691] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:09 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  917.639568] __loop_clr_fd: partition scan of loop2 failed (rc=-16)
07:57:09 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  917.982200]  loop2: p1 < > p4
[  917.985375] loop2: partition table partially beyond EOD, truncated
[  918.020395] loop2: p1 size 2 extends beyond EOD, truncated
[  918.065010] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:09 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="2849c8b96a193811df05210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

07:57:09 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:10 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x2)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  918.583013]  loop2: p1 < > p4
[  918.593834] loop2: partition table partially beyond EOD, truncated
[  918.652314] loop2: p1 size 2 extends beyond EOD, truncated
[  918.743446] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:10 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:10 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  919.178177]  loop2: p1 < > p4
[  919.181872] loop2: partition table partially beyond EOD, truncated
[  919.265021] loop2: p1 size 2 extends beyond EOD, truncated
[  919.339808] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:11 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:11 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  919.703411]  loop2: p1 < > p4
[  919.706907] loop2: partition table partially beyond EOD, truncated
[  919.742027] loop2: p1 size 2 extends beyond EOD, truncated
[  919.973715]  loop3: p1 < > p4
[  919.977012] loop2: p4 start 1854537728 is beyond EOD, 
[  919.981804] loop3: partition table partially beyond EOD, 
[  919.982697] truncated
[  920.018435] truncated
07:57:11 executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x2)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="100029bd7000ffdbdf25210101000600e8020000"], 0x2}, 0x1, 0x0, 0x0, 0x2}, 0x4048040)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000002c0)={0xcb220000, 0x8, 0x4, 0x1000000, 0xbf8, {}, {0x6, 0x1, 0x0, 0x5, 0x3, 0x9, "996e7cc1"}, 0x8, 0x3, @planes=&(0x7f0000000080)={0x3, 0x1ff, @fd, 0x8}, 0x4d18, 0x0, <r2=>r0})
accept$ax25(r2, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video0\x00', 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r3, &(0x7f00000001c0)='s', 0xffcf)

[  920.045579] loop3: p1 size 2 extends beyond EOD, truncated
[  920.144214] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:11 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:12 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:12 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2000000000007f, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000240), 0x4}, 0x48205, 0x0, 0x0, 0x0, 0x1, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
creat(0x0, 0x4d)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000380)='{\x00\xbe\x18\xccb]^5\x81\xb5(\xce\xdf\xdf\xdee\x1d\xf2\x9d^\x81s\x15\x1f/{h \x88\xd3\xfe]D\xb0\x8a/\x94\x94uW\x8b\x83\x95\xe2g\xc9Z\xca\xa0\"\xca:\xd0\b.#\xcc\xea\xf9\xa5,\x84\xa6\a\x04\x17F\xb3\xa4\xa4\f\xffcm\x9b\x89\xad\xf8&\xce`Ln\xefk\xf7\x81\x91\xeb\xfaa\xd7\x13\xfa\x89M\xe71\xd01\xaf\xdaxk\xe5\\\xbb\xb4\xf7\xaf\xc2#s\xc3\xed!\xa0\xf99\x9coiQ\xc0f\x96\xc4\x82\x9c\xa9pl\xcd\xe7\xfb@\x7f\xd7yIW\xf1\x9a\x1f\xf9\xba\x89\x96')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f0000000280)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  920.438791]  loop2: p1 < > p4
[  920.451395] loop2: partition table partially beyond EOD, truncated
[  920.496499] loop2: p1 size 2 extends beyond EOD, truncated
[  920.583729] loop2: p4 start 1854537728 is beyond EOD, truncated
[  920.683998]  loop3: p1 < > p4
[  920.707188] loop3: partition table partially beyond EOD, truncated
[  920.777828] loop3: p1 size 2 extends beyond EOD, truncated
07:57:12 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:12 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  920.987705] loop3: p4 start 1854537728 is beyond EOD, truncated
[  921.041066]  loop2: p1 < > p4
[  921.073750] loop2: partition table partially beyond EOD, truncated
[  921.121543] loop2: p1 size 2 extends beyond EOD, truncated
[  921.274199] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:12 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:12 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:13 executing program 2:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  921.628459]  loop3: p1 < > p4
[  921.642652] loop3: partition table partially beyond EOD, truncated
07:57:13 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  921.686031] loop3: p1 size 2 extends beyond EOD, truncated
[  921.808041]  loop2: p1 < > p4
[  921.810457] loop3: p4 start 1854537728 is beyond EOD, truncated
[  921.813092] loop2: partition table partially beyond EOD, truncated
07:57:13 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  921.862111] loop2: p1 size 2 extends beyond EOD, truncated
[  921.998421] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:13 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:13 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7f, 0x88000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:13 executing program 2:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x20)
r5 = accept$phonet_pipe(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10)
accept(r5, 0x0, &(0x7f0000000100))
bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @random="296a38ddf216"}, 0x14)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x3f}, 0x5}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @remote}], 0x3c)
memfd_create(0x0, 0x0)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24)

07:57:13 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  922.425258]  loop2: p1 < > p4
[  922.435482] loop2: partition table partially beyond EOD, truncated
[  922.475257] loop2: p1 size 2 extends beyond EOD, truncated
07:57:14 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x100000001, 0xe3, 0x0, 0x2, 0xd, 0x11, "d41ee291a1b4c2c30f95fb47f25c4c3b528ab269fc0994e5c5f37bfc5a1e586dad9db58e02ad4662f7ae9b204e6a5aa15e6f01598b87ca8edb6f7c4de40e9699", "9bc7b64c7f32a30178e718ea826fa94bc921bba29238f6926a164b79af238ae17e63421070f120cd7d0cfe294954f52c0b2ed0503ed22ccaf7ca58da051025d7", "a7e6a266d6b9f0aade93803775a6195771e789b8e919c4a077970516d7891f7f", [0x75d, 0x400]})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:14 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000f00)=0x1000000, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x20)
r5 = accept$phonet_pipe(r4, &(0x7f0000000000), &(0x7f0000000040)=0x10)
accept(r5, 0x0, &(0x7f0000000100))
bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x40, 0x6, @random="296a38ddf216"}, 0x14)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x3f}, 0x5}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e20, @remote}], 0x3c)
memfd_create(0x0, 0x0)
r6 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24)

[  922.670689] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:14 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x6, [<r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r1, 0x3}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x8001, 0x7, [0x20, 0xb000, 0x3, 0x7, 0xf, 0x1ff, 0x5]}, 0x16)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
getpid()
getpid()
unshare(0x40000000)

07:57:14 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1})
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x4}, 0x200, 0xffffffff, 0x0, 0x8, 0xfffffffffffffff5, 0x8000, 0x4500}, r0, 0xa, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
dup3(r2, r3, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
connect$l2tp6(r7, &(0x7f0000000040)={0xa, 0x0, 0x6, @mcast2, 0xffff, 0x1}, 0x20)
dup2(r1, r4)

07:57:14 executing program 2:
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  922.941976] IPVS: ftp: loaded support on port[0] = 21
07:57:14 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7f, 0x88008, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x5}, 0x40001, 0x0, 0x3, 0x4, 0xffffffffffffffff, 0x8b01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x20060001)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  923.078693]  loop2: p1 < > p4
[  923.090295] loop2: partition table partially beyond EOD, truncated
[  923.122868] loop2: p1 size 2 extends beyond EOD, truncated
[  923.240471] loop2: p4 start 1854537728 is beyond EOD, truncated
[  923.335611] IPVS: ftp: loaded support on port[0] = 21
07:57:14 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:15 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000180)="7a0ed5aec54e33eaae8ec7418fb85415f5612d6e8f7baef1223656890de2f0dd18cce0d55dcfd39227e4ee434bfe5d04db82cb9cd600a88eb295e382b2543b25f5a24bf40b6b2c8a5186f0bf513ae2ea1b86056172a5a4c32d6b5adf8601faa28533c16921702f07128b2a11b792f81650a91063396df3ea7f9b11b35cdcdc51c3520c7364e20b870ff1f61a362b82ce09c1b8a7eb2c1529f836b0442d33e779e496a47586348efea3dd", 0xaa, <r8=>0x1})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000000)="b37de4b336df86c0341174875f103983756bec6d71d9af0fc97ad7fab3c672388a17e015662a6c05f16780ddab9f7ac06ecf221f344d121523a91e74b42c3fd6692e28b7edfe96af09ba", 0x4a, r8})
r9 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x80026101, &(0x7f0000000080))

[  923.598667]  loop2: p1 < > p4
[  923.607180] loop2: partition table partially beyond EOD, truncated
[  923.648866] loop2: p1 size 2 extends beyond EOD, truncated
07:57:15 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r4, 0x80026101, &(0x7f0000000080)={0x3, 0xffffffff, 0x8f})
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4)

[  923.725913] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_setup(0x3, &(0x7f0000000000)=<r0=>0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(r0, 0x0, 0x0)
open(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x6, [<r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x1c)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={r1, 0x3}, &(0x7f0000000240)=0x8)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r2, &(0x7f0000000000)='threaded\x00', 0x248800)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x8001, 0x7, [0x20, 0xb000, 0x3, 0x7, 0xf, 0x1ff, 0x5]}, 0x16)
ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)
getpid()
getpid()
unshare(0x40000000)

07:57:15 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000007f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:15 executing program 4:
r0 = gettid()
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0xe)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r0, 0x0, 0x0)
perf_event_open(0x0, r0, 0x4, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x80026101, &(0x7f0000000080))

07:57:15 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:15 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x80026101, &(0x7f0000000080))

[  924.054397] IPVS: ftp: loaded support on port[0] = 21
[  924.169627]  loop2: p1 < > p4
[  924.172797] loop2: partition table partially beyond EOD, truncated
[  924.187707] loop2: p1 size 2 extends beyond EOD, truncated
[  924.197371] loop2: p4 start 1854537728 is beyond EOD, truncated
[  924.255252]  loop2: p1 < > p4
[  924.263266] loop2: partition table partially beyond EOD, truncated
[  924.278643] loop2: p1 size 2 extends beyond EOD, truncated
[  924.325101] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:16 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}]}}}]}, 0x3c}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$SNDRV_PCM_IOCTL_PAUSE(r6, 0x40044145, &(0x7f00000000c0)=0x1)
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0xfffffffffffffffd)

07:57:16 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000180)={{0x4, 0x1}, 'port1\x00', 0x74, 0x2, 0xc5f87e5, 0x10000, 0x8, 0x7, 0x8d98, 0x0, 0x4})
r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
r7 = socket$inet6(0xa, 0x400000000001, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x20)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000000)=r9, 0x4)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:57:16 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8a624, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x17, &(0x7f0000000000)=0xd, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:16 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:16 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:17 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  925.591029]  loop2: p1 < > p4
[  925.606016] loop2: partition table partially beyond EOD, truncated
[  925.671007] loop2: p1 size 2 extends beyond EOD, truncated
07:57:17 executing program 4:
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x2000, 0x0)
r1 = gettid()
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0xe)
r2 = gettid()
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0xe)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
ptrace$setregset(0x4205, r2, 0x3, &(0x7f0000000040)={&(0x7f0000000180)="bb83e17428304ab1af6c53ea72f3fc0ee29647c385d1f694cd2d0e568d848fd45055794fa6a07ff8d21582e5ef5a7c973d3b1f0c27de7080b212ba36fb046a96c724cdfcb12857e0b180e0fb318023176538e72d88f563c0df83e0b9d4bbfeae09d9e567de65fa7be5d7e9cac24c2cb7eb9535508d7d38911a3462dd827e6017903e613a42ac2fb11bb2e9d82cd9ddcc47d6e5e97aefbdc1a33e84bbc4783e987e403f56a01f88beb6600bdfecb32a181fa156b604bf84e0a46ae1692abce514216a", 0xc2})
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r1, 0x0, 0x0)
perf_event_open(0x0, r1, 0x204000040000001, r0, 0x1)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080))

[  925.791978] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:17 executing program 0:
r0 = syz_open_dev$mouse(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:17 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0xffffffffffffffff})

07:57:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
accept4$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x0, 0x80000)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
io_setup(0x0, 0x0)
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0)
dup3(0xffffffffffffffff, r1, 0x0)
io_submit(0x0, 0x0, 0x0)
r2 = open(0x0, 0x0, 0x0)
fchdir(r2)
r3 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000000)={{}, 0x8})
open(&(0x7f0000000040)='./file0\x00', 0x125000, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000180))
getpid()
getpid()
sched_setscheduler(0x0, 0x2, 0x0)
pipe(0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
unshare(0x40000000)

07:57:17 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x810001})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x3)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}})

07:57:17 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(r4, r3, 0x80000)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080)={0xffffffbfffffffff, 0x1ff, 0x0, 0x800})
write$9p(r5, &(0x7f0000000000)="8d37f2b00f01c59985b6d641d44fc8460ee714421a67ea8727ca9e98bb5f853acea3d7cba9d7c716b44ea90bea24004db968986e98474a0d4f5d0afa9fcf4111d67709afc55822f3bcb671a2357ea6cae45959b51398d541bac667f8724b429891bf11193c82bdbe6df027b821c21be9686a4d158f78cd52", 0x78)
r6 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x200)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000100))
ioctl$IOC_PR_PREEMPT(r9, 0xc05c6104, &(0x7f0000000080))
ioctl$UI_SET_PROPBIT(r9, 0x4004556e, 0x15)
ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000240))
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:57:17 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:18 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x810001})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x3)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}})

07:57:18 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7d, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x7793, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x20004004)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bsg\x00', 0x80002, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:18 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x810001})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x3)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}})

07:57:18 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0x0, 0x100004, 0x3363, 0x8001})

[  926.599862] IPVS: ftp: loaded support on port[0] = 21
[  926.669542]  loop2: p1 < > p4
[  926.685521] loop2: partition table partially beyond EOD, truncated
07:57:18 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xc8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xf9, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  926.758983] loop2: p1 size 2 extends beyond EOD, truncated
[  926.917300] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:18 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  927.245376]  loop2: p1 < > p4
[  927.250344] loop2: partition table partially beyond EOD, truncated
[  927.280910] IPVS: ftp: loaded support on port[0] = 21
[  927.285747] loop2: p1 size 2 extends beyond EOD, truncated
[  927.344133] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:19 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x810001})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x3)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}})

07:57:19 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:19 executing program 3:
r0 = socket(0x10, 0x3, 0x100)
write(r0, &(0x7f0000000040)="240000001e005f031400fffffffffff8070037b2b3448647a0e09658dc000208000800ff", 0x24)
recvmmsg(r0, &(0x7f0000005180), 0x800000000000331, 0x2266, 0x0)

[  927.643155]  loop2: p1 < > p4
[  927.653944] loop2: partition table partially beyond EOD, truncated
07:57:19 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x810001})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x3)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

[  927.690827] loop2: p1 size 2 extends beyond EOD, truncated
[  927.745509] 9pnet: Insufficient options for proto=fd
07:57:19 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x810001})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x3)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

[  927.770882] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:19 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x7f, 0x88000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000000))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000180)=0x8, 0x3)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x5608, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000240)=""/198)
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x6)

[  927.875578] 9pnet: Insufficient options for proto=fd
07:57:19 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:19 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x810001})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000080)=0x3)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

07:57:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r0, 0x5608, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$EVIOCGNAME(r6, 0x80404506, &(0x7f0000000240)=""/198)
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x6)

[  928.165259] 9pnet: Insufficient options for proto=fd
07:57:19 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x810001})
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}})

[  928.308504]  loop2: p1 < > p4
[  928.320610] loop2: partition table partially beyond EOD, truncated
07:57:19 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}})

07:57:19 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000340)=0x14, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  928.363414] loop2: p1 size 2 extends beyond EOD, truncated
07:57:20 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r7}})

[  928.443875] loop2: p4 start 1854537728 is beyond EOD, truncated
[  928.563998]  loop3: p1 < > p4
[  928.579636] loop3: partition table partially beyond EOD, truncated
07:57:20 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r5, r4, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}})

[  928.635524] loop3: p1 size 2 extends beyond EOD, truncated
07:57:20 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}})

07:57:20 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  928.745900] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:20 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x1, 0xf8690, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800000000000000}, 0x6940, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x4, 0x8010000000000084)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(0xffffffffffffffff, &(0x7f0000000100)="eae12f3ce66b5009434da809c7dd42f60dec9eb04a926a67df68a494430b1616", 0x20)

07:57:20 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}})

07:57:20 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}})

[  929.023992]  loop2: p1 < > p4
[  929.038550] loop2: partition table partially beyond EOD, truncated
07:57:20 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r2, r1, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}})

[  929.103646] loop2: p1 size 2 extends beyond EOD, truncated
07:57:20 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
accept$ax25(r2, &(0x7f0000000000)={{}, [@default, @netrom, @netrom, @rose, @bcast, @bcast, @null, @null]}, &(0x7f0000000080)=0x48)
syz_emit_ethernet(0x46, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "e0ae39", 0x10, 0x0, 0x0, @local, @ipv4, {[@dstopts={0x0, 0x1, [], [@generic={0x4}, @jumbo={0xc2, 0x4, 0x20480}]}]}}}}}, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0x1, @rand_addr="94183698a496a70ad2af81d45574f550", 0x4}, 0x1c)

07:57:20 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  929.251408] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x6889c0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000007f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x9, 0x5, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000180))
r2 = socket$inet6(0xa, 0x5, 0x8010000000000084)
bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x9, 0x4)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:20 executing program 3:
sched_setscheduler(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0x0, 0x0}, 0x10)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0x4, 0x3})
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000040)={0x7, 0x0, 0x401, 0x6})
r4 = creat(&(0x7f0000000240)='./file0\x00', 0x1)
fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000280))
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
getsockname(r5, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

07:57:21 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:21 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xf}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x4, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  929.586593] EXT4-fs (loop3): Unrecognized mount option "ýÿ?" or missing value
[  929.606597]  loop2: p1 < > p4
[  929.622121] loop2: partition table partially beyond EOD, truncated
[  929.630447] EXT4-fs (loop3): failed to parse options in superblock: ýÿ?
[  929.673593] loop2: p1 size 2 extends beyond EOD, truncated
[  929.686838] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  929.730918] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  929.771605] loop2: p4 start 1854537728 is beyond EOD, truncated
[  929.781679] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  929.837998] EXT4-fs error (device loop3): ext4_fill_super:4435: inode #2: comm syz-executor.3: iget: root inode unallocated
[  929.895367] EXT4-fs (loop3): get root inode failed
[  929.929968] EXT4-fs (loop3): mount failed
07:57:21 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:21 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev={0xac, 0x14, 0x14, 0x23}, @dev={0xac, 0x14, 0x14, 0x23}}, 0xc)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={0x7})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r0, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  930.082262]  loop2: p1 < > p4
[  930.092557] loop2: partition table partially beyond EOD, truncated
[  930.120066] loop2: p1 size 2 extends beyond EOD, truncated
07:57:21 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:21 executing program 3:
socket$kcm(0x10, 0x2, 0x10)
syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x1e, 0x1, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x802100, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000340)={'ah\x00'}, &(0x7f0000000380)=0x1e)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x14, 0x0, 0x917}, 0x14}}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="07002000000000e67f81", @ANYRES16, @ANYBLOB="000429bd7000ffdbdf250800000006001a004e22000400000000020000000c00100001000000000000000600e206c2c1e03fcf938d58899c9d2cd6231d0006000000891c0b000400000014001f00"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40011)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x10)
r5 = socket(0x1, 0x803, 0x2)
bind$l2tp6(r4, &(0x7f0000000080)={0xa, 0x0, 0xe40, @loopback, 0x7, 0x4}, 0x20)
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x40735, 0x0, 0x2000000, 0x0, 0x0, 0x1, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x0)
r6 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r6, &(0x7f0000000900), 0x10)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000010}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@newlink={0x90, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @ipip6={{0xb, 0x1, 'ip6tnl\x00'}, {0x50, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x24}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x35}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r7}, @IFLA_EXT_MASK={0x8, 0x1d, 0x7fffffff}]}, 0x90}}, 0x0)

[  930.241909] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:21 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:21 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:21 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:21 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x44800, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000)=0x200, 0xfffffffffffffed9)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d266051565d061521339eb04a926a67", 0x19)

07:57:22 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:22 executing program 3:
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000100)=0x2, 0x2c7)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff4e34443227c5d388144f479d005aff"}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000180)={0x6, 0x9, 0xb8, 0x10000, 0x9, 0x1})
r4 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00')
sendfile(r1, r5, 0x0, 0xa808)
r6 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r7 = socket(0x11, 0x800000003, 0x0)
bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r7, &(0x7f0000000040)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(r6, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', r8})

[  930.554282]  loop2: p1 < > p4
[  930.566374] loop2: partition table partially beyond EOD, truncated
07:57:22 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  930.614496] loop2: p1 size 2 extends beyond EOD, truncated
07:57:22 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  930.698965] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:22 executing program 2:
syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:22 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  930.993469]  loop2: p1 < > p4
[  930.998436] loop2: partition table partially beyond EOD, truncated
[  931.042334] loop2: p1 size 2 extends beyond EOD, truncated
[  931.126094]  loop3: p1 < > p4
[  931.134435] loop3: partition table partially beyond EOD, truncated
[  931.150333] loop2: p4 start 1854537728 is beyond EOD, truncated
[  931.170537] loop3: p1 size 2 extends beyond EOD, truncated
07:57:22 executing program 2:
syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  931.267758] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:22 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x45, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x40})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000180))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x31}}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  931.519529]  loop2: p1 < > p4
[  931.532445] loop2: partition table partially beyond EOD, truncated
07:57:23 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  931.573034] loop2: p1 size 2 extends beyond EOD, truncated
07:57:23 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  931.673643] loop2: p4 start 1854537728 is beyond EOD, truncated
[  931.742363]  loop3: p1 < > p4
[  931.752548] loop3: partition table partially beyond EOD, truncated
[  931.806585] loop3: p1 size 2 extends beyond EOD, truncated
07:57:23 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
io_cancel(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3, 0xffffffffffffffff, &(0x7f0000000240)="5b1a6b4fce3ce0fe843105279d304327a56de05164c819a72ff5fd443e37e2b0ad4fb5863e5b4cffe9d8129fa6d593ee38b5cda3baa8bb631ef90b0f069e30db44b23dcd4e7f6abeba1b8f5a1b1ced0d249c936836a7498f862caf01abc4f309e7fe243edb31c0f45a542360760aebdf7199254b17dcd52ff0453c3e008f42fa880689e485517c9604cd85e4659dc334fa0d39741eaf9d2af5de", 0x9a, 0x9, 0x0, 0x3}, &(0x7f00000001c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(0xffffffffffffffff, &(0x7f0000000340)="eae52f3ce66b5009434d2660515d061521339eb08a956535d8b175b1374a926a67df261df6dd8989505c67ce1b343071d4dff24c79b4d8af535d329351a8e9aac1f0e7a750ad5d5a075be07d7d0000000000000001ba967fb63b97332923846045fb45083014", 0x66)

07:57:23 executing program 2:
syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  931.929615] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:23 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x44800, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000)=0x200, 0xfffffffffffffed9)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d266051565d061521339eb04a926a67", 0x19)

07:57:23 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000080)={0x0, 0xfffffffffffff801, 0xc1})
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  932.220236]  loop2: p1 < > p4
[  932.238875] loop2: partition table partially beyond EOD, truncated
[  932.283614] loop2: p1 size 2 extends beyond EOD, truncated
[  932.415871] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:24 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:24 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  933.024938]  loop2: p1 < > p4
[  933.052672] loop2: partition table partially beyond EOD, truncated
[  933.122569] loop2: p1 size 2 extends beyond EOD, truncated
07:57:24 executing program 3:
openat$kvm(0xffffffffffffff9c, 0x0, 0x44800, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0xc9, &(0x7f0000000000)=0x200, 0xfffffffffffffed9)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d266051565d061521339eb04a926a67", 0x19)

[  933.254956] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:25 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:25 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:25 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7f}, 0x0, 0xc, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x11c)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
r2 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r3 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000240)=0x8)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:25 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:25 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  933.745685]  loop2: p1 < > p4
[  933.759995] loop2: partition table partially beyond EOD, truncated
[  933.797607] loop2: p1 size 2 extends beyond EOD, truncated
07:57:25 executing program 3:
syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:25 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  933.906452] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:25 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  934.051435]  loop3: p1 < > p4
07:57:25 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  934.092947] loop3: partition table partially beyond EOD, truncated
07:57:25 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:25 executing program 0:
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0xffffffffffffffff)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

[  934.183816] loop3: p1 size 2 extends beyond EOD, truncated
[  934.291728] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:25 executing program 0:
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0xffffffffffffffff)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

[  934.342198]  loop2: p1 < > p4
[  934.349279] loop2: partition table partially beyond EOD, truncated
07:57:26 executing program 0:
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0xffffffffffffffff)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}})

[  934.422543] loop2: p1 size 2 extends beyond EOD, truncated
07:57:26 executing program 0:
r0 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  934.577636] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:26 executing program 3:
syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:26 executing program 0:
r0 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:26 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:26 executing program 0:
r0 = socket$unix(0x1, 0x0, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:26 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x2000000000, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000001c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:26 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)})
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f00000002c0))
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$SNDCTL_DSP_GETFMTS(r2, 0x8004500b, &(0x7f0000000000)=0x3)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x6})
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="20000100050601010000000000000000030800000010030073797a31000000002c3c7cffca74e58c895c8777a267bc2d178764f50ea4cb21487088131bd5aea7b3c6816ce1911b37a848ac58cb0d6d37b32fc9a77fd9d84f9c7616106c05e73f0b6c1e5355b66c4e5e75d293ff465cec6792e5f4364335f33ceff115627e190ccf9d5409d12f01c2fa9866e7501fc892004476e4813e11e6f7e2f6221124b8da0874aa4ff267e425a752d97bb25fb1b766110630523223be3b5346c2daea430c7f92e5c9b6230a50f711460aa645ffba6eb442cb0d9227c488fdf8144e8c4b08"], 0x1}, 0x1, 0x0, 0x0, 0x8860}, 0x4804)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="4c000000593dba00bbec41f68aceeadf568967a9cd5a70e014323495ad94addcad3535f854ae26b1c5006b538d15463746d088d5d833f4b9f46766392ab7fd048f3ef8bb3ac4c7b058d0866ab8831f1ec61e5f649dc51df99068dd3c80533556466e4696226dbdf80e657a22e64162562c194a7644c86f1b0d289e74543ac9031af8f2bbcf466dc93ee7ac505c0654acad8bbf58d6de736e8ed28c489a488fa3da4605481c7a7c0a33355f7e3342e3367c95a4e916be84b552b2328ea26c311769dc9dcc5ebce8393889bf21acf1203ee521c67494caa828af8bb1bb8b4b92549396db08864965d4f685394a4890fd20e003299117d2a9cee51b2bed63af2acd34d6b07c0de00982415748327a404fb4a7a2b7211938000000000000000000000000320461f861af843da1ae0a0903da028483a5c0f06a8cb7921af779229e6701aeeb34cf65dc8c1302b3733166cdf9036c3a82a14ae6311d25bd3001893232a49dc04bf08bf6cb8e155d192fed0606c69fc0a04f99e77878af87421e1b38156373d42585209e5ab5633754c338915e37b471a0a286fc5c5a98760a653ee198246c0eefda6c40079fc62a3572564b7dbc623114b17568ec43d6fa3fb23871ec7bb401633f7cabb56deb5203d2fb363ec27009b26c16c5f6f92f0ca2ce582a0ee61ec5e1dfbb9564d3886aec66fbfad93d512319c855a3c48194d3", @ANYRES16=r7, @ANYBLOB="02000c3f0000fddbdf25030000000b0001005e776c616e31000014000500ff02000000000000000000000000000108000c000000000008000800ac1414bb08000800e0000002"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0xc016)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="020003419e2111aace98e30000495da355aeae4288c261f7513ff57ac2f9c5c94c7ce92b9d0270e023b191b94d24e70fe402ab4ded21e125a26a3bb3b057261a3c6a", @ANYRES16=r7, @ANYBLOB="000300000000fddbdf250300000008040c0002000000080002000300000008000400000000000800040002000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x25}, 0x488b0)

07:57:26 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  934.930829]  loop3: p1 < > p4
[  934.946392] loop3: partition table partially beyond EOD, truncated
[  934.966487]  loop2: p1 < > p4
[  934.972071] loop2: partition table partially beyond EOD, truncated
[  935.011736] loop2: p1 size 2 extends beyond EOD, truncated
[  935.013064] loop3: p1 size 2 extends beyond EOD, truncated
[  935.043588] loop2: p4 start 1854537728 is beyond EOD, truncated
[  935.083031]  loop2: p1 < > p4
[  935.086357] loop2: partition table partially beyond EOD, truncated
[  935.124970] loop2: p1 size 2 extends beyond EOD, truncated
07:57:26 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x0, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:57:26 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  935.169176] loop3: p4 start 1854537728 is beyond EOD, truncated
[  935.176074] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:26 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:26 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:26 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2b86, 0x28881)
openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)

[  935.499295]  loop2: p1 < > p4
[  935.518526] loop2: partition table partially beyond EOD, truncated
[  935.536244] loop2: p1 size 2 extends beyond EOD, truncated
07:57:27 executing program 3:
syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x1, 0x0, {0x2}}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, 0x0, 0x0)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:27 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000000)={{{@in=@initdev, @in=@broadcast}}, {{}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8)

[  935.557762] loop2: p4 start 1854537728 is beyond EOD, truncated
[  935.582486]  loop2: p1 < > p4
[  935.585782] loop2: partition table partially beyond EOD, truncated
07:57:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, 0x0, 0x0)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  935.628021] loop2: p1 size 2 extends beyond EOD, truncated
[  935.652482] loop2: p4 start 1854537728 is beyond EOD, truncated
[  935.675062]  loop3: p1 < > p4
[  935.681857] loop3: partition table partially beyond EOD, truncated
[  935.697479] loop3: p1 size 2 extends beyond EOD, truncated
[  935.811795] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, 0x0, 0x0)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:27 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x202, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001480)='/dev/vcsu\x00', 0x400, 0x0)
getpeername$inet(r6, &(0x7f00000014c0), &(0x7f0000001500)=0x10)
mmap$snddsp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x810, r5, 0x8000)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$VIDIOC_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x9188, 0x200, 0x9, 0x8, 0x0, 0x80000000, 0xfac, 0x9, 0xc9ff, 0x2, 0x2, 0x5, 0x5, 0x0, 0x9, 0x2599, 0x20, 0x6, 0x6, 0x7, 0x7, 0x9, 0x80000001, 0x400, 0x2, 0x7fff, 0x0, 0x86, 0x3, 0x5b, 0x6, 0xfffffffd]})
ioctl$DRM_IOCTL_MODE_SETGAMMA(r9, 0xc02064a5, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000040)=[0xb7e], &(0x7f00000000c0)=[0x9468, 0x6, 0x20, 0x7], &(0x7f0000000100)=[0x9, 0x0]})
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:57:27 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:27 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000180)={0x1000000000})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:27 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  936.077461]  loop2: p1 < > p4
[  936.081604] loop2: partition table partially beyond EOD, truncated
07:57:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  936.129273] loop2: p1 size 2 extends beyond EOD, truncated
[  936.183839] loop2: p4 start 1854537728 is beyond EOD, truncated
[  936.219201]  loop3: p1 < > p4
[  936.226686] loop3: partition table partially beyond EOD, truncated
07:57:27 executing program 1:
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x100000009})

07:57:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:27 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  936.324866] loop3: p1 size 2 extends beyond EOD, truncated
07:57:27 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0xffffffffffffffff)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:27 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8920, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={0x1, 0x7, 0x1})
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r0, 0x29, 0x62, &(0x7f0000000000)=0x40, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:27 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x0, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

[  936.400914] loop3: p4 start 1854537728 is beyond EOD, truncated
07:57:28 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0xffffffffffffffff)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  936.479216]  loop2: p1 < > p4
[  936.482946] loop2: partition table partially beyond EOD, truncated
[  936.505902] loop2: p1 size 2 extends beyond EOD, truncated
07:57:28 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(0xffffffffffffffff)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  936.549606] loop2: p4 start 1854537728 is beyond EOD, truncated
[  936.565707]  loop2: p1 < > p4
[  936.569160] loop2: partition table partially beyond EOD, truncated
[  936.592054] loop2: p1 size 2 extends beyond EOD, truncated
[  936.624612] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:28 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:28 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x2}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f00000000c0)={0x8, 0x102, 0x1, {0x9, 0x1, 0x7, 0x101}})
sendto$inet6(r0, &(0x7f0000000080)="ddd42b6fbe018c0fd6454c1c197f3d33e09ab821d2d4a12e56215e467e31e680293762515ccbb9998553b80599f5782bdd34176878c2", 0x36, 0x20000009, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d849193613efc21de0568857f3fc3b4d", 0x7ffb}, 0x1c)

07:57:28 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2824c27, 0x0)
syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x3ff, 0x5, &(0x7f0000000480)=[{&(0x7f0000000140)="719a10fdaa860dcb997156439efc8b63b31b6cad69c4b0cde25fe74cbbeb49e4fe2d94043225e5c3e1ea62e7f5086419d2f67f3e2ae6133fac48049af58f8684734062849cc37540f9cd3e65828df3b1becb0f465a8599967db6d16db94b08c7ff53a2a4f2d5b4d60f7b9720b34fff46aab5d3fc6687d6fc290535ac434b222a9b47b9275a0aaa15023c78b2c56c9c88d9427517426c8dcde3f0493ef75b8c6fd7772879d7fc66d28026", 0xaa, 0x4}, {&(0x7f0000000200)="bdc2dffebc6f055e73fce6a1ec86e53e3b", 0x11, 0x2}, {&(0x7f00000002c0)="fbdefe8daf184edbcd022f4092dda5f0ef702892795070f912d4c42646655e5ce2cdf2138edc82d625c75648ecb13537193aeaaf123655531aa48e952de115d9024211f09d87021ccb5a80a936ce21b784041bf67298cfa9c94d3c5c90af31c1c780", 0x62, 0xef}, {&(0x7f0000000340)="3c189578f9db9fc3e92638f7e4613c5dc56abf56a08a8232d49d1bd5e6743cbae883bd53520e0803393c4d96b7417309ec9886ba757f2a41f1932262511963ccc45ed105acb3a7238a08bac6ab54358e2cced060bb4d0a494ba8a3f3f13abae357076f1d94849ffdd0ea8a0c452771b892b3206e268af1f8f62a0f350d13af235187c58bae05c5555d50ecaf00eb2c1a7678c7a0de7dcf76b050bc759d5a2c706fbc2db8194c5103970498919792fd4df6fa4a1f88c5ef9a14f7f7855f666d48eb005380e49027bb684b9f16015f6df1c8186e1b0c3d", 0xd6, 0x87b}, {&(0x7f0000000440)="cb580f3af74986569b8c9449b5b4be059a75d2f5acec798fe38eac994fe4d86a532dfcbb5a0cf4ede613cce83dd726835dd3a207799b6564b56b", 0x3a, 0x40}], 0x10000, &(0x7f0000000500)='vfat\x00')

[  936.829356]  loop2: p1 < > p4
[  936.832650] loop2: partition table partially beyond EOD, truncated
[  936.862431] loop2: p1 size 2 extends beyond EOD, truncated
[  936.902072] loop2: p4 start 1854537728 is beyond EOD, truncated
[  936.931609]  loop2: p1 < > p4
[  936.937157] loop2: partition table partially beyond EOD, truncated
[  936.976041] loop2: p1 size 2 extends beyond EOD, truncated
[  937.012428] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:28 executing program 3:
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x28000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000040)={0x0, 0x9, 0x20f9, [], &(0x7f0000000000)=0x20})

07:57:28 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:28 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66bd009434d1b60515d061521339eb04a926a67df", 0x19)

[  937.219168]  loop2: p1 < > p4
[  937.222660] loop2: partition table partially beyond EOD, truncated
07:57:28 executing program 3:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040))
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0)
fchdir(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, 0x1c)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0xe, &(0x7f0000000300), &(0x7f00000002c0)=0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x411, 0x6, 0x84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0)
r4 = fanotify_init(0x0, 0x0)
fanotify_mark(r4, 0x2000000000000011, 0x2, r3, 0x0)
r5 = fanotify_init(0x0, 0x0)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x600080, 0x48)
fanotify_mark(r5, 0x1, 0x20, r6, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x0, 0x8, 0x80}}, 0x28)
r7 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="ffd90395cc2e60631c1405e52372000971678f1dc1e55fbdd20f679e1700"], 0x2a)
sendfile(r7, r7, &(0x7f0000000240), 0x7fff)

[  937.271207] loop2: p1 size 2 extends beyond EOD, truncated
[  937.322084] loop2: p4 start 1854537728 is beyond EOD, truncated
[  937.367022]  loop2: p1 < > p4
[  937.370464] loop2: partition table partially beyond EOD, truncated
[  937.420850] loop2: p1 size 2 extends beyond EOD, truncated
07:57:29 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  937.488697] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:29 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  937.733087]  loop2: p1 < > p4
[  937.737596] loop2: partition table partially beyond EOD, truncated
[  937.770402] loop2: p1 size 2 extends beyond EOD, truncated
[  937.810518] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:29 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  938.062446]  loop2: p1 < > p4
[  938.066837] loop2: partition table partially beyond EOD, truncated
[  938.096426] loop2: p1 size 2 extends beyond EOD, truncated
[  938.148762] loop2: p4 start 1854537728 is beyond EOD, truncated
[  938.159835] audit: type=1804 audit(1586332649.678:68): pid=7190 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir500657676/syzkaller.JZfs46/1003/file0/file0" dev="ramfs" ino=110314 res=1
[  938.197139]  loop2: p1 < > p4
[  938.220614] loop2: partition table partially beyond EOD, truncated
[  938.244856] loop2: p1 size 2 extends beyond EOD, truncated
[  938.267759] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:29 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:29 executing program 3:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x14d000, 0x0)
read$dsp(r0, &(0x7f0000000240)=""/4088, 0xff8)
ioctl$SNDCTL_DSP_STEREO(r0, 0x5000, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r2, r1, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000040)={0x9a0000, 0x81, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x990a2d, 0x0, [], @value64=0x100}})
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000080))
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = dup3(0xffffffffffffffff, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f00000000c0)=0x4, 0x4)

07:57:29 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:29 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  938.419327]  loop2: p1 < > p4
[  938.422591] loop2: partition table partially beyond EOD, truncated
[  938.457467] loop2: p1 size 2 extends beyond EOD, truncated
[  938.496599] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x2000000, 0x5, 0x0, 0x0, 0x0, 0xf6}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, 0xffffffffffffffff, 0x0)
writev(r3, &(0x7f0000000740), 0xb)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
write(r2, &(0x7f0000000440)="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", 0x188)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0xffffffffffffffc3, 0x6, 0x40, 0x8, 0x3, 0x0, 0x1}, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xcc, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1c000000000000}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000600), &(0x7f0000000700))
perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x8000000200036941, 0x800007b, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))

07:57:30 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

[  938.827569]  loop2: p1 < > p4
[  938.833664] loop2: partition table partially beyond EOD, truncated
07:57:30 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:30 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x34}, {0xfffe}]}]}, {0x4}}}]}]}, 0x60}}, 0x0)

[  938.874071] loop2: p1 size 2 extends beyond EOD, truncated
[  938.957080] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:30 executing program 3:
prctl$PR_MCE_KILL(0x35, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0)
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={<r7=>r6, 0x7, 0x20}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r7, 0x1ff}, 0x8)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x19, 0x9, 0x7, 0x800}, 0x8)
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0)

07:57:30 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:30 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:30 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendmsg$IPSET_CMD_RENAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000100050601010000000000000000030000000910030073797a31000000002c3c7cffca74e58c895c8777a267bc2d178764f50ea4cb21487088131bd5a6b5b3c6816ce1911b37a848ac58cb0d6d37b32fc9a75f1bba4f9c"], 0x1}}, 0x4804)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="02002abd7000fddbdf25030000000b0001005e776c616e31000014000500ff02000000000000000000000000000108000c000000000008000800ac1414bb08000800e0000002"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0xc016)
sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r5, 0x300, 0x0, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, r5, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'em0eth1\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200)={0x40})

[  939.296573]  loop2: p1 < > p4
[  939.300209] loop2: partition table partially beyond EOD, truncated
[  939.328669] loop2: p1 size 2 extends beyond EOD, truncated
[  939.365729] loop2: p4 start 1854537728 is beyond EOD, truncated
[  939.410549]  loop2: p1 < > p4
[  939.414090] loop2: partition table partially beyond EOD, truncated
[  939.459351] loop2: p1 size 2 extends beyond EOD, truncated
[  939.496940] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:31 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}])

07:57:31 executing program 3:
prctl$PR_MCE_KILL(0x35, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0)
clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={<r7=>r6, 0x7, 0x20}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={r7, 0x1ff}, 0x8)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x19, 0x9, 0x7, 0x800}, 0x8)
exit(0x0)
preadv(r0, &(0x7f0000000500), 0x37d, 0x0)

07:57:31 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = accept4(r2, &(0x7f0000000000), &(0x7f0000000080)=0x80, 0x0)
getsockopt$packet_int(r3, 0x107, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/locks\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000008fc0)='IPVS\x00')
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000091c0)={0x0, 0x0, &(0x7f0000009180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="b545000000000000000010"], 0x3}}, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000f0", @ANYRES16=r5, @ANYBLOB="02002dbd7000fcdbdf250e0000002c0001800a0006006c626c637200000006000200210000000c000700060000000200000008000500000000003400018008000b007369700008000b0073697000060004004e220000060004004e240000060004004e2200000800050000000000"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x1)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r5, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20004001)

07:57:31 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_config_ext={0x0, 0x7}, 0x8823}, 0x0, 0x9, 0xffffffffffffffff, 0xa)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @empty, 0x4}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  939.749005]  loop2: p1 < > p4
07:57:31 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
pipe(&(0x7f0000000000))
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
syz_open_dev$tty1(0xc, 0x4, 0x4)

[  939.778755] loop2: partition table partially beyond EOD, truncated
[  939.815339] loop2: p1 size 2 extends beyond EOD, truncated
07:57:31 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_inet_SIOCDARP(r8, 0x8953, &(0x7f00000000c0)={{0x2, 0xe22, @remote}, {0x306, @local}, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'veth0_to_bridge\x00'})

[  939.966501] loop2: p4 start 1854537728 is beyond EOD, truncated
07:57:31 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(r0)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:31 executing program 3:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'batadv_slave_1\x00', {'wg2\x00'}, 0x3})
r3 = dup2(r1, r2)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4fa179a33bf1ab0d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="e0f89b2d4e3b78f61689b82b18a023b9f2c75ca189d6fd6706d0e9796a1cb865604f"])

07:57:31 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

07:57:31 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400002, 0x0)
ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0)
r3 = dup3(r2, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})
r4 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r5 = socket(0x11, 0x800000003, 0x0)
bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(r4, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
r7 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r8 = socket(0x11, 0x800000003, 0x0)
bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r8, &(0x7f0000000040)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(r7, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x0, @in={0x2, 0x4e21, @rand_addr=0xa0000000}, @can={0x1d, r6}, @xdp={0x2c, 0x7, r9, 0x11}, 0x76, 0x0, 0x0, 0x0, 0x1f, &(0x7f00000000c0)='wg2\x00', 0x7ff, 0x6, 0x400})

07:57:31 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:31 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:31 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:32 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

07:57:32 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000056b03ef6cbd764ced8c9b743dc9275555211808ca1dd356c1e11cab8f4d9edea613d59d43b473256896c228a93011665164025776682fae402192820e0badf40ca5ef5d9ea9c16e2f3172bde68db1304d1aecf85b7fcc62aea9593e87a1bd30621304e006cd044c", @ANYRES32=<r3=>0x0], &(0x7f000095dffc)=0x417)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={<r4=>r3, 0x1ff}, &(0x7f0000000200)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000003c0)={r3, 0x1}, 0x8)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x440c4)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYRES16=r4, @ANYBLOB="e5db449e337442882d8dec0f3bced80a0a9b2c6f7a4710bb1ecd586b0000000000e573893d1d98b09e0a45f49ae6b82df4dae35e26cff128009cbc06c3091767e293ed891e2921210432ea5d29a24591876e81eeeb97f8b767ed9740f9809323f5f94eac437c576695af1b2001cc2c2622b26911f91a3446e19c034e000000", @ANYBLOB="005c939e1119da8c7500000000000100626f6e642005256459497d7681369131b406000000000c0002009e9ba3ca060000006cc9fc8cabd8820a2aea8410828ce71b8bae32"], 0x3}}, 0x10)
sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x3dfd7d4c9ad74d1d}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40004)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000200)=0x4)
socket(0x1, 0x803, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r6, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe847a071")
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x70, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42df58543c8380db}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @broadcast}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x5}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "0286487a6eb53743461743bb"}, @IFLA_MASTER={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000)

07:57:32 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  940.556869] 9pnet: Insufficient options for proto=fd
07:57:32 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:32 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000000))

[  940.709673] 9pnet: Insufficient options for proto=fd
07:57:32 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:32 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000240)="eae12f3ce66b5009434d2660515d06018000000000000067dfd16ac6c1d01ef6420c8be46194c9115889cf5e2a6121ecd29d4fdb2e0766f12256b5b80f7be6f0ba09f4a07b30135dc5a26c7900b78a22ff63a9033f524d5e00767f8731040d03adb1d53c4c8aa66aa200c11a7c8ddb9da562d44ec825ef683783db968a94dff446022e0c7c5d46f78180d90eae5ab74948e0ff7b6e44b2f1d392251d2ae5daaac668511f87373d1fddc3d5eb60b5f84bc647aad36e7cc452c887ebede15c443a35071e7dc9635eb8463ca8417c73c8f19891c9e80f0635f717a9c57e2235682ff90a3cddee59aaaf12386ec0e289092e8bcff5988be057088421aabe9450c71fcff675921d80a2cc0b5f7f5c5f0b8d3c9101228b171a654ecb8b7e61f81bd60bf327cdc98f73b6b5f329a1e92d7b78fa9eeb75dfb30752038a8be8868b3c705b4803d96fdd5715b455927077da89d16703ac0362e6a5be41f78d4d2235e0dd241e223c66b4bc165339d43b9492d77e9ae71c35b1931fd4", 0x177)

07:57:32 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, 0x0)

07:57:32 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
socket(0xa, 0x2, 0x0)
setreuid(0x0, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x7ff, 0x4e22, 0x0, 0xa, 0xa0, 0x80, 0x6c}, {0xfffffffffffffc00, 0xd641, 0x545, 0xffffffff, 0x800, 0x9, 0x400, 0xffffffffffffffff}, {0xfff, 0xffffffffffffffff, 0x7}, 0x4, 0x6e6bb1, 0x6b601848a598cc0e, 0x1, 0x1, 0x2}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x0, 0x2, 0x2a, 0x4, 0x9, 0x9}}, 0xe8)
ioprio_set$uid(0x0, 0x0, 0x3ff)
dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r4, r3, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r5=>0x0, <r6=>0x0})
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000100)={0x80007, 0x4000001, 0x6, 0x8})
ioctl$IOC_PR_PREEMPT(r9, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)={0xfffffffe, 0x9, 0x4, 0x0, 0x5564, {r5, r6/1000+10000}, {0x1, 0x0, 0x1f, 0x8, 0xe0, 0x40, "11551625"}, 0x5, 0x2, @planes=&(0x7f00000000c0)={0x8, 0x80, @mem_offset=0x81}, 0x3, 0x0, r9})
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000180)={0x40, 0x0, 0x400})

07:57:32 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x28000003, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
mmap$snddsp_status(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x82000000)
sched_setscheduler(0x0, 0x5, 0x0)
fcntl$setown(r1, 0x8, 0x0)
mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1c6)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x1510c0, 0x0)
writev(r3, &(0x7f0000003440)=[{&(0x7f0000000200)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31", 0x8e}], 0x1)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TCSETA(r4, 0x5406, &(0x7f0000000000)={0xe82})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="e8ffffffffffffff"], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x2010, r5, 0xffffd000)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'batadv_slave_0\x00', 0x1}, 0x18)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x3, r2})

[  940.925542] 9pnet: Insufficient options for proto=fd
07:57:32 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:32 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:32 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000000))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))

07:57:32 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, &(0x7f0000000140))

07:57:32 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:32 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:32 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:32 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x5, 0xa2}, {0x5, 0x5739}, {0x2}, {0x7, 0x7}, {0x7, 0x80}, {0xfff8, 0x3}]})
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})

[  941.502729] QAT: Invalid ioctl
[  941.536265] QAT: Invalid ioctl
07:57:33 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={0x0, 0x4185})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:33 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, &(0x7f0000000140))

07:57:33 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:34 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000001c0))
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x28000003, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
mmap$snddsp_status(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x82000000)
sched_setscheduler(0x0, 0x5, 0x0)
fcntl$setown(r1, 0x8, 0x0)
mount$fuse(0x20000000, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
r2 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x1c6)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x1510c0, 0x0)
writev(r3, &(0x7f0000003440)=[{&(0x7f0000000200)="681604810bf9fcffe352b28ef7e9f7d4363ee17901a6850e4ae33c2194e48d61da7263f1c233feafbc9f424f80f34c3e59763a766f63f65a8c5ef063370f487fbe302b7a68ad55c34c3afd8e5c0dfee3c3fe720232ffb27b75d8795446b648feb6903c1eeacdd8fd4c4002f2911dc7fb4e408ccdaeba7b87024901d7e6a2aac4ee3611ec9188215005e06f4cdb31", 0x8e}], 0x1)
ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc))
r4 = syz_open_pts(r3, 0x0)
ioctl$TCSETA(r4, 0x5406, &(0x7f0000000000)={0xe82})
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000040))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="e8ffffffffffffff"], 0x8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6, 0x2010, r5, 0xffffd000)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000140)={0x1, 'batadv_slave_0\x00', 0x1}, 0x18)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x101000, 0x0)
ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000000c0)={0x3, r2})

07:57:34 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x2, 0x5c})
setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000000)={0x3c, @remote, 0x4e20, 0x1, 'lc\x00', 0x4, 0x3, 0x27}, 0x2c)

07:57:34 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0)

07:57:34 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x0, &(0x7f0000000140))

07:57:34 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r8, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_inet_udp_SIOCINQ(r8, 0x541b, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000040)={0x0, 0x200000000000040, 0x0, 0x200})
ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000})

07:57:34 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0)

07:57:34 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x8001})

07:57:34 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x1a0}])

07:57:34 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, 0x0)

[  943.109588] Dev loop2: unable to read RDB block 1
[  943.116220]  loop2: unable to read partition table
[  943.146961] loop2: partition table beyond EOD, truncated
07:57:34 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40000)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e1e, 0x624, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  943.155812] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:34 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:34 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video2\x00', 0x2, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
signalfd(r1, &(0x7f0000000040)={[0x4]}, 0x8)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080)={0x4})
ioctl$FIBMAP(r5, 0x1, &(0x7f0000000000)=0x5)

[  943.256238] 9pnet: Insufficient options for proto=fd
07:57:35 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8180, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x102}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:35 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:35 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x1a0}])

07:57:35 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000000)={0xa, {0x857a, 0x0, 0x7}, {0x1, 0xfffffff7, 0x4, 0x1f}, {0x7fff, 0x1}})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1c, 0x2, 0x3, 0x1, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14190000000000000000000000000000000000003739b7660f8a018fe9f402ffb97ceb98acfae8658f9b5537fb2c983f5da04ecdc91880ea3cf120ffad58f7ea7db2caa5ef0ecdfdfc10ce14fdcee8ceccf264efa2edd555e0c99e02eaff8d552ae542ef3315f40a7f459a3e2cda43623ac0d5087cda6f"], 0x14}}, 0x0)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0xd, 0x2, {{0x4, 0x4}, 0x7f}}, 0x18)
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, &(0x7f00000002c0)={0x0, @reserved})
ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0)

07:57:35 executing program 3:
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r0=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff})
socket$inet(0x10, 0x2, 0x0)
socket(0x10, 0x80002, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$ax25(0x3, 0x5, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000000)={0x0, r1, 0x1})
pipe(&(0x7f0000000100))
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=0x0, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRESOCT], @ANYBLOB="00000000000000004400128009000100766c616e000000003400028006000100000000000c0002000e0000000a0000001c0003800c00010003000000000000800c000100010000000000000008000500", @ANYRESOCT=r2, @ANYBLOB="1ee48900", @ANYRESDEC, @ANYRESDEC], 0x7}}, 0x0)

[  943.795868] 9pnet: Insufficient options for proto=fd
07:57:35 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:35 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$EVIOCGEFFECTS(r5, 0x80044584, &(0x7f0000000000)=""/115)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

[  943.894229] 9pnet: Insufficient options for proto=fd
07:57:35 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

[  943.941121] Dev loop2: unable to read RDB block 1
[  943.954943]  loop2: unable to read partition table
[  943.974109] loop2: partition table beyond EOD, truncated
[  943.990732] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  944.055806] 9pnet: Insufficient options for proto=fd
07:57:35 executing program 3:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000000), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x11, 0x3, 0x8)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000})
sendto$ax25(r5, &(0x7f00000000c0)="e52076eca3eb50d79b2b9ad94eae673b5af4c365e426c6004b4d1dec6d4c9f49bcb66ef1fe37a601a8d5068bce69f8077a72a8fb9f81099d15b153da11dca4bcc199fd3fe5a283a835cb2d277346ec71fd36e3de9de66d48b73c73c2095f64631b8f360d484b543515a9fd6279b1c9082c1c2307f472996078775e", 0x7b, 0x20040080, &(0x7f0000000180)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)

07:57:35 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$VIDIOC_S_MODULATOR(r0, 0x40445637, &(0x7f0000000240)={0x3, "d8b4b091e881e63427a962d641ad1cc6b9cf3f4f4f95b4d90ff24b74bf624b6b", 0x1000, 0xfff, 0x8, 0xc1f46a9b9145b678, 0x2})
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r5, r4, 0x0)
r6 = dup3(r4, r3, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r9, 0xc05c6104, &(0x7f0000000080))
ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000180)=0x418000)
r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x90202, 0x0)
ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000200)={0x3, 0x6, 0x0, 0x81})
r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x400000, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000000c0)={0x2, r11})

07:57:35 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

07:57:35 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x1a0}])

[  944.210961] 9pnet: Insufficient options for proto=fd
[  944.344431] Dev loop2: unable to read RDB block 1
[  944.367454]  loop2: unable to read partition table
07:57:35 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x519000, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cf8, 0x8010, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000000)=0x1001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:35 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}})

07:57:35 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
restart_syscall()
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
r6 = gettid()
recvmsg$can_bcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/50, 0x32}, {&(0x7f0000000240)=""/160, 0xa0}], 0x2, &(0x7f0000000300)=""/213, 0xd5}, 0x20041)
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r6, 0xe)
ptrace$cont(0x18, r6, 0x0, 0x0)
ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080))
syz_open_dev$binderN(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x802)
ptrace$cont(0x20, r6, 0x0, 0x0)
fcntl$setownex(r5, 0xf, &(0x7f0000000000)={0x1, r6})
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:57:35 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x0, 0x1a0}])

[  944.424292] loop2: partition table beyond EOD, truncated
[  944.462645] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  944.567128] 9pnet: Insufficient options for proto=fd
07:57:36 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000040)={0x88a, 0x9, 0x4, 0x4000, 0xffff, {r2, r3/1000+10000}, {0x3, 0x8, 0x4, 0x3, 0x8, 0x38, "0da62e2b"}, 0xfffffffb, 0x4, @userptr=0x3a5, 0x8, 0x0, <r4=>0xffffffffffffffff})
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f00000000c0)="ab6653400c0dbbd9f251ddf45162a1983131052647b364648821982415ed1eaaf7de38622a8f5fad33ccf20e", 0x2c)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r7, r6, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r7, 0x6612)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000200)={0x40})

07:57:36 executing program 0 (fault-call:6 fault-nth:0):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  944.661023] Dev loop3: unable to read RDB block 1
[  944.724522]  loop3: unable to read partition table
07:57:36 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040), 0x0, 0x1a0}])

[  944.752539] loop3: partition table beyond EOD, truncated
[  944.781266] FAULT_INJECTION: forcing a failure.
[  944.781266] name failslab, interval 1, probability 0, space 0, times 0
[  944.804633] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  944.846133] CPU: 0 PID: 7552 Comm: syz-executor.0 Not tainted 4.19.114-syzkaller #0
[  944.854001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  944.863767] Call Trace:
[  944.867291]  dump_stack+0x188/0x20d
[  944.871937]  should_fail.cold+0xa/0x1b
[  944.876218]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[  944.881802]  __should_failslab+0x115/0x180
[  944.887362]  should_failslab+0x5/0xf
[  944.891627]  __kmalloc_track_caller+0x2cb/0x770
[  944.896409]  ? wait_for_completion+0x3c0/0x3c0
[  944.901270]  ? strndup_user+0x70/0xe0
[  944.905361]  ? vfs_write+0x15b/0x550
[  944.909111]  memdup_user+0x22/0xb0
[  944.912674]  strndup_user+0x70/0xe0
[  944.916334]  ksys_mount+0x38/0x150
[  944.919954]  __x64_sys_mount+0xba/0x150
[  944.923960]  ? lockdep_hardirqs_on+0x40b/0x5d0
[  944.928569]  do_syscall_64+0xf9/0x620
[  944.932477]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  944.937675] RIP: 0033:0x45c889
[  944.940882] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
07:57:36 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video0\x00', 0x2, 0x0)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f0000000040)={0x3, 0x4, 0x400, 0x4, 0x5, 0x7, 0x2})

[  944.960062] RSP: 002b:00007f8749cd2c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  944.967813] RAX: ffffffffffffffda RBX: 00007f8749cd36d4 RCX: 000000000045c889
[  944.975100] RDX: 0000000020000040 RSI: 0000000020000000 RDI: 0000000000000000
[  944.982386] RBP: 000000000076bf00 R08: 0000000020000200 R09: 0000000000000000
[  944.989758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005
[  944.997045] R13: 000000000000074a R14: 00000000004ca0c5 R15: 0000000000000000
[  945.066262] Dev loop2: unable to read RDB block 1
[  945.090545]  loop2: unable to read partition table
[  945.119343] loop2: partition table beyond EOD, truncated
07:57:36 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x0, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

[  945.162941] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:36 executing program 3:
prctl$PR_CAPBSET_DROP(0x18, 0x15)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x6, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xb, 0x6, 0x8, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @alu={0x7, 0x0, 0x5, 0x1, 0x0, 0x0, 0x1}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xd, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xffffffff, 0x1000000}, 0x10}, 0x78)

07:57:36 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000100))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000000)={0x3, 'veth1_to_bridge\x00', {0xdd5e}, 0x80})
getsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000040), &(0x7f00000000c0)=0x4)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:57:36 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040), 0x0, 0x1a0}])

07:57:37 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:37 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='7', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040))
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = dup3(r3, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$ax25_int(r0, 0x101, 0x9, 0x0, &(0x7f0000000000))

07:57:37 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:37 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
setrlimit(0x9, &(0x7f0000000040)={0xffffffffffff98d4, 0x8})
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

[  945.553929] Dev loop2: unable to read RDB block 1
[  945.575213]  loop2: unable to read partition table
[  945.613237] loop2: partition table beyond EOD, truncated
[  945.679367] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:37 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:37 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = getpid()
sched_setscheduler(r2, 0x5, 0x0)
get_robust_list(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7fff}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x1438c2, 0x28)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0x200004)
shutdown(0xffffffffffffffff, 0x0)
r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{r4}, 0x9, 0x7, 0x80000000})
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

07:57:37 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080)={0xffffffffffffffff})
r8 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r9 = syz_open_dev$cec(0x0, 0x3, 0x2)
r10 = dup3(r9, r8, 0x0)
ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r10, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_G_OUTPUT(r10, 0x8004562e, &(0x7f0000000040))
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000000)={0x80000001, 0xc00000000})

07:57:37 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040), 0x0, 0x1a0}])

07:57:37 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x4, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:37 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x7, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  946.122745] Dev loop2: unable to read RDB block 1
07:57:37 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x4b, 0xb, 0x4, 0x2000, 0x2, {0x77359400}, {0x1, 0x8, 0x94, 0x20, 0xb3, 0x1f, "c5ed507c"}, 0x100, 0x1, @offset=0x28e, 0xdb2a, 0x0, <r1=>0xffffffffffffffff})
write$6lowpan_enable(r1, &(0x7f0000000240)='0', 0x1)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r3, r2, 0x0)
r4 = dup3(r3, r0, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
mknodat(r7, &(0x7f0000000100)='./file0\x00', 0x8000, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200)={0x40})
syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2)
r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x200, 0x0)
bind$nfc_llcp(r8, &(0x7f0000000040)={0x27, 0x0, 0x2, 0x5, 0x7f, 0x1, "fa734251cc3532a7ab43e648b54366b518738e79644ed583ec64ba8f5e030de18fed6e3e6bdc5c377db548a1d02fb3b698cf0408dcd585056327117307d94b", 0x39}, 0x60)

[  946.162789]  loop2: unable to read partition table
[  946.201819] loop2: partition table beyond EOD, truncated
07:57:37 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x9, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  946.271245] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:38 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000000c0)={0xb70, <r3=>0x0, 0x10000, 0x1})
ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000100)={r3, 0x100000001})
getsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0x9})

07:57:38 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
r3 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r4 = socket(0x11, 0x800000003, 0x0)
bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(r3, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000240)={0x26c, 0x13, 0x720, 0x9, 0x25dfdbfd, {0x3, 0xe4, 0x4, 0xc1, {0x4e24, 0x4e24, [0x1ff, 0x2, 0x800, 0x6], [0x0, 0x412, 0x0, 0x8], r5, [0xb7, 0x6]}, 0x7, 0x50}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "0bf790cf29275328d2b7f4303cfc577a37f6526eecb270f2468bc2affb1a6641531e0985a1cdaf5c133a95c993c68d5e57ff08cf0ea9d2181e0ab03901bc622f161b40f85f9140ab7604861bbaf4c5a0386f8c7d90bce3e4dad2ee9d538959e946c07f1903c9a6c0b56bc34b689aa57cfb1e1be394b14df4ce1220b552a232b6514e228d6bb9ccc4bacac37b9189d7dfc10f9027fc7d774e4fd4614df87e3e3006cda7e09a29cc85a41f8d8f"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "4e505272a48d1c501cac12809e8db411be8499eae3cd8bc750b47a2950f9efb097de6d0d9afec7a4e74b441d2d1e2bd0d860af8a4abc72c9d18cee111a131ad689b508020eb82315dbc5136d24a35cef895aca25497ec1cee1f284d7796465eb7f2d83e08b75932207c1da44d0c9bfdbe8b4a999f6e9b089858bb1004e7ac25a7103fdf601214f648c7fb29f531ce19dc394fffc8f1a49db9c2d01"}, @INET_DIAG_REQ_BYTECODE={0xd0, 0x1, "1632e1b0665e9c832d8df346740f763f9e2e1e087dc6ea06f937c889868c4afbf081d0c14a8999ad7b611e613e4187d52addf9959158c54c4f801b24440826304e74e613bb4b0f98b9a5a072abc47938a76465411c43cc8367446f5eb47198a3c75bcfaf466eafe937a01ebe584f0504d0e7ced29caf16cba319362ac54e4ce5826f5d472655a327a08ad8cd83e64d5c1d1dc883c56da1ab257b9f886e545d4ac48f80a31a4278acbf1faa04eeddb9440e613b66bc2f966bffb553770d350465e1ad749061f6d8fbc2efd490"}]}, 0x26c}, 0x1, 0x0, 0x0, 0x24040000}, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
clock_gettime(0x0, &(0x7f0000000000)={<r8=>0x0, <r9=>0x0})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x1, 0x2, 0x4, 0x20000000, 0xfffffffd, {r8, r9/1000+30000}, {0x1, 0x8, 0x81, 0x26, 0x1f, 0x1f, "1ebccbb0"}, 0x80000001, 0x1, @planes=&(0x7f0000000040)={0x9, 0x8, @mem_offset=0x5, 0xff}, 0x101, 0x0, <r10=>0xffffffffffffffff})
ioctl$VIDIOC_ENUMINPUT(r10, 0xc050561a, &(0x7f0000000180)={0xffff, "11f44e6bc4fa0d512ca1c3a0873ff6c2e5dedbdbd476974587ff3dcc46a16a56", 0x1, 0x8001, 0x1, 0x50007, 0x50021})
r11 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r11, 0x40046109, &(0x7f0000000200)={0x40})

07:57:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)=ANY=[@ANYBLOB="140400001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0)
splice(r2, 0x0, r3, 0x0, 0xffffffff, 0x0)

07:57:38 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x10, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:38 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000", 0x30, 0x1a0}])

07:57:38 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x90518, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x8}, 0x4011, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0xffff}, 0x0, 0x3, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0xde)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:38 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x22, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  946.660435] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'.
[  946.742506] Dev loop2: unable to read RDB block 1
[  946.748342]  loop2: unable to read partition table
[  946.771359] loop2: partition table beyond EOD, truncated
[  946.784001] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:38 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  946.811873] netlink: 1004 bytes leftover after parsing attributes in process `syz-executor.3'.
07:57:38 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x0, 0xfffffffc}}}}, 0x30}}, 0x0)
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x100, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x5}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x800)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000300)=""/225, 0xe1)
r6 = dup3(r5, r4, 0x0)
r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
recvmsg$can_raw(r7, &(0x7f00000017c0)={&(0x7f0000000240)=@nl, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000400)=""/117, 0x75}, {&(0x7f00000004c0)=""/156, 0x9c}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000001580)=""/39, 0x27}, {&(0x7f00000015c0)=""/213, 0xd5}], 0x6, &(0x7f0000001740)=""/108, 0x6c}, 0x40002000)
ioctl$RTC_WIE_OFF(r6, 0x7010)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000ffd000/0x3000)=nil})
ioctl$IOC_PR_PREEMPT(r6, 0x80026101, &(0x7f0000000080))

07:57:38 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x700, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:38 executing program 3:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x80000)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffb}]}]}, 0x5c}}, 0x0)
dup3(r5, r2, 0x0)
splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0)

07:57:38 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000", 0x30, 0x1a0}])

07:57:38 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000000)={0x1, 0x0, 0x103, 0x1, {0x5787, 0x5, 0x4, 0x200}})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
getpeername$l2tp6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000180)=0x20)
r6 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400002, 0x40)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r6, 0x28, &(0x7f0000000080)}, 0x10)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:57:38 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r2, r1, 0x0)
fcntl$addseals(r2, 0x409, 0x4)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x80026101, &(0x7f0000000080))

07:57:38 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x900, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  947.121819] Dev loop2: unable to read RDB block 1
[  947.131900]  loop2: unable to read partition table
07:57:38 executing program 3:
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r1)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x1f})
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', r5, &(0x7f00000000c0)='./file0\x00', 0x6)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

07:57:38 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  947.162887] loop2: partition table beyond EOD, truncated
[  947.230354] Dev loop2: unable to read RDB block 1
[  947.244625]  loop2: unable to read partition table
[  947.267221] loop2: partition table beyond EOD, truncated
[  947.297880] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:38 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0xac101, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x2000009, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:38 executing program 3:
socket$isdn_base(0x22, 0x3, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="726f6f74636f6e746578743d73797361646d5f00007288c0051e8bde6f6f74636f6e746578743d73797374"])
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x1000000000000, 0x7, 0x40, 0x9})
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
getsockname$unix(r2, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000240)={0x8001, 0x4, 0xffff7d08})

07:57:38 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))
io_destroy(0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000180)={0x7, 0x6})

07:57:38 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:57:38 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2200, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:39 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000", 0x30, 0x1a0}])

07:57:39 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f0000000000)=0x1)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200)={0x40})

[  947.450929] SELinux: security_context_str_to_sid(sysadm_) failed for (dev bpf, type bpf) errno=-22
07:57:39 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2c00, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  947.491801] SELinux: security_context_str_to_sid(sysadm_) failed for (dev bpf, type bpf) errno=-22
07:57:39 executing program 4:
r0 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x0, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f00000000c0))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180))
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x80026101, &(0x7f0000000080)={0x2})
r9 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r10 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r10, r9, 0x0)
fsetxattr$security_evm(r9, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@v1={0x2, '4/4'}, 0x4, 0x1)

07:57:39 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r5 = dup3(r1, r4, 0x80000)
mq_open(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x20, &(0x7f0000000040)={0x7, 0x9, 0x6, 0x7ff})
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200)={0x40})

07:57:39 executing program 3:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000ac0)=@sack_info={0x0, 0x0, 0x32}, 0xc)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

07:57:39 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x4000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  947.751630] Dev loop2: unable to read RDB block 1
[  947.772703]  loop2: unable to read partition table
[  947.796662] loop2: partition table beyond EOD, truncated
[  947.822514] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:39 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x70da43, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x8c123, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x104, 0x0, 0x0, 0x1, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:39 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r5, 0x100}, &(0x7f0000000040)=0x8)
r6 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r7 = syz_open_dev$cec(0x0, 0x3, 0x2)
r8 = dup3(r7, r6, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x80026101, &(0x7f0000000080))

07:57:39 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x6})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4)

07:57:39 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xedc0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:39 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300"/72, 0x48, 0x1a0}])

07:57:39 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x40000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:39 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x30000, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x0, 0x200, 0x0, 0x9, 0x0, 0x0, 0x0, r6}, 0x20)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={<r7=>r6, @in6={{0xa, 0x4e21, 0x80000001, @local, 0xfffffffb}}, [0x1ff, 0x10000, 0x100000001, 0x6, 0x2324, 0x0, 0x101, 0x4, 0x5, 0xe5, 0x9, 0x10000, 0x10000000000, 0x6, 0xfffffffffffffffa]}, &(0x7f0000000040)=0x100)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r7, @in6={{0xa, 0x4e24, 0xf9, @local, 0x1}}, 0x2, 0x1}, &(0x7f0000000100)=0x90)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r9, 0xc05c6104, &(0x7f0000000080))
setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4)

07:57:39 executing program 4:
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:57:39 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x1fffff, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  948.280911] Dev loop2: unable to read RDB block 1
[  948.293194] audit: type=1800 audit(1586332659.819:69): pid=7822 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16130 res=0
[  948.298200]  loop2: unable to read partition table
07:57:39 executing program 3:
setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000080)={{0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'rr\x00', 0x0, 0x3ff}, {@empty}}, 0x44)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_mount_image$vfat(&(0x7f0000000280)='vfat\x00', &(0x7f0000000240)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270fff8", 0x186}], 0x0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
statx(r5, &(0x7f0000000200)='./file0/file0\x00', 0x2000, 0x1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
write$FUSE_ATTR(r2, &(0x7f00000003c0)={0x78, 0x0, 0x8, {0xb7, 0x8, 0x0, {0x0, 0x20, 0xfffffffffffffff7, 0x400000000000, 0x3ff, 0x8, 0xffffffff, 0xb178, 0x1, 0x8000, 0x9, r6, 0x0, 0x29}}}, 0x78)
mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2824c27, 0x0)
fsetxattr$security_selinux(r0, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:netcontrol_device_t:s0\x00', 0x29, 0x0)
chdir(&(0x7f0000000180)='./file0/file0\x00')

07:57:39 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r2, r1, 0x0)
r3 = dup3(r0, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x4})

[  948.426223] loop2: partition table beyond EOD, truncated
07:57:40 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x6b6b6b, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  948.472845] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  948.601462] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1)
07:57:40 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0xcd7812b926bb4d8d)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:40 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x6600, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r1, 0x5385, &(0x7f0000000040)={0x8, ""/8})
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x80026101, &(0x7f0000000080))

07:57:40 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x1000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:40 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r2, r1, 0x0)
r3 = dup3(r0, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})

07:57:40 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300"/72, 0x48, 0x1a0}])

07:57:40 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300"/72, 0x48, 0x1a0}])

07:57:40 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:40 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r3, r2, 0x0)
r4 = dup3(r3, r0, 0x80000)
ioctl$IOC_PR_PREEMPT(r4, 0x80026101, &(0x7f0000000080))

07:57:40 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r2, r1, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000000)={0x8e3, 0x0, 0x100a, 0x7, 0x31d6, {0x0, 0x7f}})
r3 = syz_open_dev$cec(0x0, 0x2, 0x2)
r4 = dup3(r3, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200)={0x40})

[  949.261600] Dev loop2: unable to read RDB block 1
[  949.274860]  loop2: unable to read partition table
[  949.293060] loop2: partition table beyond EOD, truncated
[  949.312785] Dev loop3: unable to read RDB block 1
[  949.326026]  loop3: unable to read partition table
[  949.342660] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:40 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x7000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:40 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0x0, 0x8, 0x1, 0xffffffff})

[  949.364056] loop3: partition table beyond EOD, truncated
[  949.390260] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
07:57:41 executing program 1:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x610000, 0x0)
ioctl$TCSETSF(r0, 0x540b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "d7000040080001800002ff8e000000007300"})
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x18600, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
sendfile(r6, r8, &(0x7f0000000100)=0xfff, 0x7)
ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f00000002c0)={0x0, "8050be549330303379eaef2c2e0f179c27c5e05eb68f00", 0x20, 0x10001, 0x7, 0x10, 0x2})
r10 = dup3(r2, r1, 0x0)
ioctl$VIDIOC_QBUF(r10, 0xc058560f, &(0x7f0000000240)={0x5f, 0xa, 0x4, 0x2000000, 0x5, {0x77359400}, {0x5, 0x2, 0x2, 0x1, 0xc5, 0x0, "b04e9144"}, 0x4, 0x4, @planes=&(0x7f0000000180)={0x3, 0x2b4, @fd=r9, 0x7f}, 0x7fffffff, 0x0, r0})
ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x200})
ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(0xffffffffffffffff, 0xc0305615, &(0x7f00000000c0)={0x0, {0x6, 0xf3e}})

07:57:41 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x80}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0xf8)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:41 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x80026101, &(0x7f0000000080))

07:57:41 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x9000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:41 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300"/72, 0x48, 0x1a0}])

07:57:41 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x90606, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3f}, 0x10040, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000200)=0x2)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e)
listen(0xffffffffffffffff, 0x100000001)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES32]], @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYPTR64], &(0x7f0000000040)=0x8)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x10040, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480))
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000400)={@loopback, 0x7})
ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fchmod(0xffffffffffffffff, 0x59)

07:57:41 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000180)={0x7a63fd3c2077c618, 0x0, {0x5, 0x20, 0x2025, 0x1, 0xb, 0x4, 0x2, 0x5}})
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x6, @empty, 0x4e21, 0x1, 'lblcr\x00', 0x2, 0x24e, 0x5}, 0x2c)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000e802000018010000ffffffffffffffff18010000ffffffff18020000ffffffffffffffff18020000ffffffff0300000013d47253f525a1bec158019a723422ec9832bbdb05fe10a504308c072a541f7a518e855cbe2f00aadfaacb7a45d805f73e0b0520763a5ad3325d9e0bc95fe213286454bf6e38b6ae4ed99669da5a940818dd5794d597fd570bcdd285cb7b65631d4ed2c1096586", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/48], @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00018010000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000e00000000000000480043540000000000000000000000000000000000000000000000000000000000000001001000000200000073797a300000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000400000009000000ffffff7f310100002800434f4e4e5345434d41524b0000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x348)
r8 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r8, 0x40046109, &(0x7f0000000200)={0x40})

07:57:41 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x10000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:41 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fdatasync(r0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x80026101, &(0x7f0000000080))
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x980000, 0x5259f73a, 0xff, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x9909ca, 0xfffffffb, [], @p_u8=&(0x7f0000000040)=0x3}})
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000180)=0x1)

07:57:41 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = dup3(0xffffffffffffffff, r0, 0x80000)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r1, 0xc05c6104, &(0x7f0000000080))
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, 0xffffffffffffffff, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x20)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r6, 0x9, 0x1, 0x6}, &(0x7f00000000c0)=0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xc705, 0x9}, &(0x7f0000000180)=0x10)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xbe67)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000200)={0x40})

[  949.920030] ubi0: attaching mtd0
07:57:41 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x20000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:41 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(r0, 0xc05c6104, &(0x7f0000000080)={0x0, 0xfff})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

[  950.005326] ubi0: scanning is finished
[  950.021072] Dev loop2: unable to read RDB block 1
[  950.035521]  loop2: unable to read partition table
[  950.044340] ubi0: empty MTD device detected
[  950.082094] loop2: partition table beyond EOD, truncated
07:57:41 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0xfffffffffffffffd, 0x0, 0xfffffffd})
ioctl$VIDIOC_S_AUDOUT(r0, 0x40345632, &(0x7f0000000040)={0x4, "e1ce393a7404ad970ef170af0d1c7a405db487f760a4e1f78b717315cc954888", 0x0, 0x1})
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$TCSETXF(r5, 0x5434, &(0x7f0000000000)={0xffff, 0x0, [0x12, 0xfe00, 0x3, 0x7ff, 0x9], 0x6})

07:57:41 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1080, 0x1998743546c8ee0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb5e}, 0x6204, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x1)
fsetxattr$security_evm(r1, &(0x7f0000000000)='security.evm\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="09e46d8f91b027cd3fb6e8b9a6d3dd1dda8b"], 0x2, 0x0)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x2b)
openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000400)={"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"})
ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)=0x7)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200)={0x40})

[  950.130717] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:41 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x22000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:41 executing program 4:
perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x1)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x80026101, &(0x7f0000000080))

[  950.312948] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
07:57:41 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300"/84, 0x54, 0x1a0}])

[  950.440132] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  950.460952] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  950.508590] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  950.544170] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  950.572365] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  950.592157] Dev loop2: unable to read RDB block 1
[  950.604190]  loop2: unable to read partition table
[  950.622043] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  950.636939] loop2: partition table beyond EOD, truncated
[  950.673415] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  950.683556] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 422666912
[  950.735241] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  950.746263] ubi0: background thread "ubi_bgt0d" started, PID 8020
[  950.753448] ubi0: detaching mtd0
[  950.852637] ubi0: mtd0 is detached
[  950.864331] ubi0: attaching mtd0
[  950.886683] ubi0: scanning is finished
07:57:42 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x90606, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3f}, 0x10040, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000200)=0x2)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
ioctl$ASHMEM_GET_SIZE(r1, 0x40046f41, 0x76006e)
listen(0xffffffffffffffff, 0x100000001)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3ff}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYPTR=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYRES32]], @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRESOCT, @ANYPTR64], &(0x7f0000000040)=0x8)
r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x10040, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x0)
getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480))
ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000400)={@loopback, 0x7})
ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x76006e)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fchmod(0xffffffffffffffff, 0x59)

07:57:42 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2c000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:42 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080)={0x800007ff, 0x0, 0x5})

07:57:42 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300"/84, 0x54, 0x1a0}])

[  950.955296] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4
07:57:42 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x40000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:42 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$DRM_IOCTL_AGP_INFO(r5, 0x80386433, &(0x7f0000000000)=""/211)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

[  951.241075] Dev loop2: unable to read RDB block 1
[  951.268027]  loop2: unable to read partition table
07:57:42 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000180)={0x9})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:42 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x6b6b6b00, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  951.298598] loop2: partition table beyond EOD, truncated
07:57:42 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x406880, 0x0)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0x200)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x44})

[  951.341203] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:43 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300"/84, 0x54, 0x1a0}])

07:57:43 executing program 1:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x40)
fanotify_mark(0xffffffffffffffff, 0x20, 0x10, r0, &(0x7f0000000040)='./file0\x00')
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
timerfd_create(0x1, 0x80800)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = timerfd_create(0x0, 0x0)
timerfd_gettime(r3, &(0x7f0000000080))
r4 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0x0, 0x80000})

07:57:43 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x8cffffff, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  951.622427] ubi0: attaching mtd0
[  951.654860] ubi0: scanning is finished
[  951.683848] Dev loop2: unable to read RDB block 1
[  951.705799]  loop2: unable to read partition table
[  951.722930] loop2: partition table beyond EOD, truncated
[  951.736421] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  951.855710] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB)
[  951.863995] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  951.872424] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1
[  951.886659] ubi0: VID header offset: 64 (aligned 64), data offset: 128
[  951.894416] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  951.902154] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23
[  951.911245] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 422666912
[  951.921570] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  951.936517] ubi0: background thread "ubi_bgt0d" started, PID 8109
07:57:43 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff07006900000300"/72, 0x48, 0x1a0}])

07:57:43 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8, 0x9, 0x0, 0x1, 0xfffffffd})
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x20)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000021c0)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8060000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="f8000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100010040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400020004020000000408000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000900000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000036fe0400040000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004003007000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004003208000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004005680000008000100", @ANYRES32=0x0, @ANYBLOB="8801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=0x0, @ANYBLOB="3002028054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000024000400ff00070508000000ff7f1f2007000000080003f9ffff0000ff01070700010000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004005c02000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000000000"], 0x6d8}, 0x1, 0x0, 0x0, 0x41}, 0x4040800)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r5, 0x7, 0x9}, &(0x7f0000000040)=0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x80026101, &(0x7f0000000080))

07:57:43 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r3, r2, 0x0)
ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000000)={0x2, @raw_data="d94aa70bf216bac6afe16701c1d4da9fa293f4763bc199015d532cef66468db82355b171041c96af7c65523f37865332ded44c06f4f841c49f9679b0c776a9c6535596251fa71d29e5d598c3d65a2b2fe3e0ea8d29dbb721394ed961ff1268a6a4af1971d32c4780d6ee371ed9bd73625b76d4fd16f4ba53111a636b78d3fe055d0389dd165e9efcf22070af8ebd2223d3b517aa9d8075e2474a78dba95b1412e6edef13deaa7f03ccc73b27a1be431c676b105b9b52ca31e37bc9f2fa2824250df90a9f7fbc935e"})
r4 = dup3(r1, r0, 0x0)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r5, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000100)={0x0, 'geneve0\x00', {}, 0x5})
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200)={0x40})
r8 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r9 = syz_open_dev$cec(0x0, 0x3, 0x2)
r10 = dup3(r9, r8, 0x0)
ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r10, 0xc05c6104, &(0x7f0000000080))
ioctl$sock_bt_hci(r10, 0x400448e1, &(0x7f0000000240)="3e1c98b5e210b7d00b69dd4a37205d0b3f283025d7c7af447fb53506f5877ca63318ede3c62ae08e466708bbe5321e121b7617634963f9077f7981b7b78711b0bf54211225275a904bb24554f6e91c8dfd3f2d7651b09c5bf0c70218f1028c20d7d70a5b7caee9ec939388d12d6c135fbeb9471390a4661402cbc8569a965bc329cbe73e6b9b93686113e2d9fc9a3f")

07:57:43 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xc0ed0000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:43 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}])

07:57:43 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
r1 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r2, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:43 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xf6ffffff, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:43 executing program 4:
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180))
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000100)={0xfcb7, 0x3, &(0x7f0000000000)=[0xc8, 0x2, 0x0], &(0x7f0000000040)=[0xfffa, 0x6], &(0x7f00000000c0)=[0x81, 0x1, 0x7]})
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080))

07:57:43 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0xffffffff, 0x2})

07:57:43 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xffff0000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:43 executing program 1:
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40, 0x0)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd6b0041f5242c0400000008000900ac1414aa1400020000000000004000000000ffff0000000714000200ff02000000dd000000000000010000000500000000000000958dc86e7efceb96ba1e3997332c3709474294e7e132bd08af5776442fa060e4037713928d5c29b90d4ac873b985f5b1c808203dbe0d2e4bfacec0062a05470d656264ac"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x800)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200)={0x40})

[  952.222284] Dev loop3: unable to read RDB block 1
[  952.230440] Dev loop2: unable to read RDB block 1
[  952.237019]  loop2: unable to read partition table
[  952.238218]  loop3: unable to read partition table
07:57:43 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x0, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

[  952.286608] loop3: partition table beyond EOD, truncated
[  952.319316] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
[  952.327690] loop2: partition table beyond EOD, truncated
[  952.349424] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:44 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x8c2100, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={0x0, 0x1, 0x4})
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:44 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xffff1f00, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:44 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x1000000000})
r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x111102)
ioctl$SCSI_IOCTL_GET_IDLUN(r3, 0x5382, &(0x7f0000000040))

07:57:44 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x0, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x80026101, &(0x7f0000000080))

07:57:44 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}])

07:57:44 executing program 3:
socketpair(0x3, 0x1, 0xfffffffc, &(0x7f0000000140)={<r0=>0x0, <r1=>0x0})
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
close(r0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x200, 0x9, 0x7ff, 0x6, 0xa03b, 0x20, 0xffffffff, r7}, 0x20)

07:57:44 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xffffff8c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:44 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r6, r5, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)={0x4, 0x9, 0x4, 0x2000, 0x8001, {0x77359400}, {0x2, 0x2, 0x4, 0x9, 0x3, 0x5, "e6592cdb"}, 0x90, 0x4, @planes=&(0x7f0000000380)={0x8, 0xffffffff, @userptr=0x8, 0x5}, 0x2, 0x0, <r7=>r6})
setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000440)='cdg\x00', 0x4)
dup3(r4, r3, 0x0)
ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f0000000000)={0xc, @output={0x1000, 0x0, {0xffe000, 0x3}, 0x6a53, 0x8000}})
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x3f})

07:57:44 executing program 4:
perf_event_open(0x0, 0x0, 0x4000004, 0xffffffffffffffff, 0x12)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000000c0)={0x2, @capture={0x1000, 0x0, {0x7, 0x7}, 0x80, 0x944}})
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x440000, 0x0)
r3 = dup3(r2, r1, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x0, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
r9 = dup3(r8, r7, 0x0)
ioctl$IOC_PR_PREEMPT(r9, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r9, 0xc05c6104, &(0x7f0000000080))
ioctl$VFIO_SET_IOMMU(r9, 0x3b66, 0x6)
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1})
ioctl$IOC_PR_PREEMPT(r6, 0x80026101, &(0x7f0000000080)={0x4, 0x0, 0xfffbfffe, 0xda8c})
openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0)
fsetxattr(r0, &(0x7f0000000200)=@known='security.apparmor\x00', &(0x7f0000000240)='\xaf\x00', 0x0, 0x0)

07:57:44 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xfffffff6, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:44 executing program 3:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x20000000021)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x10000, 0x4, 0x100, 0x400}, 0x10)
r1 = socket(0x11, 0x80002, 0x0)
setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000000)=0x2, 0x4)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @random="c00c157c00"}, 0x14)
setsockopt(r1, 0x107, 0x5, &(0x7f00000001c0)="491614b15af15838f31556cf73e7a32861bff49215d3b199b3ec66aaf75f15471f70930f22e380e1ee7abdaf5818974bc3cc5cc95fe3f67f3aa60fdc2193ba4afbe235ffecc88d62746a8bc6", 0x4c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x4000009}, 0x1c)
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8)
sendto$inet6(r0, &(0x7f0000000000), 0x9e98, 0x0, 0x0, 0x101aa)

[  952.824006] Dev loop2: unable to read RDB block 1
[  952.850702]  loop2: unable to read partition table
07:57:44 executing program 1:
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x40})

[  952.882383] loop2: partition table beyond EOD, truncated
[  952.952145] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:44 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:44 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xedc000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:44 executing program 1:
syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2)
r0 = syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
r4 = dup3(r0, r1, 0x0)
ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$DRM_IOCTL_GEM_CLOSE(r4, 0x40086409, &(0x7f0000000000))

07:57:44 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(0xffffffffffffffff)
syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffffffb, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
fcntl$getown(0xffffffffffffffff, 0x9)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
get_robust_list(0x0, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x1410c2, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ftruncate(r3, 0xffff)
r4 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4)
shutdown(0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x40000080806, 0x0)
accept4(r5, 0x0, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
sendfile(r0, r3, 0x0, 0x80001d00c0d0)

07:57:44 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = gettid()
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000040)="ae83709e8f4e4b1ffdc95af4f0990cb6", 0x10)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0xe)
ptrace$cont(0x18, r2, 0x0, 0x0)
ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r2, 0x0, 0x0)
r6 = gettid()
ptrace$setopts(0x4206, r6, 0x0, 0x0)
ptrace$peeksig(0x4209, r6, &(0x7f0000000000)={0xffe, 0x1, 0x5}, &(0x7f0000000180)=[{}, {}, {}, {}, {}])
r7 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x80026101, &(0x7f0000000080))

07:57:44 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}])

07:57:45 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x2})

07:57:45 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x4000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x1, 0x3ff, 0x8, 0x2, 0xcf8, 0x9, 0x5, 0x0]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8044)

[  953.593626] Dev loop2: unable to read RDB block 1
[  953.614113]  loop2: unable to read partition table
[  953.633418] loop2: partition table beyond EOD, truncated
07:57:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0x80000000, 0x48, 0x5, 0x5}})
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40, 0x0, 0xfffffffc})

[  953.654133] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:45 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x6b6b6b00000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:45 executing program 4:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x4d95, 0x9, 0x9})
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_SUBDEV_G_FMT(0xffffffffffffffff, 0xc0585604, &(0x7f0000001400)={0x1, 0x0, {0x4, 0x5, 0x1016, 0x0, 0xc, 0x8, 0x1, 0x6}})
r3 = dup3(r2, r1, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x80026101, &(0x7f0000000080))
shutdown(r3, 0x1)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
r7 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r7, &(0x7f0000000000)=""/11, 0xb)
r8 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r8, &(0x7f0000000000)=""/11, 0xb)
keyctl$instantiate_iov(0x14, r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="7a5a1d9de1a4c250ac07977c8735fdb66819d6f36cf222866f647e47b9438658a9b0de3d5bacdf2b5014a737856a99d3fa045138bf10fa26d150bd7762414c662f98b92106c83b42e23381d9bb15f4658d38037c9fa58d1d3e3093090bccd8bd69fa", 0x62}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="f47807d90ffd9fc1cc7e35890a7a0ce97d8dce70963ca8444691e7a777ec5a14fbe973f95ace8d733d4e4e8b18245bbef14263fc5fb7b40d3911ce059fb35baa02fc8e74b59c8a31231380718feb90991784bdb6ab61d28620bc894207f6148c71c586fabd0a5c33ebe912a885284528c9409dc5b4703f4f0490923df0e3cc8b2dd06e434f0cd22bc9db581dfe4a74f0088b77cd702c265a3b4aaad8e04389f41d8ed05471da9e6ca269d6e03140e425bdf21d2587b5edfe4c64d1076bfe15894fdec5d3c8439be00ff675ce7d00280a5e30365401e7fa6e375978369ab52daadef63af12c15", 0xe6}, {&(0x7f0000001340)="e4340c2b343d25bcd4c8697a20c429ec2b3abb741b56595f9f03837f009d12a50a79f7df47c9cb603a55a1ca07c10cbf920ee3d3e9d7b91566b05d034cc6dd16932fd2d943f564b42c65287353444f2999b8ad68e1112baa86f63b66887f27b25d3805186531e564fe1f35865b8c8050e8ed4d7d73e7a215afc7eb7e22e595286d", 0x81}], 0x4, r8)
ioctl$BLKFLSBUF(r6, 0x1261, &(0x7f0000000000)=0x6)

07:57:45 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x10)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:45 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x100000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:45 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c000", 0x5d, 0x1a0}])

07:57:45 executing program 3:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e", 0x5a, 0x1a0}])

07:57:45 executing program 4:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r2, 0xc05c6104, &(0x7f0000000080))
ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0xa)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x80026101, &(0x7f0000000080)={0xfffffffffffffffd})
vmsplice(r5, &(0x7f0000000040)=[{&(0x7f0000000180)="3c95039eb8a954245dedd58876b462fdcfe705b79b4f09721d9a516b198fb7c8f8fde71436c72080445a9ea8811d94aee8ee33fc9da04e00b6f449a57083f82d73eaaa48b88c58337904981ca0f100a37b61a69cd664c76db5cfadd2bfac860e1fa030f72cd27c81643e370802b2452146d814d5e821396e55f642164453f90b76ad60dc7b990afa10f0b37119e3", 0x8e}, {&(0x7f00000000c0)="fe039dec41c1d5e52541dae6ad2ad54f27248a152b56476b8626f664d526c5b308d61f789e54d00a1ce727e71ead2c08ac7d6a7b5991e4e7fa5d6831fa1043836f8a8a84", 0x44}, {&(0x7f0000000240)="882827421a1fc24b1d0fe7589322c70102cd856385195b33c1ff3c166077c20f6505e449d2812d946c077cad2b32b57bd3ee60a78b27f51acfc21df9e1e7d03789cc9f300ef2f0854fec5dbb9ed7762b10d06fc1a04333be6e83346a75af82794f436172280f553be440d37a6d2a2bece4dd58a1d04590de602ebe6dc0deaf493f6b330cc14e6171d1456279817489f7e4fc26cbd5ebcb1a907c22cb2b51c44238b04ca486000a0d56ebbadef59f3f80bb5ef4e822acf293d0f2bd63d6280aae60e245722b4fd975f221a8eea9e2f7fa33b66991acbe4f39dff48d253b758cd69d8ad3e6", 0xe4}], 0x3, 0x6)

07:57:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r2, r1, 0x0)
r3 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})

07:57:45 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x200000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:45 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f0000000580), 0x1000)
perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fallocate(r0, 0x0, 0x8003, 0x8020001)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
execve(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)=[&(0x7f0000000100)='NLBL_CIPSOv4\x00'], &(0x7f00000002c0)=[&(0x7f00000001c0)='NLBL_CIPSOv4\x00', &(0x7f0000000240)='NLBL_CIPSOv4\x00'])
r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0)
r3 = syz_open_dev$sg(0x0, 0x0, 0x2)
ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000000c0)=0x10d060000)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000)='NLBL_CIPSOv4\x00')
write$P9_RREMOVE(r2, &(0x7f0000000280), 0x1033b)
fdatasync(r2)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r2, 0x0, 0xf0ffffff00000000})

[  954.097591] Dev loop2: unable to read RDB block 1
[  954.114032]  loop2: unable to read partition table
07:57:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = socket(0x6, 0x80000, 0x1)
getsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200)={0x40})

[  954.162295] loop2: partition table beyond EOD, truncated
[  954.198863] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:45 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x700000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  954.226219] Dev loop3: unable to read RDB block 1
[  954.238237]  loop3: unable to read partition table
[  954.283664] loop3: partition table beyond EOD, truncated
07:57:45 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c000", 0x5d, 0x1a0}])

[  954.329579] loop_reread_partitions: partition scan of loop3 () failed (rc=-5)
07:57:45 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
modify_ldt$read(0x0, &(0x7f0000000040)=""/46, 0x2e)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
r5 = socket(0x200000000000011, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0xb9a, 0x4)
r6 = socket(0x11, 0x800000003, 0x0)
bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendto$packet(r5, &(0x7f00000002c0)="65ac1600514af71cff0000000000", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @remote}, 0x14)
ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000000)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1f, r7})
openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x10200, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x40046109, &(0x7f0000000200)={0x89, 0x8000000000000000, 0x0, 0x3})

[  954.663937] Dev loop2: unable to read RDB block 1
[  954.674057]  loop2: unable to read partition table
[  954.689500] loop2: partition table beyond EOD, truncated
[  954.701718] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:46 executing program 5:
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dc, &(0x7f0000000240)="615e2e929c3d06fb9082acc57743e72a18a98c8ef4a79e1307afb528772cbb46d461e0458f04cd340990584156371d794c2c928fb5f8dee1e9be93583abb9e089569666d447622a525d4bce1274b41e372a11beafd606ea670469c488c5dc772df46bdcf2abad5cccf57a8d665f3c2b74fabc7f0b84ddef6ae3e2e407386578584467ada641a8c8f5ed3f45927c8239794cf536f9a36f4b5f8e9b11500e975e4d801d95b634d4bf54ae9d11f79a0df8dd1ff4a8ce11038810c25e5d14eba93fdb77c766f5f740ee88488")
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:46 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x900000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:46 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x34a, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x11d000})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x5, 0x7, 0x4, 0x0, 0x8, {}, {0x0, 0x8, 0x0, 0x0, 0x81, 0x0, "392dc8bd"}, 0x333, 0x1, @userptr=0x8, 0x0, 0x0, <r3=>0xffffffffffffffff})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x3e7)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
r7 = dup(0xffffffffffffffff)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000000)={0xc45b})
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_NMI(r3, 0xae9a)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000004c0), 0x9c)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

07:57:46 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = dup3(0xffffffffffffffff, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r1, 0x40046109, &(0x7f0000000200)={0x40})
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)

07:57:46 executing program 4:
r0 = socket$inet6(0xa, 0x400000000005, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x1}}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in={0x2, 0x4e20, @rand_addr=0x6}], 0x10)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x63f7)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00')
socket(0x0, 0x803, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001)
ftruncate(r5, 0x200004)
sendfile(r0, r5, 0x0, 0x80001d00c0d0)

07:57:46 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c000", 0x5d, 0x1a0}])

07:57:46 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x1000000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:46 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})
ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000000))

[  955.156198] Dev loop2: unable to read RDB block 1
[  955.171530]  loop2: unable to read partition table
07:57:46 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2000000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  955.241387] loop2: partition table beyond EOD, truncated
[  955.290032] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
[  955.304791] audit: type=1800 audit(1586332666.829:70): pid=8398 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16004 res=0
07:57:46 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2200000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:46 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x1, 0x2)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r3, r2, 0x0)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0x4, 0x102, 0x2, {0x0, 0x80000000, 0x9, 0x2}})
r4 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200)={0x40})

07:57:47 executing program 4:
add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(0x0, 0x81, 0x100702)
r1 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x3, 0x2)
write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x0)
r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xcf, 0x0, 0x2, 0x0, 0x0, 0x41bd, 0xe2021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xae88, 0x800}, 0x8, 0x0, 0x7fff, 0x0, 0x1000000000, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket(0x40000000015, 0x3, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10)
sendto$inet(r1, &(0x7f0000000080), 0x0, 0x40804, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$sndpcmp(0x0, 0x0, 0x0)
pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806)
openat$dlm_control(0xffffffffffffff9c, 0x0, 0x53b041, 0x0)
ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f00000000c0)=""/26)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2)
sendfile(r0, r0, 0x0, 0x40fdf)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000040))
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000080), 0x8)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x80045113, 0x0)
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x50009405, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x16})

[  955.602065] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
07:57:47 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)
write(r1, &(0x7f0000000100)="eae12f3ce66b5009434d2660515d061521339eb04a926a67df", 0x19)

07:57:47 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055", 0x5f, 0x1a0}])

07:57:47 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
r2 = dup3(r1, r0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x0, 0x0)
r5 = dup3(r1, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={<r6=>0xffffffffffffffff}, 0x111, 0xc}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r6, 0xfffffff8}}, 0x10)
symlinkat(&(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00')
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0x40})

07:57:47 executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
tkill(0x0, 0xe)
ptrace$cont(0x18, 0x0, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, 0x0, 0x0, 0x0)
r4 = gettid()
ptrace$setopts(0x4206, r4, 0x0, 0x0)
tkill(r4, 0xe)
ptrace$cont(0x18, r4, 0x0, 0x0)
ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080))
ptrace$cont(0x20, r4, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f00000003c0)={{0x2}, 0x0, 0x0, 0x0, 0x7, 0x0, 0xbe, 0x3, 0x1032, 0x1, 0xf6, 0x0, r4})
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x158, 0x4, 0xa, 0x807, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}]}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5240e1d9286d7d06}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73f0de8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4117c3db}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x17622c15}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, 0x158}, 0x1, 0x0, 0x0, 0xc080}, 0x4004844)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c000000020601000000000000000000000000000e00030062443fee69746d61703a697000000005000400000000000900020073797a3000000000240007800c00028008000140000000000c00018008000140ac1414aa050014002000000005000500020000000500010006000000"], 0x6c}, 0x8}, 0x0)

07:57:47 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x2c00000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:47 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x58, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(0x0, 0x3, 0x2)
r4 = dup3(r3, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r4, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r4, 0xc05c6104, &(0x7f0000000080))
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in6=@mcast1}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000080)=0xe8)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xa)
setreuid(0x0, r6)
mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x4002, &(0x7f00000005c0)={[{@index_off='index=off'}, {@xino_auto='xino=auto'}, {@nfs_export_off='nfs_export=off'}, {@xino_off='xino=off'}], [{@measure='measure'}, {@uid_lt={'uid<', r6}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@audit='audit'}]})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

07:57:47 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r2 = syz_open_dev$cec(0x0, 0x3, 0x2)
r3 = dup3(r2, r1, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r5 = syz_open_dev$cec(0x0, 0x3, 0x2)
r6 = dup3(r5, r4, 0x0)
ioctl$IOC_PR_PREEMPT(r6, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r6, 0xc05c6104, &(0x7f0000000080))
r7 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r8 = syz_open_dev$cec(0x0, 0x3, 0x2)
dup3(r8, r7, 0x0)
ioctl$LOOP_SET_FD(r6, 0x4c00, r8)
ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r3, 0xc05c6104, &(0x7f0000000080))
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000040)={0x1, 0x0, [0x800, 0x7, 0x5a51f527, 0x3f, 0x80000001, 0x3f, 0x1, 0x8]})
r9 = syz_open_dev$cec(0x0, 0x3, 0x2)
r10 = dup3(r9, r0, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r10, 0xc028564d, &(0x7f00000000c0)={0x2, 0x0, [0x8, 0x8, 0x1, 0x8000, 0x3, 0x6, 0x1, 0x7fffffff]})
ioctl$IOC_PR_PREEMPT(r10, 0x40046109, &(0x7f0000000200)={0x40})

07:57:47 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x4000000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

[  956.179195] Dev loop2: unable to read RDB block 1
[  956.193026]  loop2: unable to read partition table
07:57:47 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x401, 0x400000008a}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000389c5bfd39fc25ac54973371c4902078bbe08e95c0a42771fac010dc3fb1c401c6304fd38792", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000000000001410000001c001700000000000000006574683a6970365f7674693000000000"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000ffdbdf25010000000000000007410000004c00180000ea0769620000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6afbc390000000091a0ccfde4ef98acf5cf5675c547e9ab4ffb55135c6819be165ec29ac20227b6052785b25b23"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0x0)

[  956.221185] loop2: partition table beyond EOD, truncated
[  956.232498] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:47 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710})
socket$inet(0x2, 0x4000000805, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000580)={&(0x7f0000000340), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, 0x0, 0x300, 0x70bd28, 0x0, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="03810c58a265"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @dev={[], 0x12}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000084}, 0x4)
getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000240), &(0x7f0000000280)=0x4)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200a9ca528ff4cb7f0900000006f569730aab4565507d1107845b8a718ca3342711bb2dfac6592c9704f77ce196007eb3f5a2d705162409f5ef4c68af59b79d237e88d7847a4a0a012601fbc141fc6a524cf713fdd88b2b2863d30f6f72aa52757ecab91a22f0e9110dd9428c1d177ccbd7d16ff94506dd3363bfb5880500e6f3c5185cc23e68fb4ff7413e992a73fb2b0ccfef03deda03b76f3d71c5735ff1dafeb0dba7c5635b0ca9befa2182377cb63cc2a9ff888e9eb32b75f5886ffdb5439be7f18a6a8814aa4f135f056f", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3)
getpid()
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000300)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000000140)=0x28)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000b40)}, {&(0x7f0000000000)="4eddeb53c4d5ff84c9cde4daad8953695cfd02bc44c6d27c79f11f116ad05513f0a0350e39afbd8ab832016a15419007bafcda2133225d3d7d3b4b3793a0676531d5a21472b3ebed4911116a6f63c2ea237c1b4eeff5d7a957ec97f8b5c904dd42ca74e76b99e5134653faa6d6806f86f96ed5446281f532d16eb441c972e8ff67e19a080edba443bfe07c23c3118b9e7d55730b896f2cf09074542bce68d8f81a1f82352476e6251c27bed404027d5b36bc2c95470ed02f3fb7bb3de41edfb0de420441659e600d78b60087fbecbaedd7be219baa1b1cc8f321c786cf7ace198ae518d46d4c29c973fec230", 0xec, 0x5}], 0x0, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x6d)
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="65280d9915144374ea50b114ac16", 0xe, 0x0, &(0x7f0000000280)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x94, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x1f}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x5}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x2}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x58}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xb3}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x1}}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xd}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x99}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x400, 0x2}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x94}, 0x1, 0x0, 0x0, 0x8800}, 0x4000040)

07:57:47 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0x8cffffff00000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:47 executing program 2:
r0 = syz_open_dev$mouse(0x0, 0x2, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={[], [], @multicast1}, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@remote}}, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340), 0x0)
write$FUSE_NOTIFY_POLL(r0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000040)="026368006c0ffffffff60005000000e08128b14700000000d59863d20000000002000f2020cc00000000ff0700690000030000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055", 0x5f, 0x1a0}])

[  956.435794] Cannot find add_set index 0 as target
[  956.460274] FAT-fs (loop4): bogus number of reserved sectors
[  956.518444] FAT-fs (loop4): Can't find a valid FAT filesystem
[  956.557858] Dev loop2: unable to read RDB block 1
[  956.593603]  loop2: unable to read partition table
[  956.649607] loop2: partition table beyond EOD, truncated
[  956.688718] loop_reread_partitions: partition scan of loop2 () failed (rc=-5)
07:57:48 executing program 5:
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x88000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = creat(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000140)='{\x00')
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c)
syz_genetlink_get_family_id$nl80211(0x0)
setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000000)=0x9, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c)

07:57:48 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200, 0x0)
r1 = syz_open_dev$cec(0x0, 0x3, 0x2)
socket$l2tp6(0xa, 0x2, 0x73)
r2 = dup3(r1, r0, 0x0)
ioctl$IOC_PR_PREEMPT(r2, 0x40046109, &(0x7f0000000200)={0xfffffffffffffffa, 0xfffffffffffffffd})

07:57:48 executing program 4:
r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r2 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$setstatus(r1, 0x4, 0x6900)
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f3)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000012c0)={0x2, 0x4e24}, 0x10, 0x0}}], 0x1, 0x0)
ftruncate(r1, 0x8200)
socket$inet(0x2, 0x80008, 0xc)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f)
getresuid(&(0x7f0000004180), 0x0, 0x0)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x81, 0x9, 0x7fff, 0xc8})

07:57:48 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xf6ffffff00000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:48 executing program 0:
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
close(r0)
clone(0x40000000007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
mount$9p_fd(0xffff000000000000, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

07:57:48 executing program 1:
r0 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
syz_open_dev$cec(0x0, 0x3, 0x2)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
dup3(r1, r0, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r3 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2)
r4 = syz_open_dev$cec(0x0, 0x3, 0x2)
r5 = dup3(r4, r3, 0x0)
ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r5, 0xc05c6104, &(0x7f0000000080))
setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r5, 0x110, 0x3)
r6 = syz_open_dev$cec(0x0, 0x3, 0x2)
r7 = dup3(r6, r2, 0x0)
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000200))
ioctl$IOC_PR_PREEMPT(r7, 0xc05c6104, &(0x7f0000000080))
ioctl$IOC_PR_PREEMPT(r7, 0x40046109, &(0x7f0000000000)={0xb73, 0xfffffffffffffffe, 0x0, 0x20})

[ 1062.301391] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1062.307930] rcu: 	(detected by 0, t=10502 jiffies, g=146577, q=23)
[ 1062.314286] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295043260-4295032757), jiffies_till_next_fqs=1, root ->qsmask 0x0
[ 1062.326950] syz-executor.3  R  running task    27520  8475   6661 0x00000800
[ 1062.334166] Call Trace:
[ 1062.336763]  <IRQ>
[ 1062.340061]  sched_show_task.cold+0x2e2/0x343
[ 1062.344771]  ? set_rq_offline.part.0+0x140/0x140
[ 1062.349598]  rcu_check_callbacks.cold+0xaf0/0xddc
[ 1062.354474]  update_process_times+0x2a/0x70
[ 1062.358811]  tick_sched_handle+0x9b/0x180
[ 1062.362976]  tick_sched_timer+0x42/0x130
[ 1062.367092]  __hrtimer_run_queues+0x2fc/0xd50
[ 1062.371608]  ? tick_sched_do_timer+0x1a0/0x1a0
[ 1062.376254]  ? hrtimer_fixup_activate+0x30/0x30
[ 1062.380945]  ? kvm_clock_read+0x14/0x30
[ 1062.384988]  ? ktime_get_update_offsets_now+0x2db/0x450
[ 1062.390373]  hrtimer_interrupt+0x312/0x770
[ 1062.394733]  smp_apic_timer_interrupt+0x10c/0x550
[ 1062.399600]  apic_timer_interrupt+0xf/0x20
[ 1062.403845]  </IRQ>
[ 1062.406096] RIP: 0010:lock_acquire+0x1ec/0x400
[ 1062.410815] Code: 08 00 00 00 00 00 00 48 c1 e8 03 80 3c 10 00 0f 85 cd 01 00 00 48 83 3d 99 a5 62 07 00 0f 84 38 01 00 00 48 8b 7c 24 08 57 9d <0f> 1f 44 00 00 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f c3 65 8b
[ 1062.429838] RSP: 0018:ffff888037ca7120 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff13
[ 1062.437568] RAX: 1ffffffff1164ad1 RBX: ffff88808fe04540 RCX: 000000006ea5f0b6
[ 1062.444853] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: 0000000000000286
[ 1062.452308] RBP: ffff88803b49b788 R08: 0000000000004b57 R09: 0000000000000002
[ 1062.459591] R10: ffff88808fe04e10 R11: ffffffff8b1cc238 R12: 0000000000000000
[ 1062.466873] R13: 0000000000000000 R14: 0000000000000001 R15: ffff888037ca72f0
[ 1062.474190]  __might_fault+0x152/0x1d0
[ 1062.478188]  ? __might_fault+0xef/0x1d0
[ 1062.482276]  paging64_walk_addr_generic+0x3fd/0x2270
[ 1062.487493]  ? ept_sync_page+0x670/0x670
[ 1062.491573]  ? __lock_acquire+0x6ee/0x49c0
[ 1062.495824]  paging64_gva_to_gpa+0x9c/0x1c0
[ 1062.500160]  ? paging64_walk_addr_generic+0x2270/0x2270
[ 1062.505631]  ? mark_held_locks+0xf0/0xf0
[ 1062.509711]  ? paging64_walk_addr_generic+0x2270/0x2270
[ 1062.515707]  ? find_held_lock+0x2d/0x110
[ 1062.519874]  ? __might_fault+0x11f/0x1d0
[ 1062.523958]  ? lock_downgrade+0x740/0x740
[ 1062.528119]  ? vmx_read_guest_seg_ar+0x21a/0x270
[ 1062.532900]  kvm_fetch_guest_virt+0xe4/0x1b0
[ 1062.537329]  __do_insn_fetch_bytes+0x3cf/0x640
[ 1062.541930]  ? em_sldt+0x20/0x20
[ 1062.545311]  ? __lock_is_held+0xad/0x140
[ 1062.549492]  x86_decode_insn+0x17a0/0x57a0
[ 1062.554063]  ? init_decode_cache+0x1c/0xb0
[ 1062.558309]  ? init_emulate_ctxt+0x33b/0x4f0
[ 1062.562734]  ? emulator_task_switch+0xcd0/0xcd0
[ 1062.567419]  ? mapping_level+0x11e/0x430
[ 1062.571580]  ? handle_abnormal_pfn+0x74/0x470
[ 1062.576096]  x86_emulate_instruction+0x7b9/0x1b80
[ 1062.580958]  ? __lock_is_held+0xad/0x140
[ 1062.585127]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1062.590159]  ? write_emulate+0x30/0x30
[ 1062.594116]  kvm_mmu_page_fault+0x2ee/0x1540
[ 1062.598636]  ? make_mmu_pages_available.isra.0+0x430/0x430
[ 1062.604627]  ? __lock_is_held+0xad/0x140
[ 1062.608723]  ? rcu_read_lock_sched_held+0x10a/0x130
[ 1062.616368]  ? handle_ept_violation+0x18e/0x510
[ 1062.621534]  ? vmx_write_l1_tsc_offset+0x520/0x520
[ 1062.628739]  vmx_handle_exit+0x26f/0x16b0
[ 1062.632912]  ? lock_acquire+0x170/0x400
[ 1062.637153]  ? vcpu_enter_guest+0xf15/0x5ed0
[ 1062.641581]  ? vcpu_enter_guest+0xe9a/0x5ed0
[ 1062.646011]  vcpu_enter_guest+0x10ca/0x5ed0
[ 1062.650475]  ? lockdep_hardirqs_on+0x40b/0x5d0
[ 1062.655349]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1062.660136]  ? emulator_read_emulated+0x40/0x40
[ 1062.664821]  ? retint_kernel+0x2d/0x2d
[ 1062.668731]  ? kvm_check_async_pf_completion+0x2a4/0x400
[ 1062.674354]  ? kvm_arch_vcpu_ioctl_run+0x446/0x16a0
[ 1062.679416]  kvm_arch_vcpu_ioctl_run+0x446/0x16a0
[ 1062.684294]  kvm_vcpu_ioctl+0x493/0xe20
[ 1062.688293]  ? kvm_vcpu_block+0xc40/0xc40
[ 1062.692479]  ? mark_held_locks+0xf0/0xf0
[ 1062.696780]  ? mark_held_locks+0xf0/0xf0
[ 1062.700868]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 1062.705642]  ? lockdep_hardirqs_on+0x40b/0x5d0
[ 1062.712313]  ? find_held_lock+0x2d/0x110
[ 1062.716539]  ? __fget+0x319/0x510
[ 1062.720009]  ? kvm_vcpu_block+0xc40/0xc40
[ 1062.724175]  do_vfs_ioctl+0xcda/0x12e0
[ 1062.728200]  ? selinux_file_ioctl+0x125/0x5d0
[ 1062.732809]  ? check_preemption_disabled+0x41/0x280
[ 1062.737933]  ? ioctl_preallocate+0x200/0x200
[ 1062.742633]  ? selinux_file_mprotect+0x600/0x600
[ 1062.747425]  ? __fget+0x340/0x510
[ 1062.750989]  ? iterate_fd+0x350/0x350
[ 1062.754822]  ? security_file_ioctl+0x6c/0xb0
[ 1062.759535]  ksys_ioctl+0x9b/0xc0
[ 1062.763022]  __x64_sys_ioctl+0x6f/0xb0
[ 1062.766929]  ? lockdep_hardirqs_on+0x40b/0x5d0
[ 1062.771536]  do_syscall_64+0xf9/0x620
[ 1062.775372]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1062.780574] RIP: 0033:0x45c889
[ 1062.783998] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1062.803736] RSP: 002b:00007f26fd72dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1062.811589] RAX: ffffffffffffffda RBX: 00007f26fd72e6d4 RCX: 000000000045c889
[ 1062.819404] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[ 1062.831370] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000
[ 1062.838745] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff
[ 1062.846155] R13: 00000000000003be R14: 00000000004c64be R15: 000000000076bf0c
[ 1062.853566] rcu: rcu_preempt kthread starved for 10557 jiffies! g146577 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1062.864887] rcu: RCU grace-period kthread stack dump:
[ 1062.870175] rcu_preempt     R  running task    29616    10      2 0x80000000
[ 1062.877502] Call Trace:
[ 1062.880279]  ? __schedule+0x866/0x1d80
[ 1062.884278]  ? schedule_timeout+0x4c3/0xf20
[ 1062.888735]  ? firmware_map_remove+0x19a/0x19a
[ 1062.893343]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[ 1062.898683]  schedule+0x8d/0x1b0
[ 1062.902504]  schedule_timeout+0x4d1/0xf20
[ 1062.906832]  ? usleep_range+0x160/0x160
[ 1062.910850]  ? __next_timer_interrupt+0x190/0x190
[ 1062.915909]  ? prepare_to_swait_exclusive+0x110/0x110
[ 1062.921186]  rcu_gp_kthread+0xcee/0x2060
[ 1062.925933]  ? rcu_blocking_is_gp+0x90/0x90
[ 1062.930759]  ? _raw_spin_unlock_irqrestore+0x67/0xe0
[ 1062.935890]  ? lockdep_hardirqs_on+0x40b/0x5d0
[ 1062.940550]  ? _raw_spin_unlock_irqrestore+0xa0/0xe0
[ 1062.946023]  ? __kthread_parkme+0xfd/0x1b0
[ 1062.950459]  ? rcu_blocking_is_gp+0x90/0x90
[ 1062.954896]  kthread+0x34a/0x420
[ 1062.959053]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[ 1062.965430]  ret_from_fork+0x24/0x30