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", 0x1000, 0x2}, {&(0x7f0000003280)="b4416b4ec3b2aeea75b4d1f488a90ec0e20ffa1e969fec7cc9f42e3a1e03359d06c2de57a2f907375e27589da6baa9f5bfa4604a4c0c731a50b36f0ab131474181c5f22cfb176fde75ae2fb108f1b1aea507a9bd29de3c4e2cc2c2df7667d5", 0x5f, 0x5fbe}, {&(0x7f0000003300)="9ae2a6bf298521fc3a6a3d8dc753112dc8b09dc7e6f85f68d362c24e04639edc2f7ee4786aed898e2067fc5c8d26ded2601e795dad5c75516ba404ad845f2463b19a7d763c83675ce55e9c256e24429db3dd393c255a7203955e1d71374a09ebf0972956a6735e789f496e", 0x6b, 0x4}, {&(0x7f0000004980)="de666d1c68d3a20bc97385752d78b4912118cc1376e058fd481be8629d4ed44f9905defae25499acf19174e2a5a176b847b5da0d6c3ffe1c5d2e137ee7fbbc41788f8fc817d19a26b32c70a50d9d69aa04c537f99e8104dbc54a1fba10e533de6283ec03f2bbd6c02325bae995eb17b621575c9433bf5f0afa0fd79e13b2c6bb72ab9a32d1f20ddd2f043fd6d36af46202a09dc4504371d0a42dbee11b12ae64ca4bb71d8506162adaa2c590476c17de14d159dd07716491839ecd8842d2d52e21237e716a0d3e8ca46790f39112e1416d69b0", 0xd3, 0x1}], 0x400, &(0x7f0000004a80)={[{@uni_xlateno='uni_xlate=0'}, {@rodir='rodir'}]}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x10002, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000180)) r2 = syz_open_pts(r0, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000040)=""/218) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000400)=0x0) r5 = geteuid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003480)=0x0) sysfs$1(0x1, &(0x7f0000003400)='\x00') r7 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000034c0)={0x0, 0x0, 0x0}, &(0x7f0000003500)=0xc) sendmsg$netlink(r1, &(0x7f0000003580)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfb, 0x200}, 0xc, &(0x7f0000003440)=[{&(0x7f0000000440)={0x2ce8, 0x2a, 0x4, 0x70bd29, 0x25dfdbfd, "", [@nested={0x300, 0x75, [@generic="13677328e70354d8ea44e7b98d5681e6e3ca9c4ebdc64661913697c96d15dd744df6c0801689e68eaefb805ebdd9676e30cc7d398fdb2588e8a80545b9a3ca0de4430d49beccc2f77607a1109511b4b8dcc26c901c95849bf17fd464f4d60cd86c986b1712a6ed829f84164f37f15c885829071eebaad5f9dacfcc9b849c64a0b49ee9d662c559cb3d0c86ee38f86f960a4d4a81dc0b1653fd1866699ce6b013d0067f1901c01c3ca36b5ebcc61f68afe184b7fd185e866c4a82ee0ffb839308d3a0d76408f5a2ef042235faebff4fb461a4468e020285c28a", @generic="ce", @generic="09e1a2068e0203e24aad96d0abfe51391c5e9fae61206bf7b1e74af1c3afae08fe64aa630cece08960019cfd45bad5b1efe7c9d0faf23afc4e92c5dec9a0fb6963fdb2f69db6bf5481356f523863123a935554c625ddd97a2b7efdba699f0d62eda36f40c53a07a56b16daf3a421191da1fd37d334b0a2c95eaa2ab988a1579a480b184137910b5339c63a6d4fd1e96db049f8", @generic="84143e696ad126ffda54c78a810bd15ee9bbd91783177b2bf77313c741c1a3171bce66ec44c3bca615b9665c3df121058bd38c9542ffd98509a1c2be6cb909ccbc65e4f1075bf6e0dbb6dcefc0fb96fbce2fa2d01665aa99699c1485d94bb25dcf2c910d919c784adf749c57b9ee733ce1b162250046e3a9e87815aeb06f6aeeb5228adf819c50a6194cade3ee3dfbcf099bc433ed8d1aa8d981cf7a1fe4", @generic="b85f978c1d927a52c976e812345ca51df37a4f2494802663e5aac3964ebf95b012b320bf84bd7cbeea53192a710d52d963c71fa412f281411f21fc1fd398cf10f7d760c47e2734fb2d8414261ed788888c0d4564b80f0a883b65e45ad6087df39d89d08fa8832c46376371ca0fabac2c330fbec828aa8e6e0b2045c310e7f7e6d264de5c3dbb4538dcb62010008d650e92d607fcdad4715ef27cd2ec5a86a5a07c5260f936d6e55d763a2dd67e5ff64f5be9fa413e4d526834dfe30daba56bf5a9ff6f6b9a010f391e3bfd5b3b100c280d3817fbc995e7e1e9c1e6d995f98a8fdfcac88f9c2c93bcb87e94c7b22f87"]}, @generic="e89c48bbb856fad064e1079c823c541db342e810aeb0ad21a6de27d939eaf3da9591771de12eb46dbd761537e268a7d25b50f347c7b96dc74dca2450c277fbbf49f16a830fb6da48f3c88c92784a8b4b111068c1a18a4084cc5f2cc0785870f9735e0939fde5ea144ee520101185d71fd3232e580b74eb3817dbf78dc7d274d2f922c80b9567da8cb737f0ed8526", @typed={0xb4, 0x90, @binary="8f86894aef9c52e83fd1015ed462dad9eef444b0302f6c3c01c0857c2c0ca7fe951424eb92f9d9438dcd4908bf520ebf334f9c1ce40b8dc554cb683e28a630be60efdf098f27cec18386e7c6f9824ce57dbeff522bdb8ffa7ddbb76faaa14846fed8fa9a855e1b750cc8682136357e77ea4ed17febed0e4a95449228966f32e9906078036bb2de243418ed827a4ac532fbf19185a9657c006b3209c2fd55cb0c26abea521993cacdd2a1349c2f3fcf"}, @generic="341205e501db41e641119c5b64be3730c45c9c140fbe389f2a109b2259baa3b0f627af30b8088591f0838bc65cd3278241c62e05ff264367a454bcf11eafce669a8d3eda8595927ee044c97fbaf3b7294543c6e9ee77551f6bb308d71357ce631e585be673b3adbef9355901e6ee000dcccd39bd3cb2a1b9cf900468728c586c1ca1de2f83aad33550754ef6b57f8942fb4849181a4c8d7c76f6ac33c7768270d6d6ef628bad1ec0422cfed6396df57d4c6461bdb196f658b028ce9d", @nested={0x13ec, 0x1b, [@generic="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", @generic="00335cd336ba77c088375a96881ec0462a6df817bf70bd6de3f7d45c7d5246cc6ba34f832372bfae3133f48589af38783226085d24b35b8a462512ca4e5ec12c7d83b9ba5a46f0e1a919f1a0b5a2fbfe786862070c2a7f198f46b382b53250c778992f3225ae39cdadf9d739c7bdde9181594ae7ad2ccf00d05b7ff3489b4c04d230e063dc632ce37a184d12d5987a59ff616b9c60067685f69dc38ddb88af24c46ba5d61fc6b2084da17ddcd49b762f8d1a1489f871f9d82cfb218a8d5ad166c91afa0a7aeb2f7c0e30b74e5783ce1f19a9e1e1c457a3dc", @generic="70d0cee6a6ef864f103c8f559c2e859ae28a3964c3d3de2c520f785def0c7821068d841e659cd4663940c79870378e43b7ee09f80865c87579d6e77306fd3134c49abb9af091f08d1297930af2e3b69d380e244ef951e09613ac3060b725091e", @typed={0x8, 0x35, @ipv4=@loopback}, @generic="e8ae26560671133ecdb8ecabee7cac72c5502713cf4be184736d98efc2e7df658230975359d19d3c5438904bce4ff8c8d63840a387ed8cc360b65c16eb4bf699512aff40da16e6616e12dcbf1c0d334b6cc62cc8d752c64eb372bc89000cff861d2fbf083394d45d712545c01a41e86f6ca3c84d6e0cc3b2873f7c0e46360d07e1a4563fc5dbc338c956a34b7db4984bb915d26e610652a87f08cab531970d8a2cefc6393c8572ac5253d6b581024c8dec0c022d68eaf146f36430557dc8f99735d454b137", @typed={0x8, 0x45, @u32=0x2}, @generic="41587a1f8f177ce8b33158466aa2cfe175fd4322c496fc3ac6b125d14ae47f32b7e988da6b506df25684b36595f5a44c9833aae65d98d0ba23e2a6e540e62cec3e0115bfe2a8f36cfbfcabbd9ced0c28afe066b0af33a44d497905f3d1ab1869a7f788146f400ea7fa0a2dc52c372505f686bfb93b9ea680e0773dca8f38d713def1cb971962fe15f486b8cc7d7a4dc5c61cd4c3952a8b191563e342be66e49cd50b5578e6c97ab61c667b01142ceb5534e08a63bc72050ed73d234a886128c70af9360628e0e17cc6d262e443f980aba7e1736615370e9281cab35414c5359670bef9acd5", @generic="db8d89df01046021d40e79b94eeec2d2c431f5df3e9262c9b9d841f77a360c31accca513840ac718ffea3a5be4e7bb58bdef91c816388975d0fb4c545f54eb98684c4c075b844943069516dbeae4ad5dffcfa5baf2", @generic="e86d99e327243040f1b1", @typed={0x94, 0x1d, @binary="95c91cf96a2c306f585887fdb9a06e7847433d9730ff173d02f5fa11bb888e9bc09fa1c5cd03280ac83b09bdd6b0d32a71a2648f2f06cd443ba376a5cbcb9dba13c6d4c3651b9987185fffc0325f0c96aa74900d4aadb73c135ba239d5655623c7df9251ef5c0903eea1f04b0b90f775aeb20c5639d67efd606ec296d9e7b952135c2c4e43f29a3a370a48341d63"}]}, @nested={0x11e0, 0x7e, [@generic="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", @generic="dde75887118cd39b133a09a54b368ef80cf367e18b41a1f7a37f37fb234f585d110c92f25e0098711d33e0606e84971dddf115afe55249b46ecca7f0678273d0a8464e58d15020b648555a1263a65878eb42de1da5093f60b677a13bed1288c6228691aace1642b828c9512984c73675a970138cabcccd452a662817b0acc92c5d8edc49add808c1acf0dd15ac6ad99b69c037acb88faf3afdf8fe187cd7e5a76d", @typed={0x8, 0x2b, @uid=r3}, @typed={0x8, 0x76, @fd=r2}, @typed={0x8, 0x46, @pid=r4}, @typed={0xc, 0x68, @u64=0x6c68bf3e00000000}, @typed={0xc, 0x93, @u64=0x6}, @generic="cb2c82ed192657dabbd2d3176bd7a84b3e1b67e833866ec65cb3fec78f037c2bee5291aa2ceda801ae6e128aad956bc31456c6de454a16abe166c3edbb39e92010ae5c37087f525b1659c16e7a26569ca41b26a9518293766909c6b5b1d5fa72bb024a91be3727ab58362d19cc5ed8c2552604588dd51eef7fead16e89f4fde7be0898fb4532b3c894ff13a30feb10fb012884436a4e15384fe7b764830bc3537b53310b30f2acb9750f1353fc49cca2dfbd5c6885f95be98dbfb6a3a49d39a019212bc1e4c19619b85ff37df3ca544c8b1526a02b5b53a8e216cee512e9e04fa16b2ab75f5e0c11d1d47f24be49559671435b17dddc7ff488", @typed={0x10, 0x32, @str='/dev/ptmx\x00'}]}, @nested={0x158, 0x39, [@typed={0xc, 0x0, @u64=0x100000001}, @typed={0x10, 0x5b, @str='/dev/ptmx\x00'}, @generic="24ea3614e5400341ea8a21169dfb31aba3d01fdc6be5ac9ddb5f1a7130b2d3be140bcad9fc281277a0a7f0959890c5ccb4027724f35ad8d99e4b2f69ecfe7a959950c51004170639d98acb2b8e8de477cf1070de0fbd78765cb59fe1b1e2deea6ae0a627de482c8d30182224c97879525c587eb8b7eb69abf814129563902137d71acc611e66dffa8a841b348bd71a1953b3b2c16edecdcfe52fa780ed945bd6f85bcd668bca9de9", @generic="31a9a5632cc1c31d307c643cc1efcd88e930f18fefd7a7bfdabe654dd50452c91f44bd8a632e5fbb4254afed1a40bf4b5f219ce393baff14ec3493f27af2bf6f946054a8c66ece0bc0d7562096ef337d44d7c39d51dbe8d32c21b5021cc3c45fb23f8b0ed5f07e689f31d2c97b136033fdbd0a16986f6cb0a8475d0d53d19a25858c15332e7dab68c4a528abff90"]}, @typed={0x68, 0x11, @binary="0ec1c00d25b9f5c6a0fc42249dccf0ff56a9b066c633cdd9fd9f6f25657c33f3658457bba6cb4ac318a6cba5a3c9c7388ca46495af6b7d3a233ae7cd82af1a5cd31212fc7aa889fe6c57d6e9ad153e1c20b071b8c2abc78dc10434e6b28b741694e225"}, @generic="97ffd765ca60ed58b4249363982e95ea57c6a9b8073badd31932a5e9802b3ee2c13917a8f372e26a135611965905f6ff839453d1dd5f782c5e21110b56a03a1b35ede15386385738b40655bfb3"]}, 0x2ce8}, {&(0x7f0000003680)=ANY=[@ANYBLOB="a40200001700000029bd7000fddbdf2508004e00ac1414bb100060000c005a00020000000000000044029000ee3ee1d77e319976b54ab7deef89764e0cde1c4ea019851dc28b29ce0f0248212d5bb1b2300298933b87ddd0c80aa8433f4441e719a0035fb6d618fcfc96d7bbd6707cc5f04a04440c8645030d00f0eee944a7a27534adb05e2be494877902f127aebd1956225a89fc83ed3a557139d34556909b328f0b3edafb9bff7addc2cfab071537fc51219308007600", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0800520e000000800c00120006000000000020000000007e7c222bca3db3877ccec9dbf975f8e7109003efc917d91078f9a2b472ba43"], 0x2a4}, {&(0x7f00000035c0)=ANY=[@ANYBLOB="100000003b00010329bd7000fddbdf2571b7347977eebf708715eba4fc18e2b98d8f1eb02ba43f548a06962384d5247de9ec58eb8d1babd97864c4a4869b64d0531598e8f7342b90eda721c5612e28aa44931a10d55318eed306e76f6d589c3b63b6878bf6010467f7aac8c0cff59ee3bcf09b4408e6207c7debd55b74332117f6c7b9f0e04d6e009f089a31e844850000000000000000000000000000"], 0x10}], 0x3, &(0x7f0000003540)=[@cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x20, 0x4008080}, 0x40) socket$unix(0x1, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(r9, 0x6, 0x3, &(0x7f0000000000), 0x4) r10 = accept$unix(r1, &(0x7f0000004ac0)=@abs, &(0x7f0000004b40)=0x6e) r11 = dup3(r10, r1, 0x80000) getsockopt$inet_tcp_int(r11, 0x6, 0x24, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 290.577829] attempt to access beyond end of device [ 290.583086] loop1: rw=536870912, want=133, limit=112 [ 290.589603] attempt to access beyond end of device [ 290.594551] loop1: rw=536870912, want=2174, limit=112 03:33:46 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000002c0)={'teql0\x00', 0x9}) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000140)) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) chroot(&(0x7f0000000400)='./file0\x00') mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000fdb000)='ubifs\x00', 0x80010, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x200, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) preadv(r2, &(0x7f0000000040)=[{&(0x7f0000002200)=""/4096, 0x1000}], 0x1, 0x0) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) fchdir(r1) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x7530}}) close(r0) 03:33:46 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0xffffff10) 03:33:46 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000080)) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:46 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x48000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xfffffffffffffffc}) r1 = syz_open_pts(r0, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000140)) 03:33:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:46 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 290.801958] FAT-fs (loop6): invalid media value (0x76) 03:33:46 executing program 4: r0 = socket$inet6(0xa, 0x7fc, 0x8000) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:46 executing program 3: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x20002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, "7175657565300000000000000000000000000080004000000000000000000000080000000000030000e7d4e77cff5b680f430000000600000000000000001000"}) write$sndseq(r0, &(0x7f0000001400)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) 03:33:46 executing program 0: r0 = epoll_create1(0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080)='9p\x00', 0x1, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@nodevmap='nodevmap'}, {@aname={'aname'}}]}}) r2 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) mprotect(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x2000000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)) 03:33:46 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x21) [ 290.841984] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 290.883460] FAT-fs (loop6): Can't find a valid FAT filesystem sendmmsg(r0, &(0x7f00000069c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="0fa8289e5da6e6121d01d6327a4b58793f26dabf7fae7bc575d1165d8483a7f471fc1e89961666d062febe4c316c53b70e2e8268", 0x34}], 0x1, &(0x7f0000000540)=[{0x60, 0x0, 0xa617, "956235678ca6b53364cdd1d57dd557ce92acc3e1e1433b8e75fcef64cf09ce1f0ad71963b63853e61feb70d2e4b6e23658ed6b243fe5934ff72bb5827c16756985694b9f0070440eae1bad"}, {0xf0, 0x10b, 0x1, "ad2196665a5dc424286a65a13ebca703ba416a556ab6c70620b572bd46f676dfe17c2ede2699085de75075a824cef19be015e954754320af2ebc700a783c6704a88fbbcd44b22d5f4506431e1c74184463a0df530aa013720211c1edfd7f51b2f065c67976eaa8700d06c45812b91ebaf5c3fa816e33c3ec1da8692283e51541b3205882bd3c7f7be1909e184abff20f669a7f31e693b9afd87078cd6abe61c79fba7291b311259ef239db84e3fc4fad90e564b95bc3807ee319c951b0adfdfb8b276716a398b30fea1f696a16344b81a4d2a907d2453f9b45903d8c794ce1"}, {0x1010, 0x10a, 0xffffffffffffffff, "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"}, {0x30, 0x11, 0x8, "adc72e3878db97411f0b83441d6f25ec48c2fc0ca808df3b6061"}, {0xa8, 0x109, 0x81, "790fd456e1238c1f47dbdc6c2b39cfdcc607e690f3ac8ace5e38603b2eb50cb711c3fe9ac84d5283606371e91dd58e4109c7ce43a1f6b60c13a2f2fe665c488f4fd577f05aa9f3860356973b11c2ff038be0885bef614ec36c6001309446e82163b55ea0ebe551c4ef1b92774160d95cdf3476bd47399b3693efcebce0304d00f52c007c1437104ddb7d0c5eb0266947ca"}, {0x40, 0x11a, 0x0, "9a9957d9332f8139853f62c2b8936bf6bcf546b9c066f7e13a9e22449881e9dd13705e0bacfe0b4af2e9242aae5c42"}], 0x1278, 0x50}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="78f93df40c601b63c66f0ce08eaa0863719b07b1dd5f0e3cc20f72a43da40a70814268f63b04ff9b020eb4446567f799e04dedcb14a6e2e7bdb70cf3125d9920c60bf288f08cddce821437281384d86f9348ef80313aeb822514e83fcaac737b9d93eb53150571926f102fc7e3b9a3e3c4cbdaf2029e5c66ccf5ecd5d2141c1b5739b17cc3d24c1fbf7d959938897c00f6c22587a71ecd0397686d84e2e39b8c45568b3dcc589489abacb11002c32d7d8239584043213415b096a8114deccc2a4b7b6a06eb64746d5dc2f43b430bdd1ab97665d3b184f3ea0f6f4e483cba07a02156d77ecb224694e8095a", 0xeb}, {&(0x7f0000000200)="b92a53039b844e20fbe5086e52040f3ce73bee2ff1156118c40164c3e58a93c8e302cf1827068d55432be83a196e2dd01f325f9ef09134211bfb24a01e31a556b58892cf6e3fad692b2896130dc67ec11e2caf89012522bdf3ad56098048505842b75b67d87c1f17246482771d5fb10a0e9e8536c180685bc97b0b8ea95906aef099bb3e999f945cf440d1f4fa965f10c132bb5515936b6c1273", 0x9a}, {&(0x7f00000002c0)="ef820b1caef1894790088d42cbb9dd126b0763f871eab72faccedc996b1d68cce5bbf0e4465485aa1ae5cc469327d82ba262be23a4b62be3de81e78f189824705a892f14a383073b", 0x48}, {&(0x7f0000000340)="6d91cbedcf5cbf11b7a8a30c0dae005e863666e394d6f5c11338574c7fe1812f345d009903db21a591648a87e73433e884434dfb621da56251eabaf4999f555b5c2c54b3dff2675bc80113526afeb2c15d678972ad22c058d1f089b29d565be6d7eee282f306dbbd54e9ee377170e2de9eb8162934e106f7eba86f", 0x7b}], 0x4, &(0x7f00000017c0)=[{0x110, 0x107, 0x9, "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"}, {0x48, 0x119, 0x2, "d2e45eaa5f7f024d728e2e8abf859a16a9ce9745575b3322ccaa1bc24460b1ce0d8e721100b2729579c38fa65d4ca5a34c334b30"}, {0x30, 0x29, 0x7ff, "f3b7e4132e659e9bbfa502b0b2a43bd6201137901158311d7ea2"}, {0x28, 0x10c, 0x0, "3f808789ca92907becd6bbd3763613008bb929c9ef1289"}], 0x1b0, 0x800}, 0x2}, {{&(0x7f0000000480)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x2, 0x3, {0xa, 0x4e20, 0x6daf, @loopback, 0x6}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000001980)="39058fb4cab4e6124b564b0bbdece8a17403443f9dd30682f5cb54c1bd204d9177ed12af701dd0b29e4b42e0ecdc0d3feabcd9c6f04a77dd8441edd8770b55236237b19338518ba2f210e395fa766ef478744c95013d3eea3800eec77efeffbadc2ea2256d21f21b4e9c29fb3896f719b99aab3e583d829c32a258bf2cc96ce6896077fbb696821ba18f9284a4bb1367dc0c1030f5d3aa4892d0709561218448dcf2686299a00afd787003035066dd5e99d764a6a99493583e57b0", 0xbb}, {&(0x7f0000001a40)="7655b3de4ef4d0d0ab7b3a6d678cd75111a61b94c2257f5569c4d07a818161bc8c206f313a8c8f29091b3730d103daed503f854294eda335ad48ac703c219ba9dcf3dd9fc7a65f05e9ec863fd2b5ac3d732419b50bbdb54ab20f4f57c21dd285b4aaba24faefc3a4b72f37de3afc139cfe0dd7d0b7ccfd5cbe0f29fbdf70e6e3bcaf954690c14341ed8ef1817a15d1694d78141fef", 0x95}, {&(0x7f0000000400)="d7e8debd4947a2eb9f1a03e1201eedaf42f903f59a75b7d30693075b009ecf63360f0895b9227b570819fa7d8b9cf61fc074ae8b31bd9a829320f7", 0x3b}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="6d70880f254d610ceb4984f51e6f57830db4820370a409dfc505302a22eacf8b432aca976b5bc788a75c48223f4e828448f245b046e5ef6214f7a80458e83d41ffd5cc625bd998530360c641d9fecdfae83146a575bd22110786c102a2bb3a93ff2ddb6a712ae944e0163817213bf45764250bc8535947599f031e2a5b", 0x7d}, {&(0x7f0000002b80)="a079f133f819d5984bc2123f63440df49b6ef1520586fce3c8fdd4d78fef240466ae877554d3a3fe9bc5b76d32466189341e0e12cb2e3ce526c7765dd6d44fa2ccff71f9f78468b915dc5b0f8b0c7fc2f5aa1ab2eabf4f570e6d185a0b32e97306b3f83a52b5412e03d9960c31048547ca13c258b5228dd1397bd82b3b366e063bfad0629b6cd58b60c372413158fa14763b0d9a0f2c439d0d48ae", 0x9b}], 0x6, &(0x7f0000002ec0)=[{0x88, 0x10a, 0xda1, "19693b6e9a69f653c0fcfae66cbf425b2d0c870d83d791aa25fdd8f1289ec3966bd59f97c7a31d1cb6ea8817cfea25517cf95e76b419b3dc609bd0c8582ee44e535e8322a3d0614ba3f258248a7fb57439d065a961d51be2d275cc78b3bdb637bd1f15d2cf94cf57749643b6b31b6f0a1e679c"}, {0x1010, 0x29, 0x1000, "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"}, {0x100, 0x10a, 0x0, "3ae043754efba05dd53c6100d7bc78ed5b5fad207dce54b6aa7b0718f3b73d728bddc1d4c5cb21387d1bb36f5a9ab881f5cbd9f0812cf9c5f8c418686b6b6f1c0f7dfc7cf6e1997843157b8ea7916a3dd869357ec6856403df218d7bc2720778672e06c56beb5eecfd8e297554d5b89ba66900a6bc793b83a933706de750c40f28797cbe4f989412bf45062ca106a984c7038a758b26c1e7e8eb5127d54c53fdb029d377282ac1850c63a76d157ebbd3ed56f92d48a47318ab8ec51cc4dad131ec3019f8f21d21cc39aa48521f61bb9d099dff82fef965fd0a4e7d88c6fa850b252e1a069df97cecb25549"}, {0x1010, 0x11, 0x8, "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"}, {0x10, 0x0, 0xfffffffffffffff8}, {0x28, 0x1ff, 0x3, "bc20e5f178b11a4d2e136e19defdd0d5f8159c0b8b"}, {0x18, 0x13f, 0x3, "b5677227"}], 0x21f8, 0x40}, 0x4401}, {{&(0x7f0000002cc0)=@ipx={0x4, 0xfffffffffffffffa, 0x1ff, "5ad7243c66ae", 0x89f}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002d40)="8f0327ba764573262c9f01b91fbe186c0a99d0781b53da5cf324a7723da15f19ebf2fda16b5e5fce0523d438fc5445e7d3632cad9fc5f7c9c14f19b656a88d9e3837ab0e9e0dd1a68c0eef2cc68e362b35e927fe4137020f7d5fa0", 0x5b}], 0x1, &(0x7f00000050c0)=[{0xb8, 0x119, 0x20, "6cdc6f6597eee344c8176a48c97d5bb1fea998087a13439a16ec35f51fd9528ce64099fd4b02562b67a3c7ba041f0e45174a5b2cfd9cb9c06c5fd0c6792e8ba4272bcd1d39ab67c440564df1493ac8c5f275e0bde02f61cc618750ea40cb425fcd401c7d9743e38dc4a4a537bf7590fe8bc2261b4cc44a470e819ee0f927a296c37e9e55fa25feac61691f808e7be3853f5668b07b0d7010f04d8122dcf84183ccc0ab557f28b7"}, {0x40, 0x11a, 0x80, "b285a4ab65afd43b4bae7cc465c9dc500d14985befb185086d3d00b693db25e955b55b0688edf7b7248d3204e351"}, {0x60, 0x119, 0x6, "3677273e692765e7f5eee9c4262075a5a0c6d777b354861eb659b023bf49c876c1a3bce8dd79edbd3f5a0e846e6c36fb109dab9807dccfa2b5c55cce83c1fac2377d2ea789eda16ff044"}], 0x158, 0x20000000}, 0x3}, {{&(0x7f0000002e00)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x80, &(0x7f00000055c0)=[{&(0x7f0000005240)="c9b5f22eaba088ce633f50e6f6040c9cd5b25946923f5e9c6b7d479ba57c23f78b27e01484eed10d4ffa9ffdc2608e3b10c3b1b603112ec20e99c5bb43132bff69fce11e3589f5245167575e36ebaef0503f0301", 0x54}, {&(0x7f00000052c0)="5da437036b30ce19cac93b837f092c7ff2b1f1571fd84ba5a29c16fe9d246111b41e841a5daec436ccaa17b73b0c1d8da7e1f4c5450cc17620492c15f6be012576db81c0f703d8cf24b6fdb08d8043ee9cf9786cf74dbd562f4da1f118cd0049d6be5ca4c640224624ff61f982959f3bc87ffcb9fc1f2692287dcf45a32161b526d690a9e0bd16754103272e71b11c0bfcf3d95efbb2bd33783053fd937992600893dd093c96b5b330a51c7993bc98bced26051398074e8b8790293ca47e07b0d0ea76d01bbf4b8ef2", 0xc9}, {&(0x7f00000053c0)="9dc9c48f5bbcb94e6a27e0a41f8f6792a213160aa4c82399353b39fb0d63e5677766787007313d0726e420e840b0e5bfd65cb2e5afb781c87993257c709715b4919550f26e0425692a794beeaf492b969d0bd0f36d4a3511be973c56e3e9862adba2435b2087451c10dc83c911fb17f22638d9ed16b54978b743e461bc9b1ff58e7e153f90a05960c01660b454dd95c7eefd0ea220e7de7c452ca3a23c7ee6a92c230cabac4ab93962d09cd4f575d68506a4e8447377142e797d62e802e3359268a092d2e6be9413905f73983b5f97b98234fa9f14c320800c62de03fd79da45", 0xe0}, {&(0x7f00000054c0)="670adc967fba1c7363fc9da91e8fe1a0b3313d5db3fd7cc7ed8e6d42e0414dfcee467e7274a75fae94ad09cd4dfe640c35fa8b6c5964e67103b047d455c36125d510ccdb", 0x44}, {&(0x7f0000005540)="40bf28da6afea790fb11e12f93fdc7766e5a5c65b8957a9ab20508526e7d1bc0195f8a29880c6cc80dd8288f510a70a3b1c61ec711a6d55276b190bfc57a992fb0bc599ce51ff949db91a65489e296dfe2", 0x51}], 0x5, &(0x7f0000005640)=[{0xc8, 0x101, 0x552a, "cf167acf10acec5ef98fa3df9c34d85dccf0e57a7e1d181946f8298d95d2d9359c1e784845d995e54750841e60cacfd3961095d3a1a08d8dc013c275ec556bda73853fd8094b0f4a8826a2b748c23f540b943843bdf15d47460278e83b0d3b8d78592035324b1bcc5ec845b1e09af323815c95aa209d0b1811763feffabd5a6dfa9ced7fb6eb1126e46e5da36d55031d871cc40aef0cf57b70162941f67e46b85f982f372877285357dbb835185fb94f8e"}, {0xc0, 0x10d, 0xfffffffffffffffb, "9e1dba03da0f75a9e8ec48bfb73e300cb92258f4ecdbd8aa191b78ec0991d267834c0a58dbca926a3d57793877668cbb3588e813cf6ae9b767ffca8671b05302ae85c6eabcc302b46147dad03b70862a1d1a64037f45f492ea6626617df44a8212e3c29e03d618de94c3aab3b52417eb96d8cae397ccd8745b31cb0370888aaba5a5a5e7e0b01adaa6ceb892b3c69900d92b35cd221d57e7fb7428419dc99d663258a223ff6b6b488c"}, {0xe0, 0x113, 0x8, "1a8981ba1cfc5db319f448ef6b73f2fc99d456f41e318b1ff72211bcf9bbb3660febd3eb5c84f062eb7d7ac6774044610168937dfbb4ff6986c577b06ab53d0517ff531b3e9c2cb003bd2297bfe594cc971ad5c3f1d31285299ffcc1d8e9e7fbd1b780a2fc04162acd890cb32c778b2b9600539a7086b3e768765116c7ccf2f0a56e3f4ccd42b111ac3c999d3b9c8810ce3a548e93c42266a75a8183928295ac4d3d581720676cf7c175824078d8999b35241cdfcf1d1af6d3ee6f551cdad31d54654fc9f4e0f03a99fc2a67b5d6b111"}, {0xf0, 0x10f, 0x3, "022edf35873b84caacd0b1cfb633cc66f835fce31431e79d389727f8a860863a2d6d7c026731ffeff050e6c7aa396bff446fe33a6aa94f269f3264413749fe3b987489d3bccb6d6a6689f1d32bac85e2257f6fa708d2e95e592a348d3b723605a0682f8906a0567428b53e71f1c7cd0c7a2853f14a40a478ad3b73cf77cccf1beadd70c62fbfbb9c31599bf3af9041b17301c7e4a4563eb11c8f7cbb023cf36e7b11d0e4e02fb3876f5e7a75c0dce4e6673f08c371365dced77b046b293aff94745570b5e8c91ec82b036fcf3381c87f392d309f50af284ccdc00854b5b6"}], 0x358, 0x1}, 0x1}, {{&(0x7f00000059c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x8004000}, 0x80, &(0x7f0000005ac0)=[{&(0x7f0000005a40)="2f2fe134313769731162b623ea5e9a2441647d0c8d7424019dc43204dd64fc72f847cc6132f9aa866e3ced2352164717b12c92ca828e1e0ade7b84af7f60c50534d607cee5aa715eee90163005bc054d411cff138e960c3ab987c644192f79a4ac1d84412fc08bbe5f4c7c25589addd6f507b64126", 0x75}], 0x1, &(0x7f0000005b00), 0x0, 0x80}, 0x2}, {{&(0x7f0000005b40)=@llc={0x1a, 0x0, 0x2, 0x8, 0x383, 0x10000, @dev={[], 0x12}}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005bc0)="63e4baead1a2feab2eb42ef48f2a290ea07fdfa67fb6bae5bb5531e649c23182245de4fb855495511d7d0dda7189780c73a8b56ee65c97535aea3c4d029fe1bafe15f5f9d37e8a5723142c71082fca48d2d733213fc32ce12ad85d91f2e3bc6f7b3dd0a20933f3460daf90cb4cb47cfd23e543e4a60dae9e53abfb2cd479cff7422ef31c7f832056b59a89b239ca0f6834ce29ba2008aeb5c6bcee4c6b3490fcb0e578610c7933975e829cb42a54fecae8bf20436e885645ede117", 0xbb}, {&(0x7f0000005c80)="e19542746d09c22119bbb5a579a16bfd6e58ee3611e6f35824578178086cccc4732e9fde39ce093db73d6c1f0a02b92a198f12c637eb982ea95781455b2bcc5bfb6191f9ebd070e7a8ad3310328c38cd6e7c39ac36106770b4c77e1ad5bc00ddee8353422ebb51dd85572314455cd13dbdeae6c1964fabc992cebda40ec84e7fea36b47f4320823d024775c4201afc089fd03a55f2c4853b84f18c1e08b982afb94b5ac48dd97015ad3e3db10fb98c4579531aeaf1fdac87f09b334fd120c7291b8cf8018f0f7de43b81040e0993c54b9da4d267116275e5febc4d8755ea38da8697d0718883e033d4bbfce6c1ae7e6e6b2a1ae5e9785a3e8bbaf038855f12", 0xff}, {&(0x7f0000005d80)="3632fc1f299354d13f79304b7b3b6f645fa1d0e8920a5fe64cc0920a761364453bba202fbb6c6295127ad48f50847df105f8216c57d8e8b83ceceb7fcf07ee01215ef770a84987bfbf87870160790e77fa751f90f80b2a6e6f", 0x59}, {&(0x7f0000005e00)="3fab31e4eaf3bd686dc2cec6bc30ecd6b5b292f6e5a5c57aebe53861dc285ebe9c708670fe9d5b27215af8bedbf3ee7fc71a9d10de7fe04ea62b8c97fc88a64430801e12b75a341f10dd96283a", 0x4d}, {&(0x7f0000005e80)="404dfc49acd9c8ecdaa4345927cf93fa93e2f5024f76fc7878ceec82001c41", 0x1f}], 0x5, &(0x7f0000005f40)=[{0xc8, 0x117, 0x8, "fdf5da7b8fdbef4b5696642c57a3e85c0b35f36f55e062b3c6f268a4ce6aa7a5aac3a460b5e5d44453a1622adba657b58c828e32d2c8a0c851acc660565a184004d0a0036f93252c7850b53e5ba1d0c405118d803d015a1cbcafdd74ad6f884aeadc75114ad837c2dcbcb90eedb5de99cd64521b4f9b6e8833f95ceccb091e18b416d2de04ac689e2f5f5ba3b96ee328521a25e624146befaba8a03dd929ce4e601af21e3da9f542827706248483ff48f522f09f484768"}, {0x28, 0x0, 0xe3af, "5d3949ab947598726f79cc1f171335443099d8d169"}], 0xf0, 0x24000815}, 0x347f}, {{0x0, 0x0, &(0x7f0000006340)=[{&(0x7f0000006040)="3ff0b332c03a5dbe0ec779b514cfdae6c779ab2b7c8857a743c03a3bf722f153fc09475e353567ad96ade246bae5fc74e81b3675acb3ff93f78015c071e39e66f58dd1991bb645c597556213732965229ac0907ac7535858e927bee80b22087d9cb9f1c3ed5911c3b33239ea104acdc4574454973675441ef80c2b1db0310d3099e6414a28e328d39f56f40bf00c0c8720ce9a1753931ec82847ab08e7115835f8e3da9fc3ba44", 0xa7}, {&(0x7f0000006100)="7533b20071a6b71fe1030feddbf7fa588abbc2af0599113946c7ff680c1da5ef5721ddda2c8b34c637c8439cc05e09d43b5d4148619de53aaa24a2ed92e78f09c42a4182a4357ed983024d38804d59742cfd3e0a7cdc8f", 0x57}, {&(0x7f0000006180)="8f44bfddf5a7f600ce57ed07ddb044b07624315d9584df68c0379108be59ade116bc0afb68a54e6f4dd13780c835847c285a16906986be73430b80ea043cc1e565e24f74a0d9372bda3c8f04dd3249ea90200f172ebe9384d86230b4e2167f4653e11def53f910e61d98649afdf7c9f24f56f045fdf920bf682d5a652a30771d36bc3b04e0ebc3a3d0cf7e6617e175ed87a475038a80892cd9833dc3d5ac50717b6178aaed3708", 0xa7}, {&(0x7f0000006240)="4b0c57a47d6171338fde1f5c144e5c86c0323d7300d3db91", 0x18}, {&(0x7f0000006280)="9b4b8044426630d3f9ddd0d41502800e56c1fb3fbdbb73f929c7fabdfa31253068c97d2188522f1f4c0e05846a098045a700cab85cdf5027a7b9a06d842ca28a11aa1ca8d447f05d4725d2d1821e96684361f4f0ec22bff6364f4671994b162543c2289899f1624def4208044257ae2e7a7435c565838315681aa107edc9b5e90797d4", 0x83}], 0x5, &(0x7f00000063c0)=[{0x90, 0x10b, 0xaf3, "7fbb6f2d3db9bb82ac1d22fd1d505b6cd53d860d39ed320a9ba9902b72cf69759697b94a2115bb55eefa011050858b57f393a60305221256da134cae93e2703b98d76cd96341b21ccd0c6f4686a25abbc921d5ec404cada3e56f6de1ec42b4d003d65ec615236e14d54036533421e9efe310478846960a0001ca4428"}, {0x70, 0x111, 0x1, "1761e02a77b616602b643729615234c9ab8005b1e8c9571285b84f30f2c4cd913a40778206e95f09cd3b8a31583feb0fdfc2ce5ed8827093197e810b02a66397f7f5f6595f18998286a285e9514b11cafceb826b167e3adde7d7844d9664f5da"}, {0x58, 0x109, 0x5, "4116097efaefa705284be6f324093a023636600b00b374cb0bd7c836a0c9547e7a082375bb3e852bc19933f0cd99224faef0f1b4a54645cbf5f063488aa6e77ccad21be5"}], 0x158, 0x40000}, 0x425de162}, {{&(0x7f0000006540)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x80}, 0x80, &(0x7f00000068c0)=[{&(0x7f00000065c0)="561014d0034616f346904f16f6006696ba89795da5ad4f70018fba64b6c0c20a3208c913bd7b5f79be6c0b9e3386a92567e7e903cfafb5a0fc353079e87be4aecb37b27ee65d3fdf7d78c29f643ebad52eeeb7b38d2bb8076e55b2025944b98a2fa686391fdd199d91e5f5e3771ceee7ed979f7fb4c6ab411c35ce32b4135116b5c90250450d936bf0d3c62e741b1991dd6481290e0785c326b37c2810af600d50a1016e1fb724fa86d2f058e7bca92aeb41e1c2dbd940ceace2ec547750acc413e05208e048a4d11331a99ab9bf5fbdc1dcfd1362ddfd7c6210dfa58a19b0479270", 0xe2}, {&(0x7f00000066c0)="4d97a992ba38f8688be25516f73f07e04b8a8b32c2b025926040df546eacc994e7c87909bf4310ccabb74ea35fd6cb84fd40ffd175f2ae72131450c1038fc6ff6adf9a817a9c394a9028902c7fc9a0835edf911bcead660dae830c347c5a7b8f07d5d2c8f7d6497d277b5e55e9640e1f574a9ef2fb4a8532e5ebe01590f80f8d9fce7765ab53c520e3", 0x89}, {&(0x7f0000006780)="6d5a327de500340187b266262c37ac3ed8d7d0a8e707fb5db6421e00135a27daa8dd6f0c8fc0a625f54c1b4a7d45d4467dc807c5d35ed8b205c9d89c46802234195c8093c63cb1f1647109d8d9b7f18ae4b51c9a21adeab8029d0bba6ec40a6a2a461ee3f96b783f99c76c90c2333c460143ab2d49252cdae9fecd265de0670087cbdf077e7f28", 0x87}, {&(0x7f0000006840)="7d8eb5aa926f26962d01be02d0f290b37ea9a34a9c9b42168acfb8ca475c9484e0887ab1950036c9ac834b87c2836bc06ba8e37b0b3663ffb2f4446c46afaa9071dee5c3f078a55bff9aaea78b7b39269f5920dd371aea21295b0c827a155be0df8972422eb85eb565fe341265", 0x6d}], 0x4, &(0x7f0000006900)=[{0x20, 0x0, 0x0, "55b53aee3e78f565b87b"}, {0x78, 0x0, 0x3, "60aec0f3be0459b3e0d1a6c0c0d47896bd9c5aec7398e88e3fd6a6df90edf3ecff85a36e0fbbafbb00aa756b7fba53ff16df215b7cdaf68b39ac64c0e2bab3a3554f834a67ec50f6a6d9777c549b4fe7592cd5386b3d6f82152120f4486e2907ff"}], 0x98, 0x20048005}, 0x4}], 0x9, 0x801) mkdir(&(0x7f0000000500)='./file0\x00', 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000002e80)='./file0\x00', &(0x7f0000753000)='msdos\x00', 0x5010, &(0x7f0000000380)) chroot(&(0x7f0000000040)='./file1\x00') umount2(&(0x7f0000000440)='./file0\x00', 0x0) 03:33:46 executing program 6: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000080)=0x9, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) setsockopt$packet_buf(r1, 0x107, 0x17, &(0x7f00000000c0)="5f04977171f7680f34d459f21fac1b5fb16d041b13db9b4f5ec767970ae5ef20ce3445101aa75109f4e701cb58bec18589886698b0fa55a8f3b40207fbc6a32b539c5e239d21a4d361570550274626c519793a06017006611344ab777526af38aa982087e8c603a01f", 0x69) r3 = syz_open_pts(r2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xffffffffffffffff) [ 290.944561] FAT-fs (loop6): invalid media value (0x76) [ 290.953891] FAT-fs (loop6): Can't find a valid FAT filesystem 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e20, 0x100000001, @mcast2, 0x6bd}, {0xa, 0x4e20, 0x100000000, @ipv4={[], [], @broadcast}, 0x7f33}, 0x8001, [0x5, 0x7, 0x4, 0x2, 0x277d, 0x0, 0x8, 0xff]}, 0x5c) sendto$inet6(r0, &(0x7f0000000000), 0xffffffffffffff03, 0x4040, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = accept4$inet6(r0, &(0x7f0000000040), &(0x7f0000000080)=0x1c, 0x80800) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140), 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0x7, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x10002, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000100)=0x4, 0x4) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) 03:33:47 executing program 5: pkey_alloc(0x0, 0x2) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x1) recvmsg(r0, &(0x7f0000001640)={&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000001500)=[{&(0x7f0000000240)=""/175, 0xaf}, {&(0x7f0000000300)=""/245, 0xf5}, {&(0x7f0000000400)=""/213, 0xd5}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, &(0x7f0000001540)=""/241, 0xf1, 0x3}, 0x20) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x40) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@empty, 0x0}, &(0x7f00000000c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x21}, r1}, 0x14) 03:33:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:47 executing program 3: r0 = memfd_create(&(0x7f0000000140)="2d42d54e49c56aba707070f00884a26d003a2900bb8dacac76617d6b6e6823cb290fc8c03a9c631064eea98b4363ad899c6bdec5e936dd55a93dcd4a78aa8f7eb93061a9b2044b98933f8851f7d61da1ce8b19eaefe3abb6a52434d6fe370fe7d924ce20ab4eaec9bdd36740e127730e90f2cd72b828", 0x0) pwrite64(r0, &(0x7f0000000280)="df", 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000000)=""/52) r1 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) write$binfmt_elf32(r1, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) [ 291.095180] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:47 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="8ec041030907305c88e9acde3f8d8c68db074ff9329d6878ad7b2c36eb6f106e50d2a1068065481dff7f860b84144a999d781da1fab5603336dc288e0500659dba462df041860316ad54568a6419044871b52f69134f29ebaef975bd8ec64df33eb41b08593c01a1439e93e078bf4e0753623c659234949a14b9"], 0x7a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) rt_sigtimedwait(&(0x7f00000001c0)={0x7}, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) gettid() 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="4b6cc181a820311a3831c2e58d7c470b", 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x18400, 0xc8) r2 = dup2(r0, r0) fanotify_mark(r1, 0x28, 0x40000039, r2, &(0x7f0000000080)='./file0\x00') sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x20, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) 03:33:47 executing program 3: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000001ac0), &(0x7f0000000000)=0x4) 03:33:47 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x800) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000080)={@dev, @remote, 0x0}, &(0x7f00000000c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000005c0)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000500)={'filter\x00', 0x0, 0x3, 0xed, [], 0x5, &(0x7f0000000380)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/237}, &(0x7f0000000580)=0x78) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in, @in=@dev={0xac, 0x14, 0x14, 0x21}, 0x4e24, 0x0, 0x4e22, 0x9, 0xa, 0x0, 0x0, 0x3b, r2, r3}, {0x200, 0x400, 0x1f, 0xc000000000000000, 0x3, 0x0, 0x2, 0x3}, {0x3, 0x6896936a, 0xa917, 0x79c}, 0xd57, 0x0, 0x3, 0x1, 0x1, 0x2}, {{@in=@loopback, 0x4d5, 0x32}, 0x2, @in6, 0x3506, 0x5, 0x3, 0x200, 0x4, 0x4c}}, 0xe8) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) [ 291.306411] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:47 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4130, r0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8043e, 0x0) mmap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000380)="7945036c5fbb240d506a5d15d2eb5d70911110092b432b9920f22649116ee5be9ee5830fee1aa276170e7fddc6bae4f16491871280e452980d33c7b38619bc3601569a6d5287e14fa772f8c53d9429b43427a084134f73a0b975f4bbf8fe43a66e523bc93b", 0x65) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x2, 0x3, 0x2, 0x6, 0x0, 0x3, 0x1, 0x8, 0x101, 0x0, 0x400, 0x1, 0xbbbe, 0x7, 0xa68f, 0x81, 0x8000, 0x7, 0x0, 0x7, 0xff, 0x6, 0x1ff, 0xfffffffffffffffb, 0xe9a906f, 0x5, 0x4, 0x3, 0x1ff, 0x4, 0x4, 0x7fff, 0x6, 0x6, 0x10001, 0xffffffff, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000240), 0x5}, 0x8020, 0x100000001, 0x800, 0x5, 0x80, 0x5, 0x10000}, r3, 0x6, 0xffffffffffffffff, 0x8) ioctl$RTC_VL_CLR(r1, 0x7014) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x12e) ioctl$int_out(r1, 0x5460, &(0x7f0000000340)) 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) getpeername(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000100), 0x0) fcntl$getown(r1, 0x9) delete_module(&(0x7f0000000000)='.wlan0\x00', 0x200) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d616e676c6500000000000900000000000000000000000000000000000000006a000000921529923a185ecd103cdd9fc144fd2e9e4d7342f878ea1b577dc86141f88702955510abddc30c59020f3c007e496c0bef7783329a3da907aad4f971007f1cda8536e161b2ba24dae9bd30f83325c6d99d451aad646310529a5acf9ebee2839d5da3f6f7d7981c290248"], &(0x7f0000000100)=0x8e) 03:33:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000080)) 03:33:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 291.507640] attempt to access beyond end of device [ 291.516046] loop1: rw=536870912, want=130, limit=112 [ 291.521439] attempt to access beyond end of device [ 291.527127] loop1: rw=536870912, want=131, limit=112 [ 291.532428] attempt to access beyond end of device [ 291.538106] loop1: rw=536870912, want=132, limit=112 [ 291.543558] attempt to access beyond end of device [ 291.549131] loop1: rw=536870912, want=133, limit=112 [ 291.554430] attempt to access beyond end of device [ 291.559962] loop1: rw=536870912, want=142, limit=112 [ 291.565165] attempt to access beyond end of device [ 291.570376] loop1: rw=536870912, want=143, limit=112 [ 291.575776] attempt to access beyond end of device [ 291.580808] loop1: rw=536870912, want=144, limit=112 [ 291.586114] attempt to access beyond end of device [ 291.591285] loop1: rw=536870912, want=145, limit=112 [ 291.600499] attempt to access beyond end of device [ 291.605507] loop1: rw=536870912, want=2178, limit=112 [ 291.644055] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:47 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) 03:33:47 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="8ec041030907305c88e9acde3f8d8c68db074ff9329d6878ad7b2c36eb6f106e50d2a1068065481dff7f860b84144a999d781da1fab5603336dc288e0500659dba462df041860316ad54568a6419044871b52f69134f29ebaef975bd8ec64df33eb41b08593c01a1439e93e078bf4e0753623c659234949a14b9"], 0x7a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) rt_sigtimedwait(&(0x7f00000001c0)={0x7}, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) gettid() 03:33:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007fafb7a41cb22da280000206000000a843096c37234a39000900210008004b00ca8a9848a3090000006b7b31afdc1338d54400009b84136ef75afb83de441100d42c44e82afc5349fddd4ab94e7162", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:47 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) getpeername(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) setsockopt$inet_tcp_buf(r1, 0x6, 0xb, &(0x7f0000000100), 0x0) fcntl$getown(r1, 0x9) delete_module(&(0x7f0000000000)='.wlan0\x00', 0x200) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f00000001c0)=ANY=[@ANYBLOB="6d616e676c6500000000000900000000000000000000000000000000000000006a000000921529923a185ecd103cdd9fc144fd2e9e4d7342f878ea1b577dc86141f88702955510abddc30c59020f3c007e496c0bef7783329a3da907aad4f971007f1cda8536e161b2ba24dae9bd30f83325c6d99d451aad646310529a5acf9ebee2839d5da3f6f7d7981c290248"], &(0x7f0000000100)=0x8e) 03:33:47 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = dup2(r1, r0) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000040)=""/26) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x467) 03:33:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x20) r1 = gettid() getresuid(&(0x7f0000000a00)=0x0, &(0x7f0000000a40), &(0x7f0000000a80)) getresgid(&(0x7f0000000ac0)=0x0, &(0x7f0000000b00), &(0x7f0000000b40)) sendmsg$unix(r0, &(0x7f0000000bc0)={&(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000940)=[{&(0x7f0000000340)="e5cae7677ad64e08fe5dd29fdfd67ecddda62a737a52b20db3936ea18681f93f731f43b47265082b60530258d6b00684a07f69e85449f0bc89a65516d67c0c2ed8c015f84f87b87fd8e699049f9e04b8be9c8284f0d19da136f40f7099f9e54cd4fa5cf298c019cac18c809d190df5a65185121cdafffb6593ab0e0602c040aae799aa70548fc427", 0x88}, {&(0x7f0000000400)="9aa818aa114d583b7e1eeaea3fe724685d4f5882ea862d9a67710a32735801cc5593ffad7efd8e7f98d19a789a6a738b270b0c22aeba", 0x36}, {&(0x7f0000000440)="aa408e8e0cfb3886e02dccb5dac1ef495314b44dfbcbe2fb2313b39ee68315ab8124d6aef0812e2fb58c644c414f678196d42e4dda81eb625537f8ff75f4827ba6561745054c6302e3dcb9dbda365c669991896c16b0ef9f0418f7a595f83438c6dd4a9d8e68de28698b257e78c4d4a2028b88328eeb31f26155f32920c5ea2c0f21c534f451ee3e4422d4dc6ca32aa8c1ea31892c41f9ab8776c62406a030d1f293bdb881c4b01c5683186f0ff005dd299661a22e4694d0fc971d40b4f6ba17e46fa98d3f8f4cc5c2ec2d7b2ed7d1a875b2d2d48be206db", 0xd8}, {&(0x7f0000000540)="1a48562deb8b934289f8ae74ede30018b63b5a74356b1763c48f24a83461d7c9825d0bb0e813f5a4dc4153295d6d81987015cd8cfdc296ce6ebf885738700c792d45232b36477fb739e03b62d298e65376587dd9788eef760305fc88b08c86ea24ee3b07714360166f551af756bba53c6c793c1762cfc42b370ba80a62f437eeafa0cc10e29eed512c3f9b5142ec3185307b212380db08312698900fd3a918a9d53b7f6bca72a80b580dab2d7f0a3e47f63e7032b833124292e4bcc8fab294d138b865526e120f3bc180922a9fcc4b664c45f2e4", 0xd4}, {&(0x7f0000000640)="456ce56fc535571fbddd0412ae820f49919bfb69cd8f9a9629d24724c5557624ff39b99949c936a1dc99683aa90797e7a0c53a8a5364c9a0e083731f0014ca6e0f83132699e469fc5399119c882e6f925eb024dd59e534b5fff1d7", 0x5b}, {&(0x7f00000006c0)="5d36fa", 0x3}, {&(0x7f0000000700)="a4d7a6e7d46b738359b1c0b426a833ea5d32e7538dd31825243f927c66b4666aa178c75fcb30e73ed561dfab74e000faa9765dfd54061f8697a3ebca860915fa8e0abf8e837dc7b25f1b3375ef0d1052ba4307e091422203a48a61bb5a35b3a29e270a7e4c66ffe42317ff37cf0100dfe01719be3e89357df6178ae7ed6146d659338e9690d54236466c33f3ae5f8a2988973120cade8e4ead12efc1b808a398a8d83182c9a3e4430ce23d271d0d398f0a74d8a45dc1abe35b7dd6832512d51ace8a55ff82fbec1cfb68e9af828545", 0xcf}, {&(0x7f0000000800)="adea38077ac4b075d5ded4af58d2d24f67cc4c105016a7a87abf31e6bc01cd3c95ea4a00c0806c09218c8e0c9829bf525324eeb6304c1c328c6ebd741a69d95de367f2ac9758a1fe8788915c9c5b05bee915ed2f72a8336d7b6d7e07faf6ef624fedb543cb489d7a2fd515168c44", 0x6e}, {&(0x7f0000000880)="cd1f925e2cd0a2e3a353d3dd7baef23ce2331cfc041537c72ca8313785db7e12429b3f519ebc5048c7b59803d9ecec82da8add1633b9753ca1f178c6bf7704e4dc9fca4ac573596b321efb2b4d77b62b732ae4523611afb0828395c3728bc13531a2931502cd3eee7923d15fa659cfd84429746efa2815be2e06bd03253f5f279a83ac4d756b801edb", 0x89}], 0x9, &(0x7f0000000b80)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x20004004}, 0x4008010) getegid() fchdir(r0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000100)=0xe, 0x4) open$dir(&(0x7f0000000c40)='./file0\x00', 0x20080440, 0x3) syz_mount_image$vfat(&(0x7f0000000180)='vfat\x00', &(0x7f0000000c00)='./file0\x00', 0xe95a, 0x9, &(0x7f0000001240)=[{&(0x7f0000000c80)="177e0a15fc3457b296655939025e45a7743c69a2e3b253475e1ea71ae60189ce0d4b52c9e2ca088870886ee987e1cfda6b6f39b1f996291369c3e18fdb441c4c69448e654a3a550dfd718fd61c4c6558c6b9207a42d9f4d06a4b0bfd56fca405404806c0eb02ae6119e870cbe3f772a2d3c446043c1133d6370671c850357d071348f8f7e3c376da6ddf4c2cbd65d5bf030520774159c23583f36298a8c2d6023ca47661b50f48a94cf7894e8e5f49026cbe506fd94b40c479eaf90f589ce05589583d6c84645b0ffd9ec4452ac27b14c6bb335b15a6270414a2fa02553bc8aeacb702af7e1f65bb71fcfefd2a", 0xed, 0xb142}, {&(0x7f0000000d80)="185839a696b97d3e784bcfb1fd5c5e5d2fa4b79e95129f77f4efe4ba9f0046351832036e7ac6906aded0348fbdc7d26984947a503389a476a437e7a83630d5769fe11187f671193e6b36702e22c7e7c69bbb9d305cfc5a4b174358a6dd53007d21559becbfac3162f19d8b43ed99d43820a00c2faf502ada1fb33284e9f308feb37751b09d73152ff87e52d788a07c63d192874f387ee83857f4ffcbd281c0d9a994e31cee1d362b943608e9fd170ba488a9dd5e", 0xb4, 0x8}, {&(0x7f0000000e40)="f2d0ea8b9a627fbbfca70bd12422bb8d2ef481116d614391b7d9723329fc86ae59308295f8d25638125df24be8c5a15426e3cedfc1f49d6f95c0d5ebf63096ccdade7c67532926fe54576a98cc89f833fee0ed4544cb506454a281be0663fd0ddf22938ec877b9e607a439f4192ca31dd620bc6943aff4b6b782", 0x7a, 0xffffffff}, {&(0x7f0000000ec0)="afa08658498729bb47156e86eaf75a5b50e3ce6affd0a3ed308691923bcdcc01406fa575d691d7f09eed344762954d6ea212aab21486afd5ef1df2d9d72e062e27a0ed1b963e482716b0daf8e76a05fc67b3fb916e3be63a377e42f09a", 0x5d, 0x80}, {&(0x7f0000000f40)="9473172a7c9b35a19c8265160dd7ced71b23ba383a838ff14e56822bd70bdc0ed3b4dab5915ba82e6b81b3bbec3afc7b672cc78b0344c7f680d333309344439849028029a7b0310fcfa75113450cd34035853f1b5720a7c9a6749e2527a2f77790d22d6898c1f96c3a433b948cb0fd761d87a2e6c9e1cef6b7836dba388608453b5d64fa1d9f5bed554b4ba7f8ead87458ab4ccffc702df35f503236639147c496b0b9d761e71115bf15a5dbcf0642c9458626e5ee78d9ae22b92ab93197e6c2387739a6adc40ade0b7eca5e", 0xcc, 0x7}, {&(0x7f0000001040)="6d023d642836464fec6fe948c3e418f52a9b8088d0a90bbdc3f5f90972b0118f7cb0ba267e30cf133b2d3c2a9b7380c3", 0x30, 0xffffffffffffe9e1}, {&(0x7f0000001080)="e5644b6ac5d01385c8b278fa4260b8168af8237308e2676a9d742c7c91441c000f2c7c1a03632be06b7a5b61f06ba6c4ebed74cc17c93aa1333c4548575cd3adf616d520983bfe12e008250e9b7ad3d41fb5672352735c5183b5ded19071b530cc2aa155ef67e40c86e4735f0a2dc72fee2fb872c493740bec9c5c25ab057f279ac999fc14cf972419250a4786cee19fca401087b59d97b8c1118119421f12f7572eb7595686a5cd927dddf09e910d2ef82c401e9cf0be", 0xb7, 0x1}, {&(0x7f0000001140)="a670fd", 0x3, 0x1000000000000000}, {&(0x7f0000001180)="10c218bd2e1259271686bb203269621b6a08450d670c56b2983c7a9b9a1b49fee890e3a0686d647c5153fad9cdd6911f4111768b2a641efba72a6c166df3633de4f87bf30dd649712cbbf5235a63be48cd2b47c669e57263c99f7fd348f700594375a233aab9e40a1ca66bc541191405d853e5615d571fa25659295a074f487d91cea4fd4c277b9c3dc3ab4937c3b8994782a4a774b287aaa2f7d18bde8aaedfe074033454bb48c10ddafd55", 0xac, 0x78c}], 0x200000, &(0x7f0000001340)=ANY=[@ANYBLOB="720900810000006973636172642c00"]) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:47 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x80000000000006) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x24) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:48 executing program 3: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4130, r0, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x8043e, 0x0) mmap(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000000380)="7945036c5fbb240d506a5d15d2eb5d70911110092b432b9920f22649116ee5be9ee5830fee1aa276170e7fddc6bae4f16491871280e452980d33c7b38619bc3601569a6d5287e14fa772f8c53d9429b43427a084134f73a0b975f4bbf8fe43a66e523bc93b", 0x65) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) perf_event_open(&(0x7f0000000400)={0x0, 0x70, 0x2, 0x3, 0x2, 0x6, 0x0, 0x3, 0x1, 0x8, 0x101, 0x0, 0x400, 0x1, 0xbbbe, 0x7, 0xa68f, 0x81, 0x8000, 0x7, 0x0, 0x7, 0xff, 0x6, 0x1ff, 0xfffffffffffffffb, 0xe9a906f, 0x5, 0x4, 0x3, 0x1ff, 0x4, 0x4, 0x7fff, 0x6, 0x6, 0x10001, 0xffffffff, 0x0, 0x81, 0x1, @perf_bp={&(0x7f0000000240), 0x5}, 0x8020, 0x100000001, 0x800, 0x5, 0x80, 0x5, 0x10000}, r3, 0x6, 0xffffffffffffffff, 0x8) ioctl$RTC_VL_CLR(r1, 0x7014) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x12e) ioctl$int_out(r1, 0x5460, &(0x7f0000000340)) 03:33:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 292.009373] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:48 executing program 5: socket$inet6(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000002000)=[{&(0x7f0000000180)="5500000018007f5300fe01b2a4a280930a60000000a84306910000003900070035000c00060000001900150006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0xffffffffffffe6c, &(0x7f0000000100)=[{0x48, 0x11, 0x3, "2ddc0783f34c81007fd2b0d37d62da1faf8dc051d03744ad2efdec11457f36db94a9cfee64e10a746532bc3b45d00e893158e70f"}], 0x48}, 0xfffffffffffffffe) 03:33:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2, 0x0) getpeername$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:48 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8001, 0x20000) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@remote, @remote}, &(0x7f0000000140)=0xffffffffffffff95) sysinfo(&(0x7f00000003c0)=""/111) r2 = epoll_create1(0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000180)) r3 = epoll_create1(0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000440)={0x5, 0x6, 0x8001, 0xfff, 0xbd6d}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/status\x00', 0x0, 0x0) write$FUSE_GETXATTR(r4, &(0x7f0000000200)={0x18, 0x0, 0x5, {0xa8}}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x4000) close(r0) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000480)={'lo\x00', 0x7fffffff}) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r7, @ANYBLOB="010200000000000000000a0000000c0003000800010001007095"], 0x20}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000300)={0x9, 0x0, 0x100, 0x40, 0x0, 0x1}) close(r2) r8 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000240)='/dev/pktcdvd/control\x00', 0x880, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/create\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r8, 0x401070ca, &(0x7f0000000380)={0x6, 0x1, 0x1}) ioctl$TIOCSBRK(r0, 0x5427) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)) fcntl$notify(r2, 0x402, 0x2) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000040)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000002c0)) 03:33:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x4000000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:48 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) socket$inet6(0xa, 0xe, 0x4) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.syz\x00', &(0x7f00000000c0), 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @ipv4={[], [], @loopback}, 0x780}, 0xfea1) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:48 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) set_robust_list(&(0x7f0000000280)={&(0x7f0000000180), 0x0, &(0x7f0000000240)={&(0x7f0000000200)}}, 0x18) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="8ec041030907305c88e9acde3f8d8c68db074ff9329d6878ad7b2c36eb6f106e50d2a1068065481dff7f860b84144a999d781da1fab5603336dc288e0500659dba462df041860316ad54568a6419044871b52f69134f29ebaef975bd8ec64df33eb41b08593c01a1439e93e078bf4e0753623c659234949a14b9"], 0x7a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000300)) syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000100), 0x4) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xff6c, 0x0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) rt_sigtimedwait(&(0x7f00000001c0)={0x7}, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x8) gettid() 03:33:48 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0xfffff7fffffffffc}) ioctl$sock_ifreq(r0, 0x8926, &(0x7f0000000040)={'bridge_slave_0\x00', @ifru_flags=0x2}) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b67b00000000000000000000000000000004000000000000adbcfd7f5de18e0b76ae8db1d70ea02a5c91725b72a3ee098d847af2343e1df4f57cbe74889ae11a002f2d4cec3023c314cefa070e96"]) 03:33:48 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) getsockname$inet6(r0, &(0x7f0000000100), &(0x7f0000000140)=0x1c) r1 = socket$inet(0x2, 0x3, 0x2) accept(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000000)=0x80) readlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/135, 0x87) getsockopt(r1, 0x0, 0x62, &(0x7f00000002c0)=""/203, &(0x7f0000000040)=0xcb) 03:33:48 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x80000) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x40) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x48000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)) ioctl$TIOCNOTTY(r1, 0x5422) setsockopt$packet_buf(r2, 0x107, 0x2a27a33c42c77494, &(0x7f0000000100)="cade273fc36c7a8edab6336b6bb1c9bc4762e9d51a43556632cb9a470036ab4c589d8aee74f81ce905ce9c2f104423c14e42de445a36607e933166941ec9ef2e73f2b07b5c", 0x45) r4 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)) 03:33:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc8070031") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 292.317090] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:48 executing program 4: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) socket$inet6(0xa, 0x100000003, 0x80000000000006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0)=0x2, 0x4) 03:33:48 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, &(0x7f00000002c0)=""/216) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000400)="27ee7974554c3060a38148a4e5c0778a495b410f84a83372743b18a764bbbe0f30e797f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e803ac13a78b54f2553487882f6865a6de0c7aa6d05817fb5ec432d2b13c433a1269d85522403", 0x75, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)=@known='security.capability\x00') fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0x0, 0x81}, 0x10) sendfile(r0, r3, &(0x7f00000003c0), 0x8000fffffffe) 03:33:48 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) ptrace$setopts(0x4200, r2, 0x1, 0x39) 03:33:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mq_getsetattr(r0, &(0x7f0000000100)={0x100000001, 0x4, 0x9, 0x80, 0x80000001, 0x4, 0xfbaa, 0x2}, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x10000b) 03:33:48 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x2, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c'], 0x0, 0x0, &(0x7f00000003c0)}) r2 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)='$\x00', 0xfffffffffffffffe) keyctl$update(0x2, r2, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x120, 0x0, &(0x7f0000000500)=[@clear_death={0x400c630f, 0x4}, @acquire={0x40046305, 0x3}, @acquire={0x40046305, 0x2}, @clear_death={0x400c630f, 0x2, 0x1}, @free_buffer, @transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000000), &(0x7f0000000200)=[0x40, 0x0, 0x78, 0x28, 0x68, 0x0, 0x38, 0x38]}, 0x5}}, @reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000040)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x1}], &(0x7f00000000c0)=[0x38]}}, @release, @transaction={0x40406300, {0x4, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f00000002c0), &(0x7f0000000340)=[0x30, 0x68, 0x78]}}, @release={0x40046306, 0x3}], 0x2e, 0x0, &(0x7f0000000640)="e9111b320ab8a783dfcce6e81416c05e9ebdd6e59b013a7b026fa95a269a12706477bd50b7dc48db95e879889d92"}) 03:33:48 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0xffffffffffffff80) ioctl(r0, 0x5, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x400) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000013ff4)={@dev, @loopback, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xc) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @rand_addr}, &(0x7f0000b34000)=0x3) fstatfs(r1, &(0x7f00000000c0)=""/236) clone(0x0, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f0000bf2ffc), &(0x7f00003b8f33)) dup3(r2, r1, 0x0) 03:33:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc8070031") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:48 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socketpair(0x3, 0x80e, 0x80000000, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1656) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x4, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000180)="a838278c57d90b2aad2f294fab437b92dfe547ce37a0da6f6a417de649e91687c6b53469") [ 292.700081] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:48 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 292.765915] attempt to access beyond end of device [ 292.771191] loop1: rw=536870912, want=114, limit=112 [ 292.776524] buffer_io_error: 40 callbacks suppressed [ 292.776530] Buffer I/O error on dev loop1, logical block 113, lost async page write [ 292.789918] attempt to access beyond end of device [ 292.794889] loop1: rw=536870912, want=115, limit=112 [ 292.800080] Buffer I/O error on dev loop1, logical block 114, lost async page write [ 292.807970] attempt to access beyond end of device [ 292.812934] loop1: rw=536870912, want=116, limit=112 [ 292.818081] Buffer I/O error on dev loop1, logical block 115, lost async page write [ 292.826326] attempt to access beyond end of device [ 292.831239] loop1: rw=536870912, want=117, limit=112 [ 292.836456] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 292.844284] attempt to access beyond end of device [ 292.849261] loop1: rw=536870912, want=130, limit=112 [ 292.854531] Buffer I/O error on dev loop1, logical block 129, lost async page write 03:33:48 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') getsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000080)=0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 292.862360] attempt to access beyond end of device [ 292.867321] loop1: rw=536870912, want=131, limit=112 [ 292.872529] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 292.880444] attempt to access beyond end of device [ 292.885382] loop1: rw=536870912, want=132, limit=112 [ 292.890594] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 292.898628] attempt to access beyond end of device [ 292.903561] loop1: rw=536870912, want=133, limit=112 [ 292.908785] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 292.917728] attempt to access beyond end of device [ 292.922667] loop1: rw=536870912, want=2174, limit=112 [ 293.012824] binder: 23985:23992 unknown command 25344 [ 293.018900] binder: 23985:23992 ioctl c0306201 20000440 returned -22 [ 293.035302] binder: 23985:23992 BC_CLEAR_DEATH_NOTIFICATION invalid ref 4 [ 293.048613] binder: 23985:23992 Acquire 1 refcount change on invalid ref 3 ret -22 03:33:49 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x6c, @local, 0x4e21, 0x0, 'lblcr\x00', 0x1, 0x101, 0x18}, 0x2c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000200)=""/62) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000002c0)=@buf={0x53, &(0x7f00000003c0)="653fb2d830bd7590830e842b650abf94d570b9142eaf49a471d2cf8216a8a51af27b7c6d59cbb3ddbf154e003b50db4d6985933135f0c064ec94c00aeeaf453d8bf181edf341a19a9c153b6d7b0c5a21767c8a"}) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x39e}}}, 0x88) [ 293.067671] binder: 23985:23992 Acquire 1 refcount change on invalid ref 2 ret -22 [ 293.078742] binder: 23985:23992 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 293.086425] binder: 23985:23992 BC_FREE_BUFFER u0000000000000000 no match [ 293.093800] binder: 23985:23992 got transaction to invalid handle [ 293.101654] binder: 23985:23992 transaction failed 29201/-22, size 0-64 line 3013 03:33:49 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x40080) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x36, 0x3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="8ba8b6a3d94b156f686406dade0f90ec0bb8463f260c53663c010b29d6459055ffcb0fd5765f8c8f5eb9d494f2e6695cb13126e0baed01646ef1b3bd6a6f2af79044fd10dcd5cab6612eb85a51e54e17ae585277b6a6b2", 0x57, 0x7}, {&(0x7f0000000140)="3dd3c084810fb48c4fdf7869d268ea304e4f1d614aebef281aa75155c623ed05234f9a2534e8", 0x26, 0x7e1}, {&(0x7f0000000180)="e8910a78cfe82c719e5b01b8b9aec3eb6f86bb7dd204cc00ba6257c849d693097e32fe6d7e25f41f90acd1f9feeb29122bb7e7c549516fd07b75a20ab5f146d6f548a2418462af8a66efa596d721dc9f5e89b1bb9ca06f9f81eff779d2eab69d4169ff9477d93ee1b3e3910cf850de1c61fe09523b8663ba9820edbd92ba328ef4d9aa266db74d83ebe913bdba8a33ed38b64a72e08482e14c645435c6a9b695dbe70a4dc2babb1b890e483d79935612429236979b63de19a6a2508af139030ab81772348e706da5e0b3b7de4c1ab8f56430d6dae94f6659876f5338614e885e4ea3e0cb34ddab8f7c21112465f6985d9fee974221c044582b", 0xf9, 0x6}], 0x101800, &(0x7f0000000340)={[{@fastboot='fastboot'}, {@alloc_mode_reuse='alloc_mode=reuse'}, {@noflush_merge='noflush_merge'}, {@norecovery='norecovery'}, {@test_dummy_encryption='test_dummy_encryption'}, {@alloc_mode_def='alloc_mode=default'}, {@noacl='noacl'}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 03:33:49 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000680)={{}, {0x0, 0xdd3}}) [ 293.113415] binder_alloc: binder_alloc_mmap_handler: 23985 20001000-20004000 already mapped failed -16 [ 293.124672] binder: 23985:24003 unknown command 25344 [ 293.124865] binder: BINDER_SET_CONTEXT_MGR already set [ 293.124874] binder: 23985:23992 ioctl 40046207 0 returned -16 [ 293.142432] binder: 23985:24003 ioctl c0306201 20000440 returned -22 [ 293.152996] binder: undelivered TRANSACTION_ERROR: 29201 03:33:49 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) sendto$inet6(r0, &(0x7f0000000280)="91f70ff22c292581ec30307768a1d386de7c875d9e487becb831b4e0b29af91a9b6ffea852264eecc9292d20cfda03e4f25811777f3b70f89fbb601ff3a9da5436fa000000000000007eece67217ef1793453d290fa0b007582807005f772acd5288829a7b8f6c84cab88a611388015823f5efa4e8a43025bf13f7b3c80c8e98d760846d43ceb4ce2f1ab10e52cc328146103978be4dafc98214c10968380adeffd72278", 0x94, 0x3ff9, &(0x7f00000000c0)={0xa, 0x4e24, 0x400, @remote, 0xffffffffffffff70}, 0xffffffffffffff43) fsetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000040)='\x00', 0x1, 0x3) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x103000, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x320) 03:33:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc8070031") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:49 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r1) close(r0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x1}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 293.303140] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x8e, {{0x2, 0x4e20, @loopback}}}, 0x88) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) [ 293.546544] attempt to access beyond end of device [ 293.551968] loop1: rw=536870912, want=130, limit=112 [ 293.560721] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 293.569133] attempt to access beyond end of device [ 293.574761] loop1: rw=536870912, want=131, limit=112 [ 293.580798] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 293.589112] attempt to access beyond end of device [ 293.594290] loop1: rw=536870912, want=132, limit=112 [ 293.602125] attempt to access beyond end of device [ 293.611300] loop1: rw=536870912, want=133, limit=112 [ 293.622221] attempt to access beyond end of device [ 293.629313] loop1: rw=536870912, want=142, limit=112 [ 293.637042] attempt to access beyond end of device [ 293.642623] loop1: rw=536870912, want=143, limit=112 [ 293.648091] attempt to access beyond end of device [ 293.653039] loop1: rw=536870912, want=144, limit=112 [ 293.659073] attempt to access beyond end of device [ 293.664055] loop1: rw=536870912, want=145, limit=112 [ 293.670013] attempt to access beyond end of device [ 293.675098] loop1: rw=536870912, want=2178, limit=112 [ 293.755593] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:49 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x0, &(0x7f00000002c0)=""/216) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r2, &(0x7f0000000400)="27ee7974554c3060a38148a4e5c0778a495b410f84a83372743b18a764bbbe0f30e797f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e08b03d58b34083e803ac13a78b54f2553487882f6865a6de0c7aa6d05817fb5ec432d2b13c433a1269d85522403", 0x75, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)=@known='security.capability\x00') fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r2, r3, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0x0, 0x81}, 0x10) sendfile(r0, r3, &(0x7f00000003c0), 0x8000fffffffe) 03:33:49 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xccf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc8070031") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:49 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000001c0)={0x6c, @local, 0x4e21, 0x0, 'lblcr\x00', 0x1, 0x101, 0x18}, 0x2c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000200)=""/62) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f00000002c0)=@buf={0x53, &(0x7f00000003c0)="653fb2d830bd7590830e842b650abf94d570b9142eaf49a471d2cf8216a8a51af27b7c6d59cbb3ddbf154e003b50db4d6985933135f0c064ec94c00aeeaf453d8bf181edf341a19a9c153b6d7b0c5a21767c8a"}) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r3, &(0x7f00000002c0), 0x400000000000174, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0x39e}}}, 0x88) 03:33:49 executing program 6: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='bpq0\x00') r1 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/pktcdvd/control\x00', 0x101200, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100), 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000140)={0x8, 0x80000001}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) 03:33:49 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000300)=0xc) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000340), &(0x7f00000000c0)) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() setgroups(0x4, &(0x7f0000000280)=[r3, r4, r5, r6]) 03:33:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f8571") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:49 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setgid(r2) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 03:33:49 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x6, @local, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="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", 0x27f, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0xfffffffffffffe28) 03:33:50 executing program 7: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xccf, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:50 executing program 5: rt_sigtimedwait(&(0x7f0000000040)={0x20}, &(0x7f00000001c0), &(0x7f0000000200), 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000180)="6367726f757000a88e3c65e6677d1e9dc84ef3938ec2d60b46bb02") r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000300), 0x0, 0x0, r1) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=""/27, &(0x7f0000000140)=0x1b) fcntl$notify(0xffffffffffffffff, 0x402, 0x26) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') sendfile(r2, r2, 0x0, 0xaa6) write$binfmt_elf32(r2, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 03:33:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 294.008311] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f8571") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 294.086148] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x5) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:50 executing program 0: r0 = epoll_create1(0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000080)) r2 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)) 03:33:50 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x8800, 0x0) write$P9_RWSTAT(r1, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) [ 294.316105] attempt to access beyond end of device [ 294.321074] loop1: rw=536870912, want=130, limit=112 [ 294.326895] attempt to access beyond end of device [ 294.331935] loop1: rw=536870912, want=131, limit=112 [ 294.337154] attempt to access beyond end of device [ 294.342117] loop1: rw=536870912, want=132, limit=112 [ 294.347853] attempt to access beyond end of device [ 294.352856] loop1: rw=536870912, want=133, limit=112 [ 294.358030] attempt to access beyond end of device [ 294.363037] loop1: rw=536870912, want=142, limit=112 [ 294.368372] attempt to access beyond end of device [ 294.373433] loop1: rw=536870912, want=143, limit=112 [ 294.378660] attempt to access beyond end of device [ 294.384364] loop1: rw=536870912, want=144, limit=112 [ 294.390200] attempt to access beyond end of device [ 294.395131] loop1: rw=536870912, want=145, limit=112 [ 294.401545] attempt to access beyond end of device [ 294.406587] loop1: rw=536870912, want=2178, limit=112 [ 294.547094] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:50 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x8000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff) getdents(0xffffffffffffffff, &(0x7f0000000400)=""/135, 0x74) close(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000004c0)={0x3, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x18}, 0x1}}, 0x1, 0x3, [{{0xa, 0x4e22, 0x80000001, @loopback}}, {{0xa, 0x4e23, 0x2, @ipv4={[], [], @rand_addr}, 0x100}}, {{0xa, 0x4e21, 0x6, @loopback}}]}, 0x210) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000004d2e9323de7e0000000008001b0000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000780)='IPVS\x00') r3 = socket$packet(0x11, 0x3, 0x300) dup2(r3, r0) 03:33:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000340)={0x8e, {{0x2, 0x4e20, @loopback}}}, 0x88) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) 03:33:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000040)=0x20ab) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x4fe, 0x2000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$update(0x2, r2, &(0x7f0000000140)="8a8b44084b487447a0fe452d360bddd0f158d3db692e2273eb442942f7e0e2b4529478624394c9fd1238192479b6b57ccf5fee332826279155", 0x39) r3 = syz_open_pts(r0, 0x3ff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0x8) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) 03:33:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20880, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000280)) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x3fffffffffffef4, 0x8000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x6100, 0x0) write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0x90, 0x3, 0x4}, 0x80}}, 0x18) 03:33:50 executing program 0: r0 = epoll_create1(0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0xd0400, 0x0) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r2 = epoll_create1(0x0) close(r0) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) fcntl$setstatus(r4, 0x4, 0x46400) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)) 03:33:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f8571") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:50 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0xcd, {{0x2, 0x4e24, @loopback}}}, 0x88) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000140)=""/102) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x80000000}, 0x1c) 03:33:50 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TIOCEXCL(r1, 0x540c) 03:33:50 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) getegid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:50 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x2, 0x0, 0x100000000, 0x800, 0x1, 0x0, 0x80, 0x3ffffffffffff, 0x0, 0x1, 0xfffffffffffffffd}) sysfs$3(0x3) r1 = syz_open_pts(r0, 0xfffdffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$KDSETLED(r0, 0x4b32, 0x9) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000000100)) 03:33:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f857140") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 294.900018] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:50 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f00000000c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x20880, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000280)) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x3fffffffffffef4, 0x8000) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x6100, 0x0) write$P9_ROPEN(r3, &(0x7f0000000200)={0x18, 0x71, 0x1, {{0x90, 0x3, 0x4}, 0x80}}, 0x18) 03:33:50 executing program 7: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x5) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 295.040480] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 295.066116] attempt to access beyond end of device [ 295.067473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. [ 295.079914] loop1: rw=536870912, want=114, limit=112 [ 295.085125] attempt to access beyond end of device [ 295.090168] loop1: rw=536870912, want=115, limit=112 [ 295.095384] attempt to access beyond end of device [ 295.100593] loop1: rw=536870912, want=116, limit=112 [ 295.105866] attempt to access beyond end of device [ 295.110899] loop1: rw=536870912, want=117, limit=112 [ 295.116096] attempt to access beyond end of device [ 295.121402] loop1: rw=536870912, want=130, limit=112 [ 295.126596] attempt to access beyond end of device [ 295.131642] loop1: rw=536870912, want=131, limit=112 03:33:51 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x108) fsync(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000040)={0x0, @multicast2, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x60, &(0x7f0000000000)={0x0, @empty, 0x0, 0x0, 'dh\x00', 0x0, 0x0, 0x400}, 0x2c) 03:33:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="035cc83d6d345f8f762070") setrlimit(0x2, &(0x7f0000e63ff0)={0x2000000, 0x20080000000}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:51 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)) [ 295.140443] attempt to access beyond end of device [ 295.159260] loop1: rw=536870912, want=132, limit=112 [ 295.165431] attempt to access beyond end of device [ 295.170879] loop1: rw=536870912, want=133, limit=112 [ 295.176240] attempt to access beyond end of device [ 295.176248] loop7: rw=536870912, want=114, limit=112 [ 295.176261] attempt to access beyond end of device [ 295.176265] loop7: rw=536870912, want=115, limit=112 [ 295.176276] attempt to access beyond end of device [ 295.176281] loop7: rw=536870912, want=116, limit=112 [ 295.176291] attempt to access beyond end of device [ 295.176296] loop7: rw=536870912, want=117, limit=112 [ 295.176307] attempt to access beyond end of device [ 295.176311] loop7: rw=536870912, want=130, limit=112 [ 295.176321] attempt to access beyond end of device [ 295.176325] loop7: rw=536870912, want=131, limit=112 03:33:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 295.176334] attempt to access beyond end of device [ 295.176347] loop7: rw=536870912, want=132, limit=112 [ 295.176380] attempt to access beyond end of device [ 295.176385] loop7: rw=536870912, want=133, limit=112 [ 295.177501] attempt to access beyond end of device [ 295.177507] loop7: rw=536870912, want=2174, limit=112 [ 295.270376] attempt to access beyond end of device [ 295.275328] loop1: rw=536870912, want=2174, limit=112 03:33:51 executing program 5: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) sched_getparam(0x0, &(0x7f0000000240)) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="3723339c9e46fcc759b50ca2fac74693cb0b58bf128cda2d1c0be362459e0d734b324cdb94e6b7e8587d837a8f176ccbc95738588bf395f5b86a21bac6f00b8acb12f34489dfd6b1c3ec2b317faa53145cdba8beee7802210a60c5e37a938a30527564c65321", 0x66}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'tunl0\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f0000000140)}}) clock_gettime(0x0, &(0x7f0000000080)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0x0, 0x0, 0x6, 0x2, 0x0, 0x401, 0x800, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) 03:33:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f857140") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 295.406787] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:51 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/100, 0x64}, {&(0x7f0000000100)=""/133, 0x85}], 0x2, 0x0) 03:33:51 executing program 3: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x325100, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x200000) clock_gettime(0x7, &(0x7f0000000580)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) userfaultfd(0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000001500)="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", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x31f) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000002240)={0x90, r2, 0x404, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x7d8a1821737b5695}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x8c7e56b5802a24af}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x90}}, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x400000, 0x0) clone(0x92b2a900, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000140)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000380)={0xd0, {{0xa, 0x0, 0x5, @mcast1}}}, 0x88) socketpair$inet6(0xa, 0x6, 0x486, &(0x7f0000000100)) 03:33:51 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\x00', 0x0, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e22, @loopback}, 0xfffffffffffffead) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x4, 0x96, [], 0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {}], &(0x7f0000000100)=""/150}, &(0x7f0000000000)=0x78) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0x65, 0x121, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000240)={{0xa, 0x4e23, 0x2, @local, 0x101}, {0xa, 0x4e23, 0x1, @empty, 0xaf}, 0x96, [0x5, 0x101, 0x40000, 0x100, 0x2, 0x6, 0x0, 0x4]}, 0x5c) [ 295.504305] mmap: syz-executor4 (24196): VmData 35147776 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. 03:33:51 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r2, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x81}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffff0000}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xf7a0}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4) bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e20, 0x9, @ipv4={[], [], @rand_addr=0x80000001}, 0x80}, 0x1c) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000300)=0xe8) 03:33:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16000, 0x0) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) [ 295.656687] attempt to access beyond end of device [ 295.662292] loop7: rw=536870912, want=130, limit=112 [ 295.692641] attempt to access beyond end of device [ 295.694761] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 295.705800] SELinux: policydb magic number 0x9c332337 does not match expected magic number 0xf97cff8c [ 295.765183] loop7: rw=536870912, want=131, limit=112 [ 295.781666] attempt to access beyond end of device [ 295.794844] loop7: rw=536870912, want=132, limit=112 [ 295.812064] attempt to access beyond end of device [ 295.830159] loop7: rw=536870912, want=133, limit=112 [ 295.847009] attempt to access beyond end of device [ 295.861075] loop7: rw=536870912, want=142, limit=112 [ 295.876249] attempt to access beyond end of device 03:33:51 executing program 1: r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$evdev(r0, &(0x7f0000000200), 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0xc0, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r3) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe8) connect$inet6(r0, &(0x7f0000002b80)={0xa, 0x4e23, 0x6, @ipv4={[], [], @multicast2}, 0x1ff}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000680)=0xe8) r7 = getuid() sendmsg$nl_generic(r3, &(0x7f0000002b40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002b00)={&(0x7f00000006c0)={0x243c, 0x41, 0x800, 0x70bd26, 0x25dfdbfb, {0x14}, [@nested={0x124, 0x81, [@typed={0xc, 0x65, @str='vfat\x00'}, @typed={0x8, 0x61, @fd=r0}, @generic="5b358da63dde94d3969ae579c19f", @generic="12f92fbd13459e32e975d5841012930403ba27e4cb77aab55295c716b1b62ab1fb3f0faeeceeef8953723596ff393471be653e7b069d37d727e1939e2d813edb48c0b1ea6080320c16928b9c02667c8ff3790c2bb611d9a3098b67f8a049519046e360190d8de9cd5b1d044177a585d1d212154cfa944c", @generic="3b74aadf47e09bf085fea6aae7111f890c1bf7ac89d4d89316ac9386e7cd7b9092b22299b3d06f9f37c0f7409c4e5d7bd8ff594e3719ce605db6a07274997f5ce05f19fa3dfef7f182989a15779c08c8c65386898b6e8f1597daf522ab42b3160f2b74650d53b70302ed7172b004b02ea5eddce65453e8ab815b9c30718868f68e7585c91b5ef3"]}, @generic="5a0eecaf2f5f50acd43bbc74ef5a4f58b2c5de3746d7e8e0fba5d964f9bb1ab29dc12f12fd068597d53a3de9d161060e650d1a23a7119ea4e0c7fab72b5ee7ada396b8f5b71ee7d5c1d5fd13f2e0c9b002c48907165992167a69d27ef5c6c36a934c517712f185c4cbcb9fc30d77f25e6906d22d0ac5db20d9f8a53997dc0b05802b4a30f47169a5", @typed={0x8, 0x94, @uid=r4}, @typed={0x8, 0x2e, @uid=r5}, @nested={0x2158, 0x2b, [@generic="fd1c3a73d5ec907b68c94f81f6a3d7b610615757dd2ad80cc6b9d5954dd4524802570fdf07eb21c0081c2fe2dda0aed84c669271de902a126ee62eab34788f4fbde479b3ce9b1838bf3991ff7f1238c448abc98f43f14aa57a7ac20fc4affc877229580ee5299dab10e515bb832aa9b677ad416d275b0e86b2ff8285ee222f45d29bc542762d53db30e08613f84d100d219ddcf5a0f7727decdda2280e6ed6", @typed={0x8, 0x61, @str='\x00'}, @typed={0x1004, 0x76, @binary="3f5cdb5a0e69639fd55712a2b8027211870f96271669781b31ae98c834ac7ee512d1d2b8e1ad31608126ba2bf7cd444c042e588abb27dd7ba811d7b12b25925a068c70493d26623c0356dffb25f8c986693d448980e6cee124fbc2e55ae60b1a8784c0fc0bcb7b6bccbcf4de3eaaa5699e78db6e491e43f180c34f507b56489d9807767e19f76e0e35030604e5771086f3ce0029e8326f81d2567e8e2b6ba3e0ff13c01b8beda14d5b22a1ec3b86a560b4a5ee281c1766ff8a5f9acabfe9dacc51fdc1fc0fd6135537d34972deb0c4041427854ca14d151ea65af6d42f265cb22cddb4c1d06d3c6b5c7a50a1d4d83e4965ccd9480273679253cf47501250ffaa9271dc71b9df4ffc092c8bed667b37373fe33ca254c695c28682fba95badba90f85cd06b242a5b58e4e2b15d513cc3d777284c3c8a60a3f723ecba077d6fe035d2c8f924297e35556e067add84592f5836276668ef76bd3f4708d70a4555ed3af00f15d2b9db6793196dfd624dad6d40ead9e9dd3af240776fe7da1e18ff46dc20dee27105e1663bbba505a787b95794953cbfcb0e43e578f39cdca013e5a5d9209d08075cd9d16c9e0cc9537abbe70ca94f95b7bf62a4b2afb27a7e1714926b198a3b3bfc6e606857993ea1b6e0aae3e980e09f9cbeaf5fbbc944270209c233ea43d3b9c4309cd3021f0ec570475f1cecbedd34d408318516260a93921e7db8c328db9df7fefadabbabde2d7aaffb108fa82d609c6395c7a94a99b3487401e937c2692ac5840c685e4cc571d6ae89ea717f70c9b834387df6c1d85254c4b9afb519515aaa6199c0a2b2cef80a217cba3d0944efa1c481527a4d53d36daaf96eb4118175d2521592975aaa8f0db767754a86362b3b31f79942b236310ecb927f12bd92cb8a6b52c29d2a12d2ec5d4b4b0a78689d99e35c0f4c925730cc1a145e210586fcf1717fe8cfd2970199dd6b0e17652688ed2bbaf66761f1243a86d56f91694ba0823bcd716ea391b928bc7e30e3f4f8845a3f60e12ca7eabaf7ff7d42ea5ffffa960bcde462c2ce2a9f138fb501eb6cbcec33b26f2a80ae393014285e2facd9682176558ca7b812461a387e315eb250f7b55dfe843955769d17547b4c0e51a43d37b0b8cd9af3bc78630d781611bc0e0a78dba2b2c25420f4973360b6c826414036f5a094f74662ac2a930e1f7b8e6253cd12f3ec90ea03e0480acb0f2c1a7bfdcff1c08a7f053ab94fa4e23852f0b3d63b67159b159203063dc74860d11af25b56978adb7bf30f876ed2a30aa85ff91c2b2d6276ae57329041cc931d14049c921cce38cb16c66fdc89fb724a86876e7572aeb0c7f0a6dddd5787185b1d2c37df6455bed36464c33ed1a8c7bf497a468592c3b23d5849c2aab86f989e0fc566fe66c07a1c87324e71744f93137eaa2a0e3e7c84c0813f62e21044ecb05309f2c895bea0507bf3d429f41720d1aec56399cbc528043f21362a5aada397bc99ee4d6615c6561e78f72c7dc13764cdeff041fbe6107396df1bbf812540635ae576d23b15aea4d1d119903cf74f4c74a55a1549687ab7bb02daf5caa74bd248562b5952c8ecae976e177e8f441a5bb75a7a176065b86ad419b8832d518e1afabb1b785a47cf74e8da03d9b4c7b2badf42e4ab908e15819c5345644c28815924f9b9a37ec4ed05297c4f3cb1be87d02758f33e569d21b218699adc87836a275c07fc40c8874047219b36ea94befc62e2545873115bee00869a96d20a6428da7cdb46d1f1e48550676b1bae0703baa3177763ffe1c3d0c7aede621a8c88aeb41905a61c80be6453921840fcbf7b5203157992e0f350b507b16c180eafc987b13bfa65e6d4983796a8d1da5ee6d8dd878cb41e488dc6f7f2fd0833ee2cfb0322c4cde9874cc9ca7335650abad211db414ec6a16205ed84d825800a4aa464557ff94d0e7b8b9ef5226fce48f52d49d9aa84984ee0b6504c26040e0b2ed20b9128ad5c97b1c81932525d91911c91a6689fd608c69353fdf992c808cf9b0c157d7ae020831aa130230dc8ffff6ff75a47fce8864d87b671b17eef2c5d98477dcdb4eaa255c2301727a0b85322ea816abcbc1810dd37a7dd2356da24a174b2dd1fce7dd5afae0b9c3769f4952204a4ad6ed03976f871fe545b34a799fb5d7b9b21cea7b40a7fce1a8ee68d1ebbec15ffd3343c877a18ca318654fa6ff59883d7d770304d59f635b224196c75abe9b77689d02c827ff7a986d58fdf6a7c93ce7f77ed4df3b3840808e27e244b7aa73ebf0f82ccefdc2803d1894bb298471afebfc12e4b418f3620a63effccfaa9fe62c53604445ce6d941b3a33544a5f8a2a2d0e1954472e6b4f67da76a9efb3a89ef0a705f179d9d9397d88dc93279511342d109c2844ddb02a902a2cb63e2990b935c62f1203a36cc831ce7de0fa3f4ca17432d8f5314df9f4fa22049ec06aaecdc61d9840e64bab628e881fcb971d7503b0f84b7783389387f77510b30defe563b6497fe1061803f3d201dd4bd39fa6e2c260692caf21a7636ec5984b1f7d6ad1b036b49279bf3601cefcca74f28fb426f80262f3b38c742a00b78a8f0315a8a57803abac588c16a5223b2aab30348b64ddf5006ab725371dc2ed73dfbfb19839689238f65b0f29547d8cf915c87650630ec742887730b5ce668251c64f295079651c2d7a8dd218387d5adf06ce40958c8e97771fea942bb72784a4c061f04df7b80586d4a63bb737bed70a473d2ea6684f32d342c0125ea5c624bc32e3c3324241d13588926afe1f02ddbc84c6d2d3e70e9db5b3f2fb5c26b783e56ac57982213f0edb228a1f596f09cc82557f7357df76e8a86e1a51682cf5a3bdf8e4b8d69f6a3af5bc03fc7dd36790a1a1400790a6bb8df771f937c216f602ee6d4bca9f1c97422ee18177ad0e7e86a48b10e901d2be8b756eb7d5e2378449085fb71127cac2b3c3e3f19706f20c46152cd92a50c68764eb88f7537cc078a8da640d608ed63bbaf897ca3e452c538637fd7f658941fb858ca436f2fc0afd5bf5db018747b050320b0af018cd68d6dbd1f8c5a8b19de6ec2f22501d45735abee1a6518cec0cf51baa3f37ea1ec4248082ab782b2d35ff36da560fee7c47b5e6b94f0ed7a28269375f924092a29bbe5aefd5c765732e4e64c5e9a185dd0872e2da8c2f56c8f04a6ed20b82609f7760ead83fca5fa3af3f48632240f56eb13970767209281258868cda2247e39ad5a5c236d59e05ecf3a006634a89b4170dfd8456dfdae0b0d67cdaa00b15660ff3e573e3d89c887c035f6047602f8b6ca720831574e5cfa6d7f046dc5bba533860cfa4049f6d2c24e8c31e2b572c852efe672cf9130cbe8e171ff755e190fb474ed245e4ae03a4435136a4e797c961a1b3e1ebc1476ada473988b017f6537d04cb07b7c0e85ac5ae3fb2c325ce877442ce10615ad51e6e4e2991928887be66c267be855a21eadce1b9f2058651647ef7e1b19850325d006495c8282d25553932f9d4befc81c56f3aa159abcfd6d30651091e00212f0f17ded84a7bdf53bbc9ce4a5351e9a8ccb4e35797b18ebcafbe17b6fc05bb3a2008476bb4b62d195e082d1d9833c7a3a0bf90618b59cfaa44969950fa52052aa8d0483ed4e59ef5a587c319ebaa191db2bec7cf64329ea306718cb777daeeb9521eb9ab122a92c18f78ea6673b2d894e84d9f2db098a4e6bd12803e048dacf95843bb8f23b8ca2f43aa58869f08de492aad6549a517794f2963124d41c0a3207892c0eaa35596791f7670204a9666e2207cbcf5c4fe1edfcc35b4891400178809828070f386b727658e765f14259e240f6f34c59e7d1b7fdb2b373b0088f9678269a32d74faad409fb99b4b77e985dfa7d652501b44cc642851442055ca8a0e090d1f9ad364a6cfef906f37d4e008e6c7b0a5c5b4799e3f61013d18f944f84b25a8b1e86331f0b696ce724c477ea123655d4e36928f0c3cf7da4fe2f45182c67b4341f9a8eafc103ce73247abda37cc801bfe8693aacf308b728035fcb63638748baf022e363e110395e8eda2500aa908f5cde8f3855ce3b6ee3a23e6ea34e1bd0a9625aa9acaecda47f826003b533aff45476b9586f343e36ab8561ae5e8b929db73d22445129ea5296707c135994fb8e4a6105aeab5c5f47c2da0a3600b5ca1d744ad3ca159d9330496743d28af84a42e6b438f2eede3ac848cdd7c1d48aad29d7654cce46ebc7b227a1980f5370d0bd5cad9d25c8276b2417d7d374920f0a9ef1fdb00334b2fd12d1c4be826a2d4c3b74cd26e09233e44326e7fa93fc5175515ea47684d015c963368ebae5376d3181762b3ede99365259eb023d4a7a10e33c9e3065ecfb451662ac41491f0d35825b5e49ba568b1cf169df05057cd0936d46ef4490262fe8afa49bcd387e65ef2fd57d346c3ace2ddcf2b5ce4f35d8a2ab14051729f209ebaebe3fbc267ae8dd5914d6c118f7a350f836398f28805560c0b47741c41247c98cba674940023f3ab67f1aae804b2e8190031d0eed2afeeeb5e729fc84aedbc354eeee291538bf4f3aa41050545d19816fbb332aaf1da11f7c86fbd9f0c495e318e051b1be65a56635837d71b6c3623982f9d7fbbda3425af9fccc06e3f68c591ed2261b813ae2b516d56d4e4d92f03076595b6205bffaeac6754384069152098ccba8172953753c48699db78c473bcdc87dd6e7974a7bb094ccb34e7ae8b3a331ec0ea281d5a7748e4862a0e5b2b23dca2ba4b29df1c0eec554550c8004c28a16f75d5d54060b3c0f78a24a8c2a0926f8c3752b628802184abaf304678b463899c41679453a470ff87ff86f4019b5d86852bd6f023fa750928e34704fc7b8a71e6b5bb44ccbfc1e61809de07c71064f81b5bec715a366c68270703c91e42c3fbbef92f733edd48e7e12c5b934d97c173237912c97b986da1fe3066bf9000be625ee3e942d65515013d1fdb4315ff9d319c465b35f1df03704edc19fb608ec4d8b1869530e17373ee9445dd1b48f52eca1e0ac315181f0acd38b204119622f8361bfc09e348fb7452dad2a7b76f4708dd1d49880d8fede236520cee985d233037fef1e6ff7eaba4c6ef07a5074430f1ec749c4e11614e5b1137f4613a41965b0509cef6234071f0c2a3a227bec1238a6cd3cde57f05058808d6d1d18cf5c3fd3892f51301199f6349ac1e631e300c2999285c653c3c04a2a4b96b05d5b3c5fcc3b1593068f107429acf0d8eec6dbe4a910fd7060311d5f696450c52d07ab59b6f31c82f7467b93959cffa4dc776011093170bde12d0c9080a3842aeeab3ec42ad572f4b7a78096e0eff5a41e629c51041c5f7d661483c511058a12c2c77929868e810ea5b69f57a6b71e9b42ebe58a7d51a927567d0d06ed251341e1808f53a7da900ac26911d02a50e3db749e32e39e3f94e970bcd6af34cc28861a400cd8896d238657e57d6513a7e39285ace80bb5fc56ebdc123a45b4483af65d47019d2ef1ed65451bf8c9fb8781ce94a5944adb09abfff4212ef2e6816dbe280d3f1cc472765308ab658da0e92b25a9600a2a07516017e87a8d498a014d0f601a96a4f385a02747296a35d873ae3795100d7a2af7dfc730f84ffe3a7e01fd58f38965faa16e5ac4673c5a6ee2069b515711d252796948e4804994dd5090040c68bd99abcd47ea031b741b88ff9bf36b0861172d7d92e1f7f64ed1286e2465f4e61b436f6f7814ca3210a12792a26b8e33cdc9aa3b4d4924491c66da17275b2c261824456ce3a15b43529b84ffeacd75bbfca685"}, @typed={0x1004, 0x45, @binary="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"}, @typed={0x8, 0x8a, @uid=r6}, @generic="5e5ab5e429bb78e4570dce5ff78a4e25bcdd6ced8cdcb9ca9a409faa4f241959b1ac7ab2e0c8160cf716747d7beeb70271eab4e38b9a6cf3dd7cb6898105f1369ced76d573b25f8eec7c27f00bb38794d4f81e76c3a62e466d5b9fd2cec4", @typed={0x8, 0x4b, @uid=r7}, @typed={0x34, 0x52, @binary="b6dba4b0abc2929bd4c001150d3f8c5b635bfc55038076b82056126fbf5548c913e03fac520dd6f4862abbf804c988"}]}, @typed={0x8, 0x15, @ipv4=@local}, @nested={0x20, 0x2b, [@typed={0x4, 0x88}, @typed={0x8, 0x31, @fd=r2}, @typed={0x10, 0x15, @str='/dev/full\x00'}]}, @generic="6cc321389ea7d82b74b7ba28a21e9851d7979468d847c0b7e17f6804e5acd6832276766a", @nested={0xc8, 0x94, [@generic="4f033c36f5ad43650d32ecc7a253af6746921b8ff9961310d14a29461372f3ed40925df3fc4604690c39e54d64de3faef41407b4", @generic="f08f6ee4fc5244df5035c0148b3dd9fdb724277f24e4143274d5a5bb9f8ee194feff703bb88b0bd4c6731cc639f0ef5178fb1ce1fef9ee914f8e0b73067edf04e61c6585e5668612ea8cca89ca87e3cbd2e4ccf5bec51a742b32efd6b745114de1adf87de48efbbfbc54aaa9f2be8d62485dbaa843a2467ffadb34da23334dc5112e6cd7", @typed={0xc, 0x2e, @u64=0x2}]}]}, 0x243c}, 0x1, 0x0, 0x0, 0x40400d0}, 0xc0c0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f857140") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:51 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) write$P9_RSTATFS(r2, &(0x7f0000000080)={0x43, 0x9, 0x1, {0xd24, 0x5, 0x80, 0x7, 0x3, 0x2, 0x4, 0x8, 0x2000000}}, 0x43) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:51 executing program 4: socket$inet6(0xa, 0x100000003, 0x80000000000006) 03:33:51 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x3, 0x3ffe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x4) 03:33:51 executing program 3: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x325100, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x200000) clock_gettime(0x7, &(0x7f0000000580)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) userfaultfd(0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000001500)="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", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x31f) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000002240)={0x90, r2, 0x404, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x7d8a1821737b5695}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x8c7e56b5802a24af}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x90}}, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x400000, 0x0) clone(0x92b2a900, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000140)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000380)={0xd0, {{0xa, 0x0, 0x5, @mcast1}}}, 0x88) socketpair$inet6(0xa, 0x6, 0x486, &(0x7f0000000100)) [ 295.886738] loop7: rw=536870912, want=143, limit=112 [ 295.900927] attempt to access beyond end of device [ 295.912575] loop7: rw=536870912, want=144, limit=112 [ 295.931227] attempt to access beyond end of device [ 295.937778] loop7: rw=536870912, want=145, limit=112 [ 295.944356] attempt to access beyond end of device [ 295.949734] loop7: rw=536870912, want=2178, limit=112 [ 295.987946] SELinux: policydb magic number 0x9c332337 does not match expected magic number 0xf97cff8c 03:33:52 executing program 5: ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000080)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) sched_getparam(0x0, &(0x7f0000000240)) pwritev(r0, &(0x7f0000000200)=[{&(0x7f0000000440)="3723339c9e46fcc759b50ca2fac74693cb0b58bf128cda2d1c0be362459e0d734b324cdb94e6b7e8587d837a8f176ccbc95738588bf395f5b86a21bac6f00b8acb12f34489dfd6b1c3ec2b317faa53145cdba8beee7802210a60c5e37a938a30527564c65321", 0x66}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'tunl0\x00', @ifru_settings={0x0, 0x0, @sync=&(0x7f0000000140)}}) clock_gettime(0x0, &(0x7f0000000080)) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) clock_gettime(0x0, &(0x7f0000000640)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') perf_event_open(&(0x7f0000000540)={0x4, 0x70, 0x0, 0x0, 0x6, 0x2, 0x0, 0x401, 0x800, 0x4, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x101000, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[]}}, 0x0) 03:33:52 executing program 0: r0 = epoll_create1(0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000340)=0x10001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000180)=0x10) r3 = dup3(r0, r0, 0x80000) getsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x10) r4 = epoll_create1(0x0) close(r0) r5 = add_key(&(0x7f0000000480)='trusted\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000500)="57e271c7bebad765cfe07805e0c535788ba1ce527ff5c4c32daa6e168d7c87d08dffe0a6cc50b98a73f94e201bac9ac5c2a6c12b9452fae3599be8ba131568503302ee16408d2719e418c42f4b567e7a0353fbdacfe7a96999a52deee4867afc10d05b78fb0e8fa634fc", 0x6a, 0xfffffffffffffffb) keyctl$revoke(0x3, r5) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)="6d6f75567473006794d81c41d402586943f0e9c0aa4d416977444b4e9a3fedefaf7c39a4af4ef4ce8cbd02f201fe0100b0f0fb3485bf92f123c3fe4c74134a3deec6dd31589eb0865decd0efd1bb385659b188c2464b638f7d83d37dbb265b87dc6ff420b296c4c31fbb84025d0757461b2be3f7e58febc9589ca4c216208fbd20") epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000c85000)) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000080)=""/20) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e23}}, 0x8, 0x8, 0x3, "047e2eb5e04ee027f31812353c5294ae3817a571b959c6d1a7d714494a973d9286dc51cb877c7c0d35e9c20761432e8fcafddf882f3687234725b068382eec563c11c9204f48cfc50c86ae8bca5e064c"}, 0xd8) ppoll(&(0x7f0000000280)=[{r4, 0x400}], 0x1, &(0x7f00000002c0), &(0x7f0000000300)={0x9}, 0x8) 03:33:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 296.064711] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 296.097227] attempt to access beyond end of device [ 296.106377] loop1: rw=536870912, want=130, limit=112 03:33:52 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 03:33:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f857140") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 296.120943] attempt to access beyond end of device [ 296.133130] loop1: rw=536870912, want=131, limit=112 [ 296.139214] attempt to access beyond end of device [ 296.144329] loop1: rw=536870912, want=132, limit=112 [ 296.149484] attempt to access beyond end of device [ 296.154429] loop1: rw=536870912, want=133, limit=112 [ 296.159799] attempt to access beyond end of device [ 296.164774] loop1: rw=536870912, want=142, limit=112 03:33:52 executing program 7: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) getegid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) connect(r1, &(0x7f0000000040)=@ax25={0x3, {"d4bef6f3b40c45"}, 0x401}, 0x80) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000000c0)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="7dfb3b7ba6e5944ea7c16e7f35cc9f622aa99624e4dc866683be90eed39185980ffa96de8049759ef71e5950ff2563a4f7de8f0b01e084cd2e951944622fdcea4fe88a0b00f2ef072d22") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 296.170442] attempt to access beyond end of device [ 296.175475] loop1: rw=536870912, want=143, limit=112 [ 296.180672] attempt to access beyond end of device [ 296.186060] loop1: rw=536870912, want=144, limit=112 [ 296.191215] attempt to access beyond end of device [ 296.196196] loop1: rw=536870912, want=145, limit=112 [ 296.202466] attempt to access beyond end of device [ 296.207532] loop1: rw=536870912, want=2178, limit=112 03:33:52 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) epoll_create1(0x80000) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ftruncate(r2, 0xe741f84) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:52 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x0, 0x2, {0xa, 0x4e22, 0x933, @empty, 0x63}}}, 0x32) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000140)=0x10) shutdown(r0, 0x1) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x2000, &(0x7f0000000080)={0xa, 0x4, 0x0, @loopback={0x0, 0x8}, 0x3}, 0x19) [ 296.372185] SELinux: policydb magic number 0x9c332337 does not match expected magic number 0xf97cff8c 03:33:52 executing program 3: get_robust_list(0x0, &(0x7f0000000780)=&(0x7f0000000740)={&(0x7f0000000180)={&(0x7f0000000140)}, 0x0, &(0x7f0000000700)={&(0x7f0000000280)}}, &(0x7f00000007c0)=0x18) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x325100, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8010, r0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000b40)='/dev/loop#\x00', 0x0, 0x200000) clock_gettime(0x7, &(0x7f0000000580)) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x0) userfaultfd(0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20008800, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000001500)="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", 0xd01, 0x0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x31f) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000002240)={0x90, r2, 0x404, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0x1a}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x7d8a1821737b5695}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x8c7e56b5802a24af}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x90}}, 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440)='/dev/sequencer2\x00', 0x400000, 0x0) clone(0x92b2a900, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000340), &(0x7f0000000140)) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000380)={0xd0, {{0xa, 0x0, 0x5, @mcast1}}}, 0x88) socketpair$inet6(0xa, 0x6, 0x486, &(0x7f0000000100)) [ 296.422954] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) nanosleep(&(0x7f00000001c0)={r1, r2+30000000}, &(0x7f0000000200)) 03:33:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x420200, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x80, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)="ed84fcc751e762f8872dab4bde43ed3bb2d609c01b016496ef31b0abe230d05d74bcbe747dfe96477d9d7efdfcae96a0b7f50fdafecdf3167110211e20076a3b550b8bf8bd4baf98170dc66b7b96c095c5f51a54060d05fa8b0af4fc8e12c4398edeffb9c75e77eb4f94bbd38b51d1287a112876de72aa1065b9b8386904c2837d35ed5a49e9e5ea2fa0ee2251f6272ba6ce8ef1176fc702ca81c6667a300cfc2e79926364551e3079bf93bb3f5a5b75dd3781f1cb1efe4e12ca30fa0a94eeea077b330f0398085e0cee740afedb33") ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)) fstat(r1, &(0x7f00000002c0)) 03:33:52 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}) getpid() setpgid(0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) 03:33:52 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x86f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000a00)='./file0\x00', 0x8) 03:33:52 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) mq_unlink(&(0x7f0000000000)="73656c66e35d29707070302d73656375726974792f2900") setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=@dstopts={0x16, 0x11, [], [@enc_lim={0x4, 0x1, 0x7fffffff}, @generic={0x9, 0x57, "02723f74b1ae88341d6d1b2331bf73c381a927c69a7ba8103861d22c96d8cd191cd6b591de70148d2d03a2f3222139abbc30b91d1871c8f04fd568f7fb92bf4331effc073f6f5673114146f7c741ae10ceb2052bb258f2"}, @hao={0xc9, 0x10, @ipv4={[], [], @broadcast}}, @calipso={0x7, 0x18, {0x2da2, 0x4, 0x6, 0x5, [0x800, 0x9]}}]}, 0x90) 03:33:52 executing program 3: mkdir(&(0x7f0000dda000)='./file0\x00', 0x0) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f0000c5eff4)='./file0/bus\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f00000000c0)="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", 0x1000, 0x2, &(0x7f0000000000)={0x77359400}) 03:33:52 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x400000, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/236) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x3, 0x0, 0x0, 0x0, 0x3, 0x3, 0x39, 0x1}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) [ 296.766415] attempt to access beyond end of device [ 296.771509] loop7: rw=536870912, want=114, limit=112 [ 296.777642] attempt to access beyond end of device [ 296.778218] 9pnet: Insufficient options for proto=fd [ 296.792843] loop7: rw=536870912, want=115, limit=112 [ 296.803866] attempt to access beyond end of device [ 296.810320] loop7: rw=536870912, want=116, limit=112 03:33:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 296.816856] attempt to access beyond end of device [ 296.821994] loop7: rw=536870912, want=117, limit=112 [ 296.827576] attempt to access beyond end of device [ 296.832581] loop7: rw=536870912, want=130, limit=112 [ 296.837789] attempt to access beyond end of device [ 296.842897] loop7: rw=536870912, want=131, limit=112 [ 296.848050] attempt to access beyond end of device [ 296.853028] loop7: rw=536870912, want=132, limit=112 [ 296.858191] attempt to access beyond end of device 03:33:52 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @remote}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x6]}, 0x5c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:52 executing program 5: perf_event_open(&(0x7f0000000040)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000040)={0x40042c, {0xffffffbfffbff270}}, &(0x7f00000000c0), 0x8, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x100000000004, 0x44031, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0xfff) prctl$setmm(0x23, 0x5, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={"00ac730000000000ec973f820f7c4000", 0x2c1fe}) ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000540)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/user\x00', 0x2, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)="000000000000000100000001000000768e05f7c155ad7dc6947c573e5a69244e76382c0aa63d575ea3597f8b1728277ef76b30544d7ba92dcf978f1f81dc1b7f8f7b3451dada02ecb4f1ddcc8b5241da8945666e0073c25a6201004dbea37aabd3eb9888c4c629419f50937a6848e0d281dbee568c4de9a036c26f1922f64971d4df97fbab04e8ce4938b31dcf259b4bc60901e18661fab8fb2988cd2bc260c2f572353e6bb0a002fc164d4f189b068062d10100000000000000400c0c4ca57b546b9430172ea5362ee0141b3df06ad235e815d89eead3d9473409c09c2e27a952337a24f20188c013123cc0316a33d8b443453773e4a09edd8031124dee13ce9c75288f2ec833c7e66af5b19a00000000000000", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) accept$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x0, @broadcast}, &(0x7f0000000600)=0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) socket$netlink(0x10, 0x3, 0xf) getsockname$packet(r3, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) fstat(r2, &(0x7f00000004c0)) sendto$inet(r3, &(0x7f0000000740)="38dc1c35be00216122424964e0a1830419675773df4ca08908e945512a0c94d9fcb2610b514984c8b0b7cb4aa10b10b8e9352a3969831454379277f2eb32dcd4123620dd56a8dcb58ce07ba2c766c8cc6e2953c278c747917f2de50f90c3c896fdfb89218f1ddfb20d9c42f96f616cfa3fbbd8f0c756db042920c8d4fe61ec7abc2c2d73ce80d04b978467f41b297186fbdecb0e04e50f0291c9b8e474f42b8eebcf6da2b0ed4080c1129616d873c1aa54e4d46f583a010a698b028715431b25d688b6bd36269461d2d27b2319aec8081cc21c7ebbb4b72a67", 0xd9, 0x800, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@loopback, @in6=@mcast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) ioctl(0xffffffffffffffff, 0x4000008912, &(0x7f0000000000)="295ee1311f16") ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000e00)=0x5) sendfile(r2, r3, &(0x7f0000000240)=0x4800, 0x20000102000007) add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000140)="aeb97a4dcacf321f1bace476d0fa283350b90d8af7e4b7b477a97cc756485ea00ab45393e33cf5603fce0d594f805ac48a92f7118533b34b39d09d82638a79e2313cb0baed826b9042af571ebe4f4ab7", 0x50, 0xfffffffffffffff8) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x4, 0x6, 0x6297, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_ATTR(r4, &(0x7f00000002c0)={0x78, 0x0, 0x7, {0x0, 0x0, 0x0, {0x5, 0x0, 0x8, 0x0, 0x34, 0x4, 0x8, 0x9bdd, 0x80000001, 0x2, 0xcf9d, 0x0, 0x0, 0xcd55, 0x81}}}, 0x78) [ 296.863129] loop7: rw=536870912, want=133, limit=112 [ 296.874252] attempt to access beyond end of device [ 296.880806] loop7: rw=536870912, want=2174, limit=112 03:33:52 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x180000000008006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x4, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 03:33:53 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x200) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") pselect6(0x2fb, &(0x7f0000f33fc0), &(0x7f0000768000)={0x0, 0x0, 0x0, 0x800000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x2d, 0x4, 0x0, {0x2, 0x1, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) 03:33:53 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x20000) r2 = fcntl$dupfd(r1, 0x406, r0) write$selinux_validatetrans(r2, &(0x7f0000000080)={'system_u:object_r:ssh_keygen_exec_t:s0', 0x20, 'system_u:object_r:auth_cache_t:s0', 0x20, 0x4, 0x20, 'system_u:system_r:kernel_t:s0\x00'}, 0x7c) close(r0) r3 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000000)={0x1ff, 0x1d, 0x4, 0x8001, "10f946277a5340877af118f91d7de1ed16e8f0d8fcaa1316d8e92b6ffb212a19"}) [ 297.112489] 9pnet: Insufficient options for proto=fd [ 297.133550] ALSA: seq fatal error: cannot create timer (-19) [ 297.271391] FAT-fs (loop7): Unrecognized mount option "" or missing value [ 297.294770] ALSA: seq fatal error: cannot create timer (-19) 03:33:53 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000)="5203335761cd37c7d2a4acd8452122993d0955c45fe400e693c1b3f420db2f836432fe385a99b1e4e803cbb82e3171f36d2397f7261256331834b442fdc6b201c53f7a7ade1d1b2c89614d444d", 0xfffffffffffffe24, 0x0, &(0x7f0000000180)={0xa, 0x4e21, 0x801, @loopback={0x0, 0x8}}, 0xffffff32) 03:33:53 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x14800, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x100016) r3 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="0d7371bd819da6e68ad79c23ff60623d3c2a15d048f9d5d8a94659ef6c49a8b27ce68c7fa88080c6417abb22431e3bbf63eb8d764706b6ba555aa27bc224c8025b53ea2869c2d92e6a634121ad0472e0f47db7ab3f7ec99de7aaea0e0a7d8c283db38dc317686ce529e18a39193adbac97ea150db425f795b2caa15f084219b2d82ac01ce0ab171ecd517a4fab82615f5af10952f3cb", 0x96, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r4) 03:33:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:53 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x86f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000a00)='./file0\x00', 0x8) 03:33:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) creat(&(0x7f00000000c0)='./file0\x00', 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000002c0)={0xfffffffffffffffe, 0x7fffffff}, 0x8) listen(r1, 0x0) sendto$inet6(r0, &(0x7f00004e8000), 0xcd, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000080)) close(r0) 03:33:53 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x800, 0x70bd25, 0x25dfdbfb, {0x2, 0x0, 0x14, 0x7, 0xff, 0x3, 0xc8, 0xf, 0x2000}, [@RTA_GATEWAY={0x8, 0x5, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:53 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) 03:33:53 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x800000000000016, &(0x7f0000000140), &(0x7f00000001c0)=0x4) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'veth0\x00', {0x2, 0x4e24, @broadcast}}) 03:33:53 executing program 4: getpeername$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) getgid() sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:53 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000080)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:53 executing program 3: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000)) clone(0x0, &(0x7f00000000c0), &(0x7f0000000280), &(0x7f0000000100), &(0x7f0000000040)="4479a8e56164818f46d19efde3f2e2244ed9ae64fb20df8b3acbb7021e6cd3b430ca5b32d988296a827b4dce8bc412acc6c9d472207807ba5304360e83f968f1bc76335c06b1a1c7272b6222033730f7ccc3cddf985447b4ef1a") 03:33:53 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 297.774632] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 297.816353] attempt to access beyond end of device [ 297.821519] loop1: rw=536870912, want=114, limit=112 [ 297.827506] buffer_io_error: 54 callbacks suppressed [ 297.827512] Buffer I/O error on dev loop1, logical block 113, lost async page write [ 297.830498] ALSA: seq fatal error: cannot create timer (-19) [ 297.848179] attempt to access beyond end of device [ 297.853168] loop1: rw=536870912, want=115, limit=112 [ 297.858317] Buffer I/O error on dev loop1, logical block 114, lost async page write 03:33:53 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'yam0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) getsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x41) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000140)=0x5) r2 = memfd_create(&(0x7f0000000180)='&cpusetwlan1self\x00', 0x1) write$FUSE_POLL(r2, &(0x7f00000001c0)={0x18, 0x0, 0x5}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x10000}}, 0x30) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000240)={0x10000, 0x1, 0x7, 0x8fcc, 0xb42, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000280)={0x5a4e, 0x2, 'client0\x00', 0xce73930019ea0fa9, "e1c5160fed8b9b1b", "031717bd093e65806327e0dc75ec1f3209c04a51eb2c30a029546565edcb1ccb", 0x2, 0x9}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) sched_getscheduler(r3) write$selinux_create(r0, &(0x7f00000003c0)=@objname={'system_u:object_r:checkpolicy_exec_t:s0', 0x20, 'unconfined', 0x20, 0x2, 0x20, './file0\x00'}, 0x50) r4 = memfd_create(&(0x7f0000000440)='client0\x00', 0x2) write$P9_RLOPEN(r0, &(0x7f0000000480)={0x18, 0xd, 0x1, {{0xc, 0x1, 0x7}, 0x9}}, 0x18) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000004c0)={0x100000001, 0x1ff, 0x1, 0x0, 0x0, [{r0, 0x0, 0x7}]}) write$binfmt_aout(r2, &(0x7f0000000500)={{0x1cc, 0x80000000, 0x81, 0x270, 0x340, 0x3, 0xa9, 0x6}, "623472f4056494f4c72304f7985071dcc83a0ec0323f24edb426be903f0e5166af26842bc7c2a224740c02d10a2d0b2cb6c52b79f3b51220e1e69973bb1d566ceac19563f5732a789810b6cd8821b997ba9497e8a199665e04a222c7ac836d78bb7aeabf0cf70beb06cc142cea96a48caeec505fa25b1da60768faeba6e38246179d80eb13dfe8b14828013e129496ec0e95f24e048c1f1b164bff3d053d2067e5f3ed64f322b4382aff577cb67aabf8e30c24834539531d6cb07272427ccad45d22b1740f836a9ff41475ec9daf1aeac48b9f5fcf3d6ca34a587545c0bc2304f91e22a058bc91", [[]]}, 0x207) write(r1, &(0x7f0000000740)="d7078e80fe8eed4a6ba244f85b4fdf82e966e2a470f4b83e970256a32c8252a32464dc5b26dfffd1030ec5972b3ae1f0b939bda5f8d7980fbc2a938a25ba47fc12d3bd8eaac1d0230a55d53f0b6002a67fc1ac8b72feae5d4d34979919bb9d8530897d157519a1be953ebbdef8510fa3b0ac02c6fd6b17c45355f502f431dfac62d3cf0c7e6da5b32c64df6340fa53e776c3a3a1", 0x94) rename(&(0x7f0000000800)='\x00', &(0x7f0000000840)='./file0\x00') setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000880)=0x2, 0x4) ioctl$int_out(r4, 0x0, &(0x7f00000008c0)) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000900)='/dev/keychord\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r5, 0x40087705, &(0x7f0000000940)={0x6, 0x10001}) getsockopt$packet_buf(r4, 0x107, 0x1, &(0x7f0000000980)=""/239, &(0x7f0000000a80)=0xef) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) write$FUSE_IOCTL(r0, &(0x7f0000000b40)={0x20, 0x0, 0x6, {0x361, 0x0, 0xe14, 0x100000001}}, 0x20) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000c40)={0x9}, 0x4) [ 297.875779] attempt to access beyond end of device [ 297.880786] loop1: rw=536870912, want=116, limit=112 [ 297.886647] Buffer I/O error on dev loop1, logical block 115, lost async page write [ 297.894990] attempt to access beyond end of device [ 297.900460] loop1: rw=536870912, want=117, limit=112 [ 297.905917] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 297.913820] attempt to access beyond end of device [ 297.918795] loop1: rw=536870912, want=130, limit=112 [ 297.923969] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 297.931900] attempt to access beyond end of device [ 297.936959] loop1: rw=536870912, want=131, limit=112 [ 297.942080] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 297.950147] attempt to access beyond end of device [ 297.955142] loop1: rw=536870912, want=132, limit=112 [ 297.961684] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 297.969790] attempt to access beyond end of device [ 297.975075] loop1: rw=536870912, want=133, limit=112 [ 297.980362] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 297.989679] attempt to access beyond end of device [ 297.994749] loop1: rw=536870912, want=2174, limit=112 03:33:54 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x86f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000a00)='./file0\x00', 0x8) 03:33:54 executing program 4: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:54 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) sched_rr_get_interval(r2, &(0x7f00000001c0)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = getpgrp(0xffffffffffffffff) fcntl$dupfd(r1, 0x406, r0) syz_open_procfs(r3, &(0x7f0000000200)='net/igmp\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 298.437605] ALSA: seq fatal error: cannot create timer (-19) 03:33:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) inotify_init1(0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) fchdir(r0) sendto$unix(r0, &(0x7f00000001c0)="58b507ed5ae6f23e4250de7d47873f3d724bc15e227117a3fc522a2e6c694c1ec6f0d3d2c5d2fe139f19f9d45466f2a1d2c6fbaef5ab548f0c269be4f7614def81a239cfb7ec58c075ed7b1527cdf56f79fabcbe78cdc4110447415e7a8b7e19bb38524d4e829560e474b0523c057163e7b4b344ebf209cd97cf803b58d144cf47bf94f1752bad788e3c68d84989900c748862011e1540f953446e4f016f700fe650", 0xa2, 0x80, 0x0, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x80830, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x4000100007) 03:33:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x7, 0x0, 0x6}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:54 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x10000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) renameat2(r1, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000440)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x8, 0x3, 0x7f, 0xc8}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900000626bd700000000000209dd1310f651d5f000100000800100013000000"], 0x1}}, 0x0) mkdir(&(0x7f00000002c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0, &(0x7f0000000680)={0xa, 0x4e22, 0x67, @dev}, 0x1c) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000240)={0x401, 0x7, 0x3}) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x1, 0x0) r3 = open(&(0x7f0000000340)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x40000, 0x2a) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000003c0)={0xaa, 0x40}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1b) r4 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x0, @rand_addr=0x81, 0x4e23, 0x2, 'ovf\x00', 0x0, 0x0, 0x6b}, 0x2c) dup2(r4, r2) 03:33:54 executing program 5: creat(&(0x7f0000000a00)='./file1\x00', 0x0) syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000401, 0xaaaa89e, &(0x7f0000000000), 0x0, &(0x7f0000000200)={[{@fat=@nfs_nostale_ro='nfs=nostale_ro'}]}) 03:33:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:54 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x3) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000000)="323c733a5d5699413f847d4af68a6415405cb5aef85021ff7b577c69904cbf2776cf3018c3872915a2d1aeec8dc4b92fa0b1dc26fd65a8167e2922d8bfcf66f1e0decad5698ccf7fa122d6477b5b3ac345f41e70e170b52ef54b5be1aba93d69e72a5ed82680fa26c2dfb1732e46d1863c0b00091f859542ee06301be4a34b467a6f45d0f70164adbd8817f690f12dc143b98721d11a95078d61472a4c") 03:33:54 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f00000000c0)=0x28c) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x6, &(0x7f0000000480)=[{&(0x7f0000000180)="e9fa4af88159", 0x6, 0x7}, {&(0x7f00000001c0)="d6100b05bc8ffa2d5ea604216467925902f633f93ee354211744e57ff19d096e50dedc53bd3640918b4ab260dec0aa46677369438b6a63562c", 0x39, 0x1f}, {&(0x7f0000000200)="5b09929aea859948a2b23a7996efea08289d169efa87a70db32963138a7d21583dc14baec8cc6630ca262c56cfa88f8c812b67bd02140940d114370962a1810d228d1920c45cc4300cda11d5a110c216757356db339a02a139ba260ed9f8c4ef00b273a4d43e1337397d112f34139aca3030fc1ae196f34e02ab801dfaeddd6e9fab8508f2fdb83f10c70185c777d755ef0dd1165d3b2bf09ee1500f1bd743593d9734227d02a9", 0xa7, 0xffff}, {&(0x7f00000002c0)="c5dde9cd9508450e106a43d2969e24e9aa67c39b16b7a907097aa08c9d3254d0b3c72804223971e8444696dc1e0f7ba832eb22a2f5600d6e291bb786066ce460e301705ec659cb1e543e6cff2e6f23f7b5d61fd106a79af233d21e45a3d692b48969e9", 0x63, 0xff}, {&(0x7f0000000340)="f685ade77ce5d37b2a2eae48aa3d45d50260fb2bd0334cf4aa848f8fc6425f041139cffe3a775f6a43891cc578665f91d52812a32da927b696d9859572d59c33f10bfce60bb5bdfddf60fb71c02c24a7775276a6c28cec8d5f93713f4693a265b767c4dd3a2b48331ffbbbd1340696f5cd9477ee2b52c490248b4ea90640", 0x7e, 0x8000}, {&(0x7f00000003c0)="7edc5ce59e026415bb34bf3a4564a4f935d848b619d98e6fb9252a98c9499b13b7778d5b3cd173520131a78855fdee460c20e51e32a9169986a9d249361c764d738556a58bd98c803f83e07bee286b162e7828b0f500663e116d0b4e80ff3eed96059590720c056ed04b541da4d79a8e6fdd09cc51a01c4b98f5fe5aeb0f68c5946ea598bdf8c6497355e35d1707e97218ccb90d83d060ee22c5c79f69697bae109fb2e1", 0xa4, 0x9}], 0x20000, &(0x7f0000000540)={[{@acl='acl'}, {@jqfmt_vfsv0='jqfmt=vfsv0'}, {@whint_mode_off='whint_mode=off'}]}) fcntl$setflags(r0, 0x2, 0x1) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:54 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x86f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000a00)='./file0\x00', 0x8) 03:33:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0xb, 0x29, 0x1}, 0xb) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:54 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000200)=[@clear_death={0x400c630f, 0x2, 0x2}, @enter_looper], 0x5b, 0x0, &(0x7f0000000240)="6d491016e6f93a753073d2388e0bffbc0527b909f20419ce6a276f4326706c18c40fd17016d3c76a19124e50c07364230c025965cc375732dd9d26e418a6b3ce72c9fd52b707d856586e348e51823588e624719a020ea86587f04f"}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20008081) 03:33:54 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x37) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x4, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 298.657084] attempt to access beyond end of device [ 298.662137] loop1: rw=536870912, want=114, limit=112 [ 298.669675] Buffer I/O error on dev loop1, logical block 113, lost async page write [ 298.689109] attempt to access beyond end of device [ 298.695106] loop1: rw=536870912, want=115, limit=112 03:33:54 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 298.702770] Buffer I/O error on dev loop1, logical block 114, lost async page write [ 298.721529] attempt to access beyond end of device [ 298.726528] loop1: rw=536870912, want=116, limit=112 [ 298.735799] attempt to access beyond end of device [ 298.741839] loop1: rw=536870912, want=117, limit=112 [ 298.747941] attempt to access beyond end of device 03:33:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x14800, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x100016) r3 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="0d7371bd819da6e68ad79c23ff60623d3c2a15d048f9d5d8a94659ef6c49a8b27ce68c7fa88080c6417abb22431e3bbf63eb8d764706b6ba555aa27bc224c8025b53ea2869c2d92e6a634121ad0472e0f47db7ab3f7ec99de7aaea0e0a7d8c283db38dc317686ce529e18a39193adbac97ea150db425f795b2caa15f084219b2d82ac01ce0ab171ecd517a4fab82615f5af10952f3cb", 0x96, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r4) 03:33:54 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x800000018, &(0x7f0000001300)=0x7fd, 0x4) r1 = socket$packet(0x11, 0xffffffffffffffff, 0x300) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0xc001, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000683ff0)=[{0x6, 0x0, 0x0, 0x7ff}]}, 0x10) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="e694446313bf3fbb7da9fb7044d8d6bb7449171c7a0931f0465c2412cf80f5d557ceb62420f506ae868cac9ead69705ec96964f2ec4effd0c769d94debe11981cdf2a8a7994841b3bfa645b1cfa3879d6e3b1eacf164664d692f951d2d2f323df5c384294c059b4824ef9e3559e0ca12b114d17007978d7427d2427722cbd55690b6d2c53b43731d5eefeecdaf5b00f06fcb1bf690843fbc1e68cc725d256da47e593beb1f00328f79adc639bf9f8ff7a9dad39f52e0d12a1d074bd08969c4077fbc4be4a6d06f545cdea6d3024988b688bb7fe8a543e710684a830c2092d506f7a8c70b970c424e04722358f032204af7de5a7ee2fa11d17c00385fd95432ea5b4d93678dcdf0f09aca1a4e842c1570d8d53e481362d0e9f661ad20db9f7b0409c862be90feccad089349ca6bdd09b957006b3b22b62f13c721396efba767cecadb5a9bcf18f093b0e0aaa42e479b397ce0db2bf0efeb2435742523a5a2ffc4c3dc1e86162eab1431665eeecc098e7ad859d6f859b3d41bf32362699172f88a58560eb4cd837443363dd6c5d93aa3818d7b549a206040e781807d95f0dd810ab475a5007e2d6178180d3cdda9896aa51236451bffe19de27f73eb1b671f097cc2dba1bc0f4b7c51b7452f6e570b0152fb853c157f86d6a733942aa72a440f52dab3978ae8ee73147d9fa9b7a164ea737dc6b0e0eb8bbef9aa67288d38aa1274a22510b1dfa5bdf4016c6fcaa243f9b02912332397272c535f4603aef9c77f16f34b048e3df04b32eb83375cf9b740e6b6d51963499173b565ebe3856090c2e9df95e5f52ef2068a09365f0f241ce18356aca0b08888f1188205135ddd9d9781cec144eeeb30ab68cd31e46afc7c5d730edbf9988f481ff17055782d6ec1dee6488f7ef6ed60615aa8a0c10fd201d0c1f3bc48fb03cd533bac108ac1a7f3bc71743622eee36213008ec7314d39787aef46d3229765e57acba8ae2b6a0ddbc75f68976092219a29c2d11ea845fb3232ba90934ba9549dbfa323fabd51392c619109ce4b7759f2a335972262d9032b357f1df5aa280e27aa917c4a1107dd0e0968ccb9b1d0e11d1a38a670a1e82dc7a2bc4f75c46292b0d0dbfb4d3df934674a786c75f6d9f4067c8832061a06f7827e07d17334a9d12400b37d6f8f58eecfbe388e7ee1b1708bdf78288844d4b780dab9c83914c7ef40c4828a4296386356073cd0ea142d7e78798ce39c53978af30d6f570c0a5850bb19a1ca7b51c0097780673c719a89975bf52884ba20e30b777a36e6b3cba1ad1c73297ce20ebcb739d09b9c4e581713f461041c57b4b909422d38514f6112ddce864975b4ead6ef383d3ecb645938c611f9ac32069cf8749b559fb93f8fb945f5b51de634873ab7f4bc8b119f48192dc8e1f5e0f9c0978cddadef0d5e686bd89ada25b514b753b78436eaf4c3f6295570a0c39fb927ba9147b41b9f12d4b0b17f009aab928c080837436498f131d4ad0e0187212bbb940435b946fea98a755fcaadb01d5cae454b06d459bb69fd1d9745397d52262630bcd8423bfe3f5fcc3c2e8589e050167c7fcaf57cdfd9eaf36dad34c6effa0d387c5d06314e030eab55aacbd8d3e74a4d5f0a0901bb5b9b47489bed052401d74b774a5d373d55d4e31a0b115a13683f8174ce6159cccba8fa93b3a77d5fdbf132d998bc26483dfee0a0050ce30a30b49156a0c4fbfa963d4d428937537b591fe6524dac4b19c4fde980e5036902ab340bb953819d2f38357c1aa74f5ebda7435a3c88b5af48599b4ce781048e056abb678a484e21252f4c4ccdeb9b69ece762f1cc32737dbd175a5c0ed03c4872cb24349658a61cb2ffa5f54bdb41d2b854d8873b3af1d4f8e39a85716db12581de7df4c065c7c3144921e467030045d28036b1718186f24e66910c4542d6b5c8642e033fc6410ff4b00f40ea57662bfa81394344218744f1a33b7ca43d8930132cf3419fc7d673a644dd02b1d133fedfeded41d0de12db74f0056c6c484f6a74b459c51a3683ecb51e07456efa8339e2573cf7014e872a93e193983a583631c0f5135588e1d48d105c6a7c581a92f0805ec83f85640f1b0804ee8e085c2a01cecd19295dd3b5e8bdb44d9545760e8724228e3f8234896851fad9e3988dd1cb40cc64fa930c2352fea071ae40488521e5ba23c4aab781a07187422a1a5435101ed7be522a09703fe2174f216d087c6e4f0ec398d0ebf8605b42b9eaea01f82706408e8f7bf7c6037441fdc84d5362911f417509d26e55d4217cb5f97f4228b5598ad4ed36a76b7ab5458fe67de606766fef1fbf4af3e2e122c960c0bfeaf212be868a417a88861f362377e98aa6c5aa5ccec0f777590dd51c31ba3ccd5f81515a8d333848a437cd44720e9db2a5c5a1919be5169e5d72812b14eb4373f384648af8d4bcc2f7ca66037dd401466f1e262ccd2d90b28f1223901e08bf2624f365d7caab28498e65cb77a34b3629f6614f03a5189173bb0bf23e919768a056d021f064a4020de48e5634f9f46d963f0b31a731fe3e9250326b8ffc8012b44d2c90519a4b79646eb37b36aed484b351a8b0693dbd119fd6558a03e000d00670727e1983197dec5288279891bed3923a5fb6cf499aca1731a70e5d0f8ee44951e168fbdaa9005220907a046ec983e41aab159dbc7ba020a925299110a19eb6b92f78419324b517f11095e0c7beac9c01bdab66960ec57c6c5d7e03d1a8e9563ccb4689d9c3815d3e1c211f3d152240cda453d1913ea4bace978633d57f53e0895b8e05c09e24dce06d67313a55d59bda1f7ee6c33c18dd493cbc", 0x7d0}], 0x1, &(0x7f00000036c0)}, 0x0) [ 298.752935] loop1: rw=536870912, want=130, limit=112 [ 298.758126] attempt to access beyond end of device [ 298.763537] loop1: rw=536870912, want=131, limit=112 [ 298.768872] attempt to access beyond end of device [ 298.773899] loop1: rw=536870912, want=132, limit=112 [ 298.779380] attempt to access beyond end of device [ 298.784429] loop1: rw=536870912, want=133, limit=112 [ 298.790958] attempt to access beyond end of device [ 298.795993] loop1: rw=536870912, want=2174, limit=112 03:33:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 298.995063] binder: 24488:24495 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 299.017445] binder: 24488:24505 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 299.039648] ALSA: seq fatal error: cannot create timer (-19) 03:33:55 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = pkey_alloc(0x0, 0x1) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000340)) pkey_free(r1) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0xffffff1f) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x8004, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@access_user='access=user'}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@access_client='access=client'}, {@access_client='access=client'}, {@access_user='access=user'}, {@debug={'debug', 0x3d, 0x7}}, {@access_any='access=any'}, {@debug={'debug', 0x3d, 0x634}}, {@dfltuid={'dfltuid', 0x3d, r4}}]}}) 03:33:55 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000100)=0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000240)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:55 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_buf(r2, 0x29, 0x2e, &(0x7f0000000080)=""/185, &(0x7f0000000140)=0xb9) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x14800, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x100016) r3 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="0d7371bd819da6e68ad79c23ff60623d3c2a15d048f9d5d8a94659ef6c49a8b27ce68c7fa88080c6417abb22431e3bbf63eb8d764706b6ba555aa27bc224c8025b53ea2869c2d92e6a634121ad0472e0f47db7ab3f7ec99de7aaea0e0a7d8c283db38dc317686ce529e18a39193adbac97ea150db425f795b2caa15f084219b2d82ac01ce0ab171ecd517a4fab82615f5af10952f3cb", 0x96, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r4) 03:33:55 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) inotify_init1(0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) fchdir(r0) sendto$unix(r0, &(0x7f00000001c0)="58b507ed5ae6f23e4250de7d47873f3d724bc15e227117a3fc522a2e6c694c1ec6f0d3d2c5d2fe139f19f9d45466f2a1d2c6fbaef5ab548f0c269be4f7614def81a239cfb7ec58c075ed7b1527cdf56f79fabcbe78cdc4110447415e7a8b7e19bb38524d4e829560e474b0523c057163e7b4b344ebf209cd97cf803b58d144cf47bf94f1752bad788e3c68d84989900c748862011e1540f953446e4f016f700fe650", 0xa2, 0x80, 0x0, 0x0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x80830, r1, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0x4000100007) 03:33:55 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x86f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) acct(&(0x7f0000000200)='./file0\x00') 03:33:55 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8000000029, &(0x7f00000000c0)=0x1, 0xffffffffffffff90) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x6, 0x0, 0xff, 0x4, 0x1, 0x7, 0x200}, 0x20) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:55 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) prctl$setendian(0x14, 0x2) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x400000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x1ff) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x14800, 0x0) r1 = getgid() ioctl$TUNSETGROUP(r0, 0x400454ce, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000340)='./file0\x00', 0x100016) r3 = add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000380)="0d7371bd819da6e68ad79c23ff60623d3c2a15d048f9d5d8a94659ef6c49a8b27ce68c7fa88080c6417abb22431e3bbf63eb8d764706b6ba555aa27bc224c8025b53ea2869c2d92e6a634121ad0472e0f47db7ab3f7ec99de7aaea0e0a7d8c283db38dc317686ce529e18a39193adbac97ea150db425f795b2caa15f084219b2d82ac01ce0ab171ecd517a4fab82615f5af10952f3cb", 0x96, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r3, r4) 03:33:55 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:55 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x10, r2, 0x8) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000003c0)={r4}) ioprio_set$pid(0x1, r3, 0x3f) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) r5 = userfaultfd(0x800) close(r0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000529bd7000fbdbdf25030000000800050007000000080006000180000004030000003000010008000200ff00000008000b00736970000c0007002900000000000000080009005d000000080009004c000000000000000000000000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x44800) r7 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') fcntl$setlease(r7, 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) ioctl$SG_SCSI_RESET(r7, 0x2284, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r5) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000400), 0x4) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000180)="9e2b742197cf81dfe4c41bd6639a9dd5801d70b2a2e2f3428d8101520af3c07558a997ec249230aebcc32fee9990df0aa53d0de05074f3d8c039d595bbc2191af1f97ba6a9cc3484ca4d7d1f6e660bade375587df3ee51f5dbcb3dcdb2a99d48dfa6c553eb93eee6897bb372bc7b1be9028d12937e5b5a6f77cdc1af7d024b2292dfc34958e7b62da0cb4bf5f8bccbb72619cf15cb088b8649ccc9269a390ce7892b7197f0f611d362a2230476b8367f5ae8c5f735b30140ccc8454735b840f59640320a3dee5c3bbfb22da431193de68f5bff63af4d3f2636b66bcb16c690a185301f161d77") 03:33:55 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x86f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 299.522556] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 299.553241] ALSA: seq fatal error: cannot create timer (-19) 03:33:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:55 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) write$P9_RWRITE(r1, &(0x7f00000000c0)={0xb, 0x77, 0x1, 0x6}, 0xb) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) [ 299.597325] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 03:33:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0xf2e54064634ce7a3, 0x1) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:55 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:55 executing program 5: sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x8000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000280)=@nfc_llcp, &(0x7f0000000100)=0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x501, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000240)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:55 executing program 3: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f00000001c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) rt_sigaction(0x27, &(0x7f0000000180)={0xfffffffffffffb09, {0x100000001}, 0x0, 0x3}, &(0x7f0000000300), 0x8, &(0x7f0000000340)) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="160000006f0100010000000000000000000000000000"], 0x16) write$P9_RGETATTR(r1, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000a80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) rename(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 03:33:55 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x0, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:55 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000)="95205a19626fdae0e26307b3031920a6f479b32afd243d023bd44b9db809b2ddc43e5f2f19d663213398040f653e5b574d6bacc9f250fe20d575733961d218c57171859b3466a2645235ed06f44352e6ca2b005f131b", 0x56, 0x0, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:55 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x801000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 03:33:56 executing program 3: r0 = inotify_init1(0x80800) flock(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/3\x00') r2 = inotify_init1(0xfffffffffffffffa) fcntl$setstatus(r2, 0x4, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000300)=0x2, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000380)={'TPROXY\x00'}, &(0x7f00000003c0)=0x1e) r3 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x4082) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'veth1\x00', 0x4}, 0x18) r5 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$RTC_EPOCH_READ(r5, 0x8008700d, &(0x7f0000002780)) pwritev(r5, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) openat$random(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) r6 = gettid() process_vm_readv(r6, &(0x7f00000028c0), 0x0, &(0x7f0000002940)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000002c0)}, {&(0x7f0000002900)=""/44, 0x2c}, {&(0x7f0000002480)=""/27, 0x1b}, {&(0x7f00000024c0)=""/35, 0x23}, {&(0x7f0000002a00)=""/125, 0x7d}, {&(0x7f0000002580)=""/170, 0xaa}, {&(0x7f0000002640)=""/95, 0x5f}], 0x8, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000002c0)={0x62, @local, 0x4e23, 0x2, 'fo\x00', 0x1, 0x6, 0x4b}, 0x2c) ioctl$SNDRV_TIMER_IOCTL_GINFO(r5, 0xc0f85403, &(0x7f00000027c0)={{0x3, 0x0, 0x4, 0x3, 0x8}, 0x7, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x1, 0x81, 0x0, 0x101}) sendfile(r4, r4, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r4, 0x4c01) [ 299.944764] ALSA: seq fatal error: cannot create timer (-19) 03:33:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xa) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xfffffffffffffffe) 03:33:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) epoll_create(0x8) r2 = dup3(r0, r1, 0x80000) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000000)) close(r0) r3 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x3, 0x3e8, [0x0, 0x200000c0, 0x200000f0, 0x200002f8], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x2, 0x88ce, 'ip6_vti0\x00', 'gretap0\x00', 'lo\x00', 'team_slave_0\x00', @dev={[], 0x10}, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={[], 0x14}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x108, 0x108, 0x138, [@ip={'ip\x00', 0x20, {{@loopback, @rand_addr=0x800, 0xff000000, 0xff000000, 0x8001, 0xff, 0x20, 0x1, 0x4e23, 0x4e23, 0x4e22, 0x4e22}}}, @helper={'helper\x00', 0x28, {{0x1, 'H.245\x00'}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {{{0x11, 0x3e, 0xe8ff, 'bond_slave_0\x00', 'vcan0\x00', 'veth1_to_bond\x00', 'tunl0\x00', @broadcast, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0xa0}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xffffffff80000001}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{{{0x3, 0x4, 0x0, '\x00', 'bridge_slave_1\x00', 'lo\x00', 'bridge0\x00', @random="e5d779ca1bae", [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xa8, 0xd8, 0x150, [@cluster={'cluster\x00', 0x10, {{0x3, 0x0, 0x9, 0x1}}}]}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x101, 0x9, 0x0, 0x0, 0x0, "556cfd205274c8634e630c493f6ec266d6ddd2b194b46e91ef7d746a5fdb7d4aac4edc9a66a595c5b9fc51ddfcf6b55ab5291446ba59fe06b345553399d0ac2e"}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff}]}, 0x460) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 300.016512] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0, 0x102030, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x9, 0x6f, 0x1}, 0x9) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:56 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)="6370757365749b613a7b5c3a28657468307b766d6e657430285c00", 0xfffffffffffffffa) add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="5bd63747b2266a018d94d3cfcaf62088ec0b84ee7124f8c7057a7f58ba2fe0c59780143e98fed3f6309905304ae28650afa482ccb7752a0b36eb826b8545962875778c1d3fb6a14c344150368884b429fcf9599e117135cbd844b7882c9edc6586cb1b100e826df56f282c26c0aec167ba1ff6", 0x73, r1) 03:33:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) write$FUSE_ENTRY(r2, &(0x7f0000000240)={0x90, 0xfffffffffffffff5, 0x4, {0x2, 0x0, 0x7, 0x66, 0x7, 0x1, {0x0, 0x8, 0x3, 0x7fffffff, 0x9, 0x400, 0x0, 0x4, 0xf2f, 0x80000001, 0x1, r3, r4, 0x81, 0xd5}}}, 0x90) timer_create(0x3, &(0x7f0000000540)={0x0, 0x2f, 0x6, @thr={&(0x7f00000003c0)="07d7913a970898ae6de6f719a2269797c0981a82e918e93ae99345773d72c41a0c2d6f453ad938b36ec8519075550eaf03858cc20dac9692f00bcdfde78e52a2bb383cae55221ca51403ec255669e35c863355a9fa301f9abeb611f4592a6323741dbf74a59e7e54f169775a4c078e26b7b241c0fb5a3385c5cd2f7597ef868af00f77d4", &(0x7f0000000480)="3701bb159a6e2d0fe028049850a404427ece8ead2a418fb16d337541465d26234b9ee0664543c29b680cbb79fdfa6fdca8b932b7c53bbd3b66ed5c9dbafc81054f42c4ad1f2f9adf11baf7addbf2d14c39578c91544d9054700242173971a5db81bde5a24b3362d7c7a5877977d4d5a29d53acc89cb3b136bd898f103fcd387cc3cce1fdc3d14d5c172b258b3c94ca619d30b2e4ff296e3fd774db0d86b5062611718f559065cab13b27687039b885a99b9f894b9b"}}, &(0x7f0000000580)) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000005c0)={0x80000000, 0x10001, 0xff, 'queue1\x00', 0x7f}) close(r1) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)=""/29, &(0x7f0000000080)=0x1d) [ 300.247048] attempt to access beyond end of device [ 300.252284] loop1: rw=536870912, want=114, limit=112 [ 300.260563] attempt to access beyond end of device [ 300.277110] loop1: rw=536870912, want=115, limit=112 [ 300.284329] attempt to access beyond end of device [ 300.290014] loop1: rw=536870912, want=116, limit=112 03:33:56 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0xf2e54064634ce7a3, 0x1) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x208040) write$P9_RWSTAT(r2, &(0x7f0000000080)={0x7, 0x7f, 0x1}, 0x7) [ 300.295232] attempt to access beyond end of device [ 300.311037] loop1: rw=536870912, want=117, limit=112 [ 300.316668] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 4, id = 0 [ 300.326264] attempt to access beyond end of device [ 300.331368] loop1: rw=536870912, want=130, limit=112 [ 300.336834] attempt to access beyond end of device 03:33:56 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xc0202, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @remote}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000000ca0000cdb50392600a0000"]}) [ 300.345819] loop1: rw=536870912, want=131, limit=112 [ 300.351035] attempt to access beyond end of device [ 300.358207] loop1: rw=536870912, want=132, limit=112 [ 300.363415] attempt to access beyond end of device [ 300.368561] loop1: rw=536870912, want=133, limit=112 [ 300.374414] attempt to access beyond end of device [ 300.379462] loop1: rw=536870912, want=2174, limit=112 [ 300.389041] ALSA: seq fatal error: cannot create timer (-19) 03:33:56 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) [ 300.466542] attempt to access beyond end of device [ 300.479684] loop5: rw=536870912, want=114, limit=112 [ 300.485153] attempt to access beyond end of device [ 300.493909] loop5: rw=536870912, want=115, limit=112 [ 300.499658] attempt to access beyond end of device [ 300.504609] loop5: rw=536870912, want=116, limit=112 [ 300.510365] attempt to access beyond end of device 03:33:56 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000000)="fbbf06622460605df028181617200f7c780c84fc46448f69d70ed7b09a84515776af8892198ea12e0453f59f25b2f27dc6fc6bae8ddf6b63d669dfe45622ea9c8e9d175fd3babe91588539233561d2f548aa2c04cebb667c0be4c1", 0x5b}, {&(0x7f0000000080)="ae6bfd60abcb4961d6797b647e12c1714edbbd491fad30122fa71bddbdf5f1016e5934b12aca879b6567531182444863b8c696594213653372ba583f26690015e72292734d5c47f6ffc583da93aa315fff2843f6641141c93fc4bd20cf0469f764a08eab815e2053047ad68e1a2065225f9486ceefcd48ec3b8dd650d710c2513fa063e23db79a7cfe2f2134f5cfa3bed951bd944175ca6b2a2e8e2679e321a0c6234cd9a7b5a114ddcf331d5b7fc8b247649cd0c8ff11ffaeb62ca223c5c7ac377b28dee7e7", 0xc6}, {&(0x7f00000001c0)="aa4c426df02f7ea40c387b549aed8acdeeda3fe60d06d264631222969d608ce225e37ac814c43632c1ceb48ede9c3734492ef7f32a9eff94a7e76e29ae4d915603a86d714f37a8a1f1aeca117ca93dee89ae408fa50d7d02fd604dc7937a7a6cef918a0d0178ecb4ce833fa697c3d451c00945a934fa4d7571f6b00ab5194aace699245accbb3dcfdfde431b5f58e1356823be4ae00e2989192e08098de52580613e97b451690a9a414727df5b25e0ed0b79a5e2c506a3d0a8a52bae43675a652bf12f23841861f9dac4558ddf3611398d6f64ec0d3a872beb772d231b0c91", 0xdf}, {&(0x7f00000002c0)="ac9b8395a210476074e5b493c7ac94d549af5670456ef781b07ba76b06ab346048de68fd2a2ae15a6a249200ca2669ce10ac5b3d41a756761c128a6a65de5b7c8c2330561e92068111a5e002f6f936fce259243062c9f3071dca749541c09795a61f200b41b520a423607baeab93d5e56d7f7b49ffd22cf349", 0x79}, {&(0x7f0000000340)="9a0ec3cc8fb7b29384453230f57a264a3342075ad75367f3ede5ce0e9f6b12ddbdf6978f0f5261cbe35830af47663e5a37b9e7051363a5091ba381eb3add3feee6a9bab7aee3883c5da17f7764d67728b7bdf755277c1b54a9426a78f375f851a9e2c045545e8a27260d6a5b973ffe6ec1a89acd208430558c84", 0x7a}, {&(0x7f00000003c0)="1b6c37a3e9262d10fe104af8963e9986542f6e92345cd5d19e37cd6b88ff9975e8ef206612b41bb00eabd8ca77d668cd8b087e6b75b3f2e6c23699b579c07b6982be4c614a9b462498", 0x49}], 0x6) [ 300.515351] loop5: rw=536870912, want=117, limit=112 [ 300.520558] attempt to access beyond end of device [ 300.525669] loop5: rw=536870912, want=130, limit=112 [ 300.531048] attempt to access beyond end of device [ 300.536173] loop5: rw=536870912, want=131, limit=112 [ 300.541391] attempt to access beyond end of device [ 300.546529] loop5: rw=536870912, want=132, limit=112 [ 300.552672] attempt to access beyond end of device [ 300.561655] loop5: rw=536870912, want=133, limit=112 03:33:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x200000002002}) 03:33:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f0000000080)=0x1000) 03:33:56 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000001140)='./file0\x00', 0x3) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [], 0xa, "60c36302cd61bad5b8d6ef589ce683d5ff3ce1067c8c9536b474998722fe6b6c"}, 0x2b) close(r1) fstatfs(r0, &(0x7f0000000680)=""/197) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f0000000380)='./file0\x00', 0x186, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000500)="990f62d0589aca9cc618082ef2f5602264e2831c578ade37b3969449344d1ce3038fc644a0942072bdbd380c6fa6a11a68fd320dfd6205599cd12bbb0259a6c2d108f77d055a23b591f26b", 0x4b, 0x1}], 0x40, &(0x7f0000000640)=ANY=[]) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x1) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000400)={0x6, 0x3f, 0x7f}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x7) ioctl$VT_ACTIVATE(r1, 0x5606, 0x5) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000002c0)={{0x569, 0x100000000}, 0x0, 0x7, 0x8001, {0x2, 0xf1}, 0x800, 0x2}) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/user\x00', 0x2, 0x0) getsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f0000000180)=""/154, &(0x7f0000000240)=0x9a) syz_read_part_table(0xffffffff00000000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000000)="000000000000000000000000000000000000000000000000e0e415320000000002009c0126000100000064000000000127008e030c0065000000640000000003b50d0ebf3100c900000064000000007d54c0a92020002d010000df40000055aa", 0x60, 0x1a0}]) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000340)={@multicast1, @broadcast}, &(0x7f00000003c0)=0xc) 03:33:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 300.579730] attempt to access beyond end of device [ 300.585088] loop5: rw=536870912, want=2174, limit=112 03:33:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000100)='./file0\x00', 0xffff) 03:33:56 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x400000) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) [ 300.781659] ALSA: seq fatal error: cannot create timer (-19) [ 300.788247] attempt to access beyond end of device [ 300.788255] loop1: rw=536870912, want=114, limit=112 03:33:56 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.ima\x00', &(0x7f0000000380)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c255a3134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa68402", 0xf2, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000140)) ftruncate(r0, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000100)={0x2, 0x6, 0x2, 0x0, 0x9, 0x7}) mremap(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil) setns(r0, 0x20000000) clock_gettime(0x0, &(0x7f00000029c0)) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x400000, 0x0) fallocate(r1, 0x0, 0x0, 0x5c0d) madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x400000000000006) 03:33:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 300.788269] attempt to access beyond end of device [ 300.788273] loop1: rw=536870912, want=115, limit=112 [ 300.788283] attempt to access beyond end of device [ 300.788288] loop1: rw=536870912, want=116, limit=112 [ 300.788298] attempt to access beyond end of device 03:33:56 executing program 4: r0 = socket(0x8, 0x80802, 0x100000001) lseek(r0, 0x0, 0x5) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:56 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) 03:33:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000002c0)=""/4096, &(0x7f0000000080)=0x1000) [ 300.788302] loop1: rw=536870912, want=117, limit=112 [ 300.788314] attempt to access beyond end of device [ 300.788319] loop1: rw=536870912, want=130, limit=112 [ 300.788328] attempt to access beyond end of device [ 300.788332] loop1: rw=536870912, want=131, limit=112 [ 300.788342] attempt to access beyond end of device [ 300.788347] loop1: rw=536870912, want=132, limit=112 [ 300.788357] attempt to access beyond end of device [ 300.788361] loop1: rw=536870912, want=133, limit=112 03:33:56 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') [ 300.790141] attempt to access beyond end of device [ 300.790148] loop1: rw=536870912, want=2174, limit=112 [ 300.865065] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:57 executing program 0: r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x2) getsockopt$inet_udp_int(r0, 0x11, 0x6f, &(0x7f00000001c0), &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 301.056202] attempt to access beyond end of device [ 301.063811] loop5: rw=536870912, want=114, limit=112 [ 301.076379] attempt to access beyond end of device [ 301.089010] loop5: rw=536870912, want=115, limit=112 [ 301.094617] attempt to access beyond end of device [ 301.100738] loop5: rw=536870912, want=116, limit=112 [ 301.115678] attempt to access beyond end of device [ 301.122221] loop5: rw=536870912, want=117, limit=112 [ 301.127526] attempt to access beyond end of device [ 301.132500] loop5: rw=536870912, want=130, limit=112 [ 301.137984] attempt to access beyond end of device [ 301.143005] loop5: rw=536870912, want=131, limit=112 [ 301.148764] attempt to access beyond end of device [ 301.154086] loop5: rw=536870912, want=132, limit=112 [ 301.159287] attempt to access beyond end of device 03:33:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x1b5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="c9201712d7c9dd871879eba938353a7183991edb76a4ca4bd7bec9c7b970823dc301278587b3c9c3a03b1f6f6b7a9e791712abd169ae5c815a7d4a21ee3af9c65b351adc1cf4e306496a191e6993fa5036d711451f174981b2992ec7c403a9b4b8145056ff9109f089bb5cc8221ea33334b03871964c81518902bf9f4886") syz_open_pts(r1, 0x2000) 03:33:57 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101000) r2 = dup2(r0, r1) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000340)=""/142) r3 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r2, &(0x7f00000001c0)="8b3d2127da70abc7a3df656e9dbf6724dcb1a6ce9ec09a57a996421711c3aabf242d3e521b7cb8241890dd53faf179f42be0bd07458c69e2edd796b690eda7c810ebae81d4f441c344739a05eebb9724974366ee722d4adaa47cd7b29e0ba2312ae6e7b18a1c", 0x66, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x20000, @local}, 0x1c) ioctl$fiemap(r2, 0xc020660b, &(0x7f0000000240)={0x6, 0xff, 0x1, 0x7, 0x3, [{0x8, 0x9, 0x7fc, 0x0, 0x0, 0x802}, {0x9, 0xfffffffffffffff8, 0x1000, 0x0, 0x0, 0x204}, {0x8, 0x400, 0x0, 0x0, 0x0, 0x201}]}) exit(0x2aad) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000080)=@fragment={0x8a, 0x0, 0x0, 0x437, 0x0, 0xa6, 0x65}, 0x8) [ 301.167919] loop5: rw=536870912, want=133, limit=112 [ 301.177473] attempt to access beyond end of device [ 301.183986] loop5: rw=536870912, want=2174, limit=112 03:33:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:57 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) [ 301.226102] attempt to access beyond end of device [ 301.235935] loop1: rw=536870912, want=385, limit=112 03:33:57 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, &(0x7f0000001080)="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", 0x1000, 0x0, &(0x7f0000002080)={0x2, 0x4e24, @rand_addr=0x5}, 0x10) close(r0) r3 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') getsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000020c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)) 03:33:57 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) 03:33:57 executing program 5: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000880)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) ioctl$KDDELIO(r0, 0x4b35, 0xcf6) keyctl$set_reqkey_keyring(0x5, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000100)=0xc) accept4$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14, 0x80800) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) setfsgid(r4) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000500)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}}}, &(0x7f00000003c0)=0xe8) accept4$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20494}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="60010000", @ANYRES16=r1, @ANYBLOB="180128bd7000fbdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="0001020038000100240001006d636173745f7265926f696e5f636f756e740000000000000000000000000000080003000300000008000400088000003c0001002400017adba3cf1a03ae0f293bc3884100656e7ada7250609ea761626c656400000000fbff000000000000000000001f0000", @ANYRES32=r3, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="3c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040003000000"], 0x160}, 0x1, 0x0, 0x0, 0x80}, 0x8010) request_key(&(0x7f0000000180)="646e73050000006f6ce3ec27b3b10100547f2d6e2c3610ce8eaad81402a18393644768a45763d729967230f27aa8843791ea90f7bf7f606a79b6c2a1046abcfa000000000000000000c4a60b65d13c33a208bead62c2afc6952aa60ccdabfdf55fb77f4a702de168905af34ffb285b2aa42e90583df5f7dfee67bad36414a83256a6d8f51c3ca52123368944058a85e2dc6252ec32f7a1360be021a05807b2b3", &(0x7f00000005c0), &(0x7f0000000600)='selinux-%\x00', 0x0) [ 301.324619] ALSA: seq fatal error: cannot create timer (-19) 03:33:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x5, 0x0, 0x4ef, 0x5, 0x8000, 0x403}) r1 = syz_open_pts(r0, 0x4000000001) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000000c0)="d022a1ace002936d3622f2ac9ea5f4d783d37f83af54c4c31aa332d80e2baf988bd297ce0f867e023c222b3af581000f5008f77077c6315b0ec88a5362c92ba430b7c9cdff1bbb411cdda5caff147b281e7174a16d1055e50c9acb6886c68e98c10b613f7adac8de1e4954ca0088b3d061cab70e53c49e99034c5cbddffaddefc67651c9d037cb60123549dee1a9552bb5e44a4d141851aa0ac686a441b49721d74a56e66c088a63ecee8175ca97e70b203f152effff5e8fcc9e6130ed650aea829610a8b459e9c5d9b078bc2881a39a14828cedeff092c7721adc6e0b30e2689fd7f8e493058dc18dc24b8176e7d2637d2d6c0a", 0xf4}, {&(0x7f00000001c0)="7aa20174707fd4450375437ab25d7429e775556e37ca7eac25f2b8715ec01c4b7d31e64e359d7e07535159", 0x2b}, {&(0x7f0000000200)="caa59e8fbd8a75d94db42a1f939ed53db0ec781a785372f93c7f1599499102a125373ccada0fc6dcdba9615b3494b972269522395f74508ddd3b9661fc7aa7733441b5977a8c42a33a13de7bc0eef6b6", 0x50}], 0x3, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:57 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) 03:33:57 executing program 0: r0 = epoll_create1(0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) r2 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)) 03:33:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 301.487671] 9pnet: p9_errstr2errno: server reported unknown error 3 03:33:57 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet(0x2, 0x804, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000a40)=""/111, &(0x7f0000000040)=0x6f) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev}, &(0x7f00000008c0)=0x10) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000b40)='./bus\x00', 0x30a) inotify_rm_watch(r1, r4) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) write$9p(r2, &(0x7f0000000340)="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", 0x537) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf"], 0x29) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) open(&(0x7f0000000900)='./bus\x00', 0x20000, 0x2) statfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)=""/27) openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x20000, 0x0) 03:33:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0/file0\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:57 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x20, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000001c0)={{0x800, 0x2}, 'port1\x00', 0x22, 0x1000, 0x95a, 0x380000, 0x4, 0x1, 0x9, 0x0, 0x7, 0xf9}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x800, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=0x8e) ioctl$TIOCLINUX3(r3, 0x541c, &(0x7f00000002c0)) 03:33:57 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r7 = memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000400)=""/105) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f00000006c0)=0x10) 03:33:57 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) memfd_create(&(0x7f0000000240)='vfat\x00', 0x0) [ 301.650421] ALSA: seq fatal error: cannot create timer (-19) 03:33:57 executing program 0: r0 = epoll_create1(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x241, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, 0x32, 0x605, 0x70bd2d, 0x25dfdbfb, {0x17}, [@nested={0xa8, 0x53, [@generic="344c93323ab88cc9086a7f831c40782632004f7cf64ad1c768b4d54b65e73f32ba88177ef175168053a452b59eea0a1cc8fe2546621cd6958da69e", @typed={0x4, 0x33}, @typed={0x4, 0x1}, @generic="b7f99373e86cae4972c2e04f64ea597f5fe0252cb664068e442740e5e554e6fc68f92dbcc97911bee8be5b5950776712f45b664c7fb3b9f3c8422cbeee7a1ada79e5adab2f9fe06fd4bdb7599d834772fdc62020", @typed={0xc, 0x18, @u64=0xb4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4044000}, 0x4) r2 = epoll_create1(0x0) close(r0) syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000c85000)) getgid() epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)) [ 301.696203] attempt to access beyond end of device [ 301.701444] loop1: rw=536870912, want=130, limit=112 [ 301.707142] attempt to access beyond end of device [ 301.712131] loop1: rw=536870912, want=131, limit=112 [ 301.718288] attempt to access beyond end of device [ 301.723343] loop1: rw=536870912, want=132, limit=112 [ 301.728658] attempt to access beyond end of device [ 301.733696] loop1: rw=536870912, want=133, limit=112 [ 301.739001] attempt to access beyond end of device [ 301.746840] loop1: rw=536870912, want=142, limit=112 [ 301.752884] attempt to access beyond end of device [ 301.758783] loop1: rw=536870912, want=143, limit=112 [ 301.765800] attempt to access beyond end of device [ 301.770774] loop1: rw=536870912, want=144, limit=112 [ 301.776514] attempt to access beyond end of device [ 301.781521] loop1: rw=536870912, want=145, limit=112 [ 301.787884] attempt to access beyond end of device [ 301.792948] loop1: rw=536870912, want=2178, limit=112 [ 301.863142] FAT-fs (loop5): error, invalid access to FAT (entry 0x000001c3) [ 301.872983] FAT-fs (loop5): Filesystem has been set read-only [ 301.881478] FAT-fs (loop5): error, invalid access to FAT (entry 0x000001c3) [ 301.894465] FAT-fs (loop5): error, invalid access to FAT (entry 0x000001c3) [ 301.902514] FAT-fs (loop5): error, invalid access to FAT (entry 0x000001c3) [ 301.926695] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000ff0) [ 301.934298] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000202) [ 302.066627] ALSA: seq fatal error: cannot create timer (-19) 03:33:58 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80000, 0x0) write$eventfd(r1, &(0x7f0000000040)=0x6, 0x8) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0xfffffffffffffffc, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}, 0x5}, 0xffffffffffffff09) 03:33:58 executing program 6: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400009) sysinfo(&(0x7f00000001c0)=""/72) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x9, 0x400, 0x2, 0xf5, 0x1ff, 0x1000, 0x9, 0x10001, 0x3f, 0x4}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) 03:33:58 executing program 3: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r1, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) modify_ldt$read(0x0, &(0x7f0000000140)=""/237, 0xed) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x40000, 0x0) getsockname$netlink(r3, &(0x7f0000000280), &(0x7f00000002c0)=0xc) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000400)='fou\x00') r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400000, 0x0) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x40) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000080)={0x5, 0xd, 0x3, 0x11, 0xb, 0x5, 0x6, 0x65, 0xffffffffffffffff}) connect$l2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x4, {0xa, 0x4e24, 0x101, @loopback, 0x80000000}}}, 0x32) 03:33:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:58 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = socket$inet(0x2, 0x804, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000a40)=""/111, &(0x7f0000000040)=0x6f) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) getsockname$inet(r0, &(0x7f0000000880)={0x2, 0x0, @dev}, &(0x7f00000008c0)=0x10) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = dup2(r2, 0xffffffffffffffff) r4 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000b40)='./bus\x00', 0x30a) inotify_rm_watch(r1, r4) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) write$9p(r2, &(0x7f0000000340)="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", 0x537) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="0000000000000000760000000000000000000000000000ef06000000000000004e2311b580fb9e02bf"], 0x29) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) open(&(0x7f0000000900)='./bus\x00', 0x20000, 0x2) statfs(&(0x7f0000000140)='./bus\x00', &(0x7f0000000200)=""/27) openat$md(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/md0\x00', 0x20000, 0x0) 03:33:58 executing program 0: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x5, 0x778, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x7f0) close(r2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x800}) r4 = fcntl$dupfd(r0, 0x406, r0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000940)) write$P9_RLINK(r4, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) epoll_create1(0x80000) 03:33:58 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 03:33:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)={0x0, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x2) r1 = dup(0xffffffffffffff9c) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r2, &(0x7f00000001c0)=[{{0x77359400}, 0x8, 0x0, 0xb46}, {{0x0, 0x2710}, 0x2, 0x9, 0x20}, {{r3, r4/1000+10000}, 0x9472, 0x6}, {{}, 0xc2, 0x7fffffff, 0x46}, {{}, 0x6, 0x100, 0xfffffffffffffffe}, {{0x0, 0x7530}, 0xd0d4, 0x8001, 0xdf66}, {{}, 0x3, 0x4, 0x1}], 0xa8) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 302.206312] attempt to access beyond end of device [ 302.211282] loop1: rw=536870912, want=114, limit=112 [ 302.216842] attempt to access beyond end of device [ 302.221826] loop1: rw=536870912, want=115, limit=112 [ 302.227593] attempt to access beyond end of device [ 302.232727] loop1: rw=536870912, want=116, limit=112 [ 302.238034] attempt to access beyond end of device [ 302.243018] loop1: rw=536870912, want=117, limit=112 [ 302.248856] attempt to access beyond end of device 03:33:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0/file0\x00') setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000001c0)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 302.253796] loop1: rw=536870912, want=130, limit=112 [ 302.259185] attempt to access beyond end of device [ 302.264182] loop1: rw=536870912, want=131, limit=112 [ 302.269576] attempt to access beyond end of device [ 302.274621] loop1: rw=536870912, want=132, limit=112 [ 302.279786] attempt to access beyond end of device [ 302.284883] loop1: rw=536870912, want=133, limit=112 [ 302.290753] attempt to access beyond end of device [ 302.295915] loop1: rw=536870912, want=2174, limit=112 03:33:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x8400, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x9) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000380)={0x7f, 0x5, 0x1fffe000, 0x101, 0x6, 0x8}) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r1, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000280)="5991248b33c9b05cc9d2741fb7050b1dc0a83773076eecd9b20605099b5f285abfde9d4d6e10006d0214a8492f9a40125aab091d2525ce26277e581e75463ae5ba5dbcb6f3c7b63d378a101ff14b0a9517714071ba4c673db9a90a031cf8b6b25a77", 0x62, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000300)={0x2000}) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x7fffffff, 0x5, 0x0, 0x7fff, 0x0, 0x1, 0x1200, 0x1, 0x5, 0x7f, 0xfffffffffffff801, 0x8, 0xffff, 0xc0c5, 0x2, 0xfffffffffffffffc, 0xffffffffffffff66, 0x3c, 0x3, 0x6, 0x8000, 0x916, 0xffff, 0x6, 0x7, 0x9, 0x7, 0x0, 0x5, 0x4, 0x178, 0x100000001, 0xfffffffffffffffe, 0xcb, 0x9, 0x267d, 0x0, 0x9, 0x1, @perf_config_ext={0xdda2, 0x8}, 0x8, 0x54, 0xe2, 0x7, 0x8, 0x6, 0x100}, r5, 0xa, r2, 0x0) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$KDSETLED(r4, 0x4b32, 0x2) 03:33:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:58 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) [ 302.395509] ALSA: seq fatal error: cannot create timer (-19) 03:33:58 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x1, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 302.506887] FAT-fs (loop5): error, invalid access to FAT (entry 0x000001c3) [ 302.516688] FAT-fs (loop5): Filesystem has been set read-only [ 302.530025] FAT-fs (loop5): error, invalid access to FAT (entry 0x000001c3) [ 302.542974] FAT-fs (loop5): error, invalid access to FAT (entry 0x000001c3) 03:33:58 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40000000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp, 0x0, 0x8000000000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001c1000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x2000000000000) clone(0x4, &(0x7f0000000180), &(0x7f0000000280), &(0x7f0000000040), &(0x7f0000000080)="684454041bf5288006000000000000e4ba42954dc29e7d423f4c1508e4123ed62242038eb19f6fddb2b865b40760f11e4f104ca34224492cd92a6cfcf667350a9003f08e082d08b036bb4efd5f2e6dd64912f53cf6") [ 302.555003] FAT-fs (loop5): error, invalid access to FAT (entry 0x000001c3) 03:33:58 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pkey_free(0xffffffffffffffff) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) linkat(r1, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000002c0)='./bus\x00', 0x1400) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/loop-control\x00', 0xffffffffffffffe, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xee, &(0x7f0000000380)=""/228, &(0x7f0000000480)=0xe4) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) epoll_create(0x10000) write$binfmt_aout(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="00008031b92d9880d5166ccbea093700000000000076000000000000000000ef06000000000000004e2311b580099e02bf40e2ce65d656594cc3e73feca6f09512026abe273efc25f0383763dee8d770"], 0x30) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000240)={0x2, 0x420000000, 0x0, 0x0, 0x1, 0x2}) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$sock_void(r3, 0x1, 0x24, 0x0, 0x0) 03:33:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b13f8aabc1e7eeb3f53c95c5477c7ebdc2a4054e40c613b8fe8599d4b2fb53f8a8fabf3519d833339d60409843049fafe14da31feda0") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000003c0)=""/104) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/keychord\x00', 0x280000, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000240)=0x10001, 0x4) perf_event_open$cgroup(&(0x7f0000000340)={0x7, 0x70, 0x1000, 0x2, 0x0, 0x0, 0x0, 0x69, 0x200, 0x0, 0x0, 0xd6c1, 0x3, 0x400, 0x7, 0x10000, 0x330, 0x5, 0x5ff, 0x12, 0x9, 0x800, 0x9, 0x6, 0x5, 0x8, 0x3ff, 0x1, 0x3ff, 0x999, 0x5, 0x72a, 0x9, 0x4, 0xfff, 0x80, 0xbed, 0xcbdc, 0x0, 0x7, 0x4, @perf_config_ext={0xd834, 0x8001}, 0x241, 0x8001, 0x2, 0x0, 0x2, 0x8, 0x1}, r3, 0x1800000, r1, 0x0) truncate(&(0x7f0000000440)='./file0\x00', 0x100007) 03:33:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:58 executing program 4: socket$inet6(0xa, 0x100000003, 0x80000000000006) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) 03:33:58 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_mr_vif\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0)=0x2000000, 0x10000000000443) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r1 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0xff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptmx\x00', 0x8400, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x9) setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000240)=0x3, 0x4) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x9, &(0x7f0000000200)="2894ba9157f2fd7464231bc335c80ab46311209daf180bd969256196f49435468f5d906c") ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x2, {0x2, 0x0, @broadcast}, 'bond_slave_1\x00'}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f000074fffc), 0xb73d37fda2d17bc9) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000380)={0x7f, 0x5, 0x1fffe000, 0x101, 0x6, 0x8}) r4 = dup(r1) setsockopt$inet6_tcp_int(r4, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r4, r3, &(0x7f0000000000), 0x4b5) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)=0x0) fcntl$setown(r1, 0x8, r5) ioctl$KDSETLED(r4, 0x4b32, 0x4) fcntl$addseals(r3, 0x409, 0x0) sendto$inet6(r1, &(0x7f0000000280)="5991248b33c9b05cc9d2741fb7050b1dc0a83773076eecd9b20605099b5f285abfde9d4d6e10006d0214a8492f9a40125aab091d2525ce26277e581e75463ae5ba5dbcb6f3c7b63d378a101ff14b0a9517714071ba4c673db9a90a031cf8b6b25a77", 0x62, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000300)={0x2000}) ftruncate(r6, 0x7fff) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x7fffffff, 0x5, 0x0, 0x7fff, 0x0, 0x1, 0x1200, 0x1, 0x5, 0x7f, 0xfffffffffffff801, 0x8, 0xffff, 0xc0c5, 0x2, 0xfffffffffffffffc, 0xffffffffffffff66, 0x3c, 0x3, 0x6, 0x8000, 0x916, 0xffff, 0x6, 0x7, 0x9, 0x7, 0x0, 0x5, 0x4, 0x178, 0x100000001, 0xfffffffffffffffe, 0xcb, 0x9, 0x267d, 0x0, 0x9, 0x1, @perf_config_ext={0xdda2, 0x8}, 0x8, 0x54, 0xe2, 0x7, 0x8, 0x6, 0x100}, r5, 0xa, r2, 0x0) sendfile(r4, r6, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$KDSETLED(r4, 0x4b32, 0x2) 03:33:58 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000700)=0x2) [ 302.830460] ALSA: seq fatal error: cannot create timer (-19) 03:33:58 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e23, 0x5, @empty, 0x100000001}, {0xa, 0x4e24, 0x10000, @mcast2, 0x4}, 0x81, [0x7, 0x6, 0x400000000, 0x7, 0x5, 0x10000, 0x8]}, 0x5c) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/111, 0x6f) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000180)=0x6) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x3, 0x0, 0x83, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}) r3 = syz_open_pts(r0, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) 03:33:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b13f8aabc1e7eeb3f53c95c5477c7ebdc2a4054e40c613b8fe8599d4b2fb53f8a8fabf3519d833339d60409843049fafe14da31feda0") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:58 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = socket$packet(0x11, 0x808000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xffffffffffffffff}, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400009) sysinfo(&(0x7f00000001c0)=""/72) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x9, 0x400, 0x2, 0xf5, 0x1ff, 0x1000, 0x9, 0x10001, 0x3f, 0x4}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) 03:33:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe008, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="664239cb168457d37e3ac1a210599f620492b29ca4a4daee6a6df18b8569d5ea2041fd80f7f64ad6077f9e4c1590dc7671ed7662516267518fcd51b2d90360cf31121f0e832fcace1641208018", @ANYRESOCT, @ANYPTR64, @ANYRES16=0x0, @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRESHEX, @ANYPTR]], @ANYBLOB="85fcc751fada6c7699b0f33ed11cda", @ANYRES16]) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/create\x00', 0x2, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:33:59 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x10) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:33:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0x100000001, 0x6bc27b21, 0x9, 0x5, 0x5}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b13f8aabc1e7eeb3f53c95c5477c7ebdc2a4054e40c613b8fe8599d4b2fb53f8a8fabf3519d833339d60409843049fafe14da31feda0") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:59 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x17fffc) r6 = dup3(r5, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) timer_settime(r4, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) [ 303.206190] attempt to access beyond end of device [ 303.211336] loop1: rw=536870912, want=114, limit=112 [ 303.242912] ALSA: seq fatal error: cannot create timer (-19) [ 303.262454] buffer_io_error: 54 callbacks suppressed [ 303.262461] Buffer I/O error on dev loop1, logical block 113, lost async page write [ 303.295718] attempt to access beyond end of device [ 303.300782] loop1: rw=536870912, want=115, limit=112 03:33:59 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="b13f8aabc1e7eeb3f53c95c5477c7ebdc2a4054e40c613b8fe8599d4b2fb53f8a8fabf3519d833339d60409843049fafe14da31feda0") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:33:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000300)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=[{0x10, 0x0, 0x2}], 0x10}}], 0x2, 0x0) socket$inet6(0xa, 0x2, 0x100) 03:33:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x280000, 0x0) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000080)=0xfff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 303.315697] Buffer I/O error on dev loop1, logical block 114, lost async page write [ 303.327815] attempt to access beyond end of device [ 303.332755] loop1: rw=536870912, want=116, limit=112 [ 303.340728] Buffer I/O error on dev loop1, logical block 115, lost async page write [ 303.351938] attempt to access beyond end of device [ 303.359292] loop1: rw=536870912, want=117, limit=112 03:33:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:59 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) delete_module(&(0x7f0000000000)='./cgroup\x00', 0x200) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RSETATTR(r1, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r2, 0x508, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x11}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x110}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) fallocate(r0, 0x4000, 0x0, 0x81) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3f, 0x200) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f00000001c0)=""/44) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)=0x0) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000100)=r5) 03:33:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x80000000000007) sendto$inet6(r0, &(0x7f00000001c0)="6fc39a393b3573aada82d01f0d24bb0c9e5ffc3e94522479bf1d329fa8e497f355a65a7ee7ada60c96f59ad91d4d1c124db008c2a79173d6c95455cb5c9b1b2b82e99f008acdb28dca4b1a3ccece062ab980d27e4a487e59c1eab8ff90bee4064f93d822e593d8fbe9faea21e3f6027de15697b53e48572b587807c06c4577f692ce74fd282d16c8869926ad85c1ee037e830508fb339838553c182720d8056d71e36ea265a9e3b455b9dd6a0286d4561cfa19965119ee7353345502119025abde90306fb07fc03ea70e53d0b905722d411324e44d5e049ecc9ba6782b884b40052ef13ba7372ebd53987a104bd0efa59bb1d882482f368852430ff3d45a11136207ac368c1dd904635dbeff501dcf7dc78da04a51fa02b1efcd9f62a42d2dfe4b60f48fb84aab47ba36a91c7c4b8794e661cca2a9deb33bd92ab12e33c4597314a773000000000000000000000000000000000000000000", 0x158, 0x0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x15}, 0x80000001}, 0x1c) [ 303.364514] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 303.372725] attempt to access beyond end of device [ 303.378196] loop1: rw=536870912, want=130, limit=112 [ 303.383436] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 303.397373] attempt to access beyond end of device [ 303.402336] loop1: rw=536870912, want=131, limit=112 [ 303.408176] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 303.416204] attempt to access beyond end of device [ 303.421453] loop1: rw=536870912, want=132, limit=112 [ 303.426895] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 303.434858] attempt to access beyond end of device [ 303.439883] loop1: rw=536870912, want=133, limit=112 [ 303.445052] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 303.453999] attempt to access beyond end of device [ 303.458977] loop1: rw=536870912, want=2174, limit=112 03:33:59 executing program 3: add_key(&(0x7f0000002500)='e\x00', &(0x7f0000002540), &(0x7f0000002580), 0x0, 0xfffffffffffffffe) recvmsg(0xffffffffffffffff, &(0x7f0000003580)={&(0x7f0000000200)=@can, 0x80, &(0x7f0000003480)=[{&(0x7f0000000280)=""/73, 0x49}, {&(0x7f0000001400)=""/112, 0x70}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=""/71, 0x47}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0), 0x4) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20504}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x2000)=nil, 0x2000, 0x0, 0x4011, r0, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xfffffc47) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0xcd) getpid() ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) seccomp(0x1, 0x1, &(0x7f0000000140)={0x2, &(0x7f0000000040)=[{0x0, 0x5, 0xa02, 0x100000000}, {0xfff7, 0x3, 0x670, 0x5}]}) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) recvmsg(0xffffffffffffffff, &(0x7f0000003b40)={&(0x7f0000002900)=@xdp, 0x80, &(0x7f0000003a00), 0x0, &(0x7f0000003a80)=""/155, 0x9b}, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x200) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000003c80)={0x0, {{0x2, 0x0, @local}}}, 0x88) 03:33:59 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, &(0x7f0000000300)) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000140)={@loopback}, &(0x7f0000000280)=0x14) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) r3 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r3, 0x4, 0x1) fsync(r2) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0x5, 0x3, 0xff, 0x4, 0x80000001, 0x1, 0x7dbb}, &(0x7f0000000240)=0x20) 03:33:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x1c5000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000700)={0x8, 0x800, 0x10000}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x2, 0x2) openat(r2, &(0x7f0000000740)='./file0\x00', 0x2, 0x0) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xfffffffffffffffc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4000, 0x0) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000780)={0x0, 0x1, 0x200}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000140)=0xfdb0) write$P9_RWRITE(r3, &(0x7f0000000180)={0xb, 0x77, 0x2, 0x101}, 0xb) writev(r2, &(0x7f0000000680)=[{&(0x7f00000000c0)="cbdd8ea25ea76ec6c27796ea63e0dee343c82c01ef6e8451938b4f96e98802ff8550abcb7c35b78bf024fba5c566840c5aed969927b5c2418b70976b8321e1b7e35e0a21725a04032f4abb474bf27b04", 0x50}, {&(0x7f00000002c0)="57deba471557235a3435bcdf7a6e8289499b925859abb3301cad8ce13c387283512c95b09cda4beaf95b40c43db3d3e876ca261984292e9d26f6a29ea53064b98c20a91ac292c079b7e56d4443f7310cd8f92295797c3ef8b93ca14abfe7781ca666fec50713ec4d73b3f0b920b525f5e3cb90c64beb01e083d2c7d46b5948f574577fba41c3660d5a277faa8b21fd5023ffb9a273dff5f0d6541d2948c1b80780a7762e11eb14cd", 0xa8}, {&(0x7f0000000380)="d040e25aece6092648922dd986979605e1d1717ca0e21b43d549c7ee65b0bbdcc9c1a4e01e742d10bb93762371de738e50fab83163f5f056c37d151995eeded979f167af12a183910f7b6d1160d5439ad7b0b23ba4dcd96a13f96e09d50b10e62fad979dd5f3d80e5e8fa7cb25f17f9c73eca3b25649de87474d6bf8504319b2fbe7fc9f2349c2183be10077ac6ff29d7f35039670b494bd152cc43610c3edc57afe0b8e53289ba00162dedc2eb231f7b0f97a2821dffed018ec30c9", 0xbc}, {&(0x7f0000000240)="ee4586225377670ddb2e2481a46547bb2361d15cdd5c1b816c76dc717dda55483a8c13ab", 0x24}, {&(0x7f0000000440)="76de4795df12525e67fc8e0192f18d04bed775568e5fd314acf21216eb845941d6c65e2eb64739da555458a75ac1241070a76715df5ef4b81013afe002c35dd400e0adc4844f634313fff3533166cf687ed9aa6b5a272400409ee14583e1ed00561ba1da3632cfc6a43e8dfbaa148fc54b11f29a4cb90f33ff2071cd8fc5007d18337e371182bf31816bf573c70e91db6501f4c87ce3e03a577488692475ec290201155bbcffd95b1c4be8de197ff3568cb9e3e9cefd238ce843db75bf61ece7f57ad506181930f380cb0b", 0xcb}, {&(0x7f0000000540)="f6027437ab0755e716b9013663e7eed72a68fcb26a7b91287198e4fab1d27b27c35bc5fbb93a71dfc15bf050411663260e10b144924b9390609aab787b3fdc2ab8dc7e8402fff1afa2a513d81fe1fb46d5e9bf1196d198eb08db120c662eb361aa6cd25d7c2d5cf4be5a2627c80749617a7749065473f8db2a4af69993e677b46e1ca5ca75382c7ec512ca506d2772fdbd87cdb8a1d9640ecd071af117f2ff6fcba2a507d7c21708481ee393dbfa5d3b8c6f7bab54373a", 0xb7}, {&(0x7f0000000600)="9396ca9625539f0042a15f33765481d97024e23c47bf346beeb0509312b05bf3065219ca03d863dda64f1ff258d8d9d2196f4afa2461cf812f06f80f4af2643b0e84612bdeb226719d91c3cee5e9ff872305ff90b23ae64f93d86710ba65e58ee2def3b6005ada7adcbe4690f1c3df946ae8271363cd6323627e", 0x7a}], 0x7) setsockopt$packet_int(r3, 0x107, 0x1f, &(0x7f00000007c0)=0x2, 0x4) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pktcdvd/control\x00', 0x48000, 0x0) 03:33:59 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x17fffc) r5 = dup3(r4, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) [ 303.649925] FAT-fs (loop1): Unrecognized mount option "1844674407370955161501777777777777777777777fB9Ë„WÓ~:Á¢YŸb’²œ¤¤Úîjmñ‹…iÕê Aý€÷öJÖžLÜvqívbQbgQÍQ²Ù`Ï1ƒ/ÊÎA €01777777777777777777777" or missing value 03:33:59 executing program 0: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) setpriority(0x0, 0x0, 0x100000000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000001c0)) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000380), 0xe3}], 0x1, 0x0) poll(&(0x7f0000000500)=[{r2, 0x20}, {r1, 0x2}, {0xffffffffffffffff, 0x20}, {r4}], 0x4, 0x8001) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x6) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000280)) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000004c0)) [ 303.650374] ALSA: seq fatal error: cannot create timer (-19) [ 303.738353] FAT-fs (loop1): Unrecognized mount option "1844674407370955161501777777777777777777777fB9Ë„WÓ~:Á¢YŸb’²œ¤¤Úîjmñ‹…iÕê Aý€÷öJÖžLÜvqívbQbgQÍQ²Ù`Ï1ƒ/ÊÎA €01777777777777777777777" or missing value 03:33:59 executing program 1: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x2) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) writev(r0, &(0x7f0000000200)=[{&(0x7f0000001480)="6403c4e9b21f1518dcd758a1df01016450948edb3bbf3200717f98c14d79ae449d618d2b2eeaab3b4fdc6018b9e8ee9350d3320c99af035501e5c17e2a1750725099b42c45facba2a78d9b6510", 0x4d}], 0x1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8) quotactl(0x9, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000440)="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") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) mkdir(&(0x7f0000001440)='./file0\x00', 0x81) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x800000100007) 03:33:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[], 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:33:59 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = accept4(r0, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x6, 0x80000000) fchmod(r2, 0x90) 03:33:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/169, 0xa9}], 0x1, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/39, 0x27}], 0x1) 03:33:59 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000040)={0xffffffffffffff00, 0x2}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) 03:33:59 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000180)={'sit0\x00', {0x2, 0x0, @dev}}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f00000005c0)='team\x00') mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={[], [], @remote}, @in6=@ipv4={[], [], @local}}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, &(0x7f0000000500)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000800)={@dev, @multicast2}, &(0x7f0000000840)=0xc) dup(0xffffffffffffffff) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000440)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r1) mount$9p_virtio(&(0x7f0000000200)='team\x00', &(0x7f00000002c0)='./file0//ile0\x00', &(0x7f0000000340)='9p\x00', 0x8000, &(0x7f0000000600)=ANY=[@ANYBLOB="7472616e733d76697274696f00000100000000003d39703230303f000000000000006163636573733d636c69656edd74821a9a13720f08612744f522cf6e29e15bf2303a6e68792af7fa67c4c0a6ed4a6a643e7fde68b3a2a70b6e27bbd96febf8a5540f448e4c513198b1fde0173e164b3388754605f728417245f474"]) mkdir(&(0x7f00000004c0)='./file0//ile0\x00', 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) 03:33:59 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) membarrier(0x6b, 0x0) r1 = timerfd_create(0x0, 0x800) fchdir(r1) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:00 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x17fffc) dup3(r4, r1, 0x80000) 03:34:00 executing program 5: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x17fffc) r5 = dup3(r4, r1, 0x80000) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000140)={0x8000000000007, 0x19, 0x0, 0x0, "c0bb8f112c48ab20a3e76d0e7be59c7baca6ad4021f84ca6d662c3ae763f780c"}) [ 304.089137] ALSA: seq fatal error: cannot create timer (-19) 03:34:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 304.179096] blk_update_request: 222 callbacks suppressed [ 304.179121] blk_update_request: I/O error, dev loop0, sector 0 [ 304.191458] Buffer I/O error on dev loop0, logical block 0, lost async page write [ 304.199383] blk_update_request: I/O error, dev loop0, sector 8 [ 304.205493] Buffer I/O error on dev loop0, logical block 1, lost async page write [ 304.213422] blk_update_request: I/O error, dev loop0, sector 16 [ 304.219773] blk_update_request: I/O error, dev loop0, sector 24 03:34:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) r3 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002480)={{{@in=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000002580)=0xe8) r5 = getegid() sendmmsg$unix(r1, &(0x7f00000026c0)=[{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000340)="7a294b3abd56a8e1919ff6c08fe19c94ed1255dd4662015ef7f617bf0926abc468c8278c8c271744311b57eeb6263572c4135cc464c825ff99c0fcb09cb863d89c34aa10eeb1bcda6deb8976027106001042ce28c44aa450d5b80f5346e2ddab0b4cc3b664ec9d88f190451467", 0x6d}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000100)="a979b867238299214300182574144e01bd7cea105b56be8d6d21986705504417337a3f61d956dd987cefb94004147a56", 0x30}, {&(0x7f0000000240)="86f8129c796e9421ea25ab5a0b7c6caf61be57a9bd9743eee3c987f7a463115afa0576f33898ce", 0x27}, {&(0x7f00000013c0)="da54badbc0dc44c75556f5693290758ae229c16b623971f38a11247cc5ccc1a2651b1f67414fbc7c099a5f403faafa48d7d667d8df96891492fdf3501a5299f9692644accb6c35671a60b86c002f0951b1c65048c7fa08f6ced65a7be72aa3e615c7ec9996fb1c4f6f15de787900f3425a7aa7f877bbbdaada57112726778a69a87ee6bda2f099451a6b0dd38644199347ce1d5aad276a0c06aaca71d36ccae0f6b279d8e44fff5c2d2f6aa9b82cc70512b18db1648b23a031fc112b702e6acfe3c1690741bce0a1be20380c858b4192f2044b6f54eec2b1c48f20bb52fb8b99996f864483c0198bc072f533ffe28dc023d98f20bd80e08d0e8f1fb0fbf56c259ed133061330b3177f66c88a25c0ad43f73808ca14b82dd5f4d6bd5e9c34eb8b67756b01ed7806b72b869205a849f04eadab80f1df8e4280d5187bb3d4a5261e5cae2827228fa94d96e73b585ddfa908a0111276d9426baf323daff66a929a35e3e21b89826789b3b1b74fdcd1d52d53847e5381fd0011a2e593534bc0fc336ee8581304d473b32597ec098878b3f21dd94e405d23567120fc1aa901cdf5ab451908a0dd98c6d4919ea6de20056b4d4befa96c6900197c7920160e4e4f6fbe581d5e75f5fa268f61dd6e2f8bec83fb797287c29152eba79511b8eb397f2951d11235f645af88aa9c2b81913e1729dd4de7f96085780a5634e5d7fd8f0a6b2d029a1406bfc9363848b1912841f3fc0e929ab21f35c4901bc372d62456f847581449477c20fd8ff78eae4bb355da8bee2b907befc1f314ffffc9c800019ac93316f907b7fc5d8fef01d87fd513f7c389f0a653528c387d89afc48a1fd3263912835c5aedd3521e09c00628a7e286df1c7c5ea54e7dc2f35b14c5d63414a99277936ea3e695d1ba7d1a3d44d392f6bb440b444f31f29b5e8845238b3d23db11ac5b431efa0cca59bd8b81b586a930d7475d0b6a5068d7a1bda368f922c64ba8516313dc4203641c69eb8efe8e874f42b119d3c556ecb1b7d069b9ee95550377eca4f858456481ec30c2001e8b717e99bc989f3090a46d1a95b047f5f264aae20ad40061d244d5776684634f80b5bcd1703fb428c66a4becd76a44c2bc98705ecbf25304b961f1a531dae4aae2aae23ad94a1994b7d10fc041bb1dce0705516624879a17bf73810d9fc071bffc00e3288a57ef8927757c3e1cfe90f82fd10964e927c1da5a65bceb9509158c154594d37d09bc6524028b7ff3fe96c4864317726b83f2c9a63bf6c8ab869b58dcdc5d9ae1243eee94c624133b5233b8f8a8381cdaa0b96c76548144ab1f2c5ee39a0384194c6d5694d34e3509efc931abf03bca0c2b4027f3d3cf61546f5bb7d5f39b79fcd5e2665d400475be4e7ee24a4e8382b09a72e6ca2b6064dd6855c2770d09f594c6f238b668baf20c2ddca91f596729ded6a1400e286b41ac33572616f8cff82dfa7e6dcbd25e51f0879a719ecf247b2a8e9e291ec191da4eb4d9734ea91c6bd83d7915950c4c993a4392cfe462d3330bec8010da675aba5d6c3caf0d1e2f2fb30c81fb9c387ed84184976e4f066b112b256cf549f0abb586ce8fb93923ce18f683dae10f1ef6d8af07df3ae20e8cece8c65139862291820ea2494a1a61ce059dfcffe28a9a4ff5c7754e9b5977a691b0db2cf6ebf255131513d109ccef6bc20c81f40bf8afd10bf36faa4c320ad3150876a75a29e6f157f50f18701332d058476ad08ea4b5c72a7519468fcb7f86120c6b78c8fc2ffa8190fb925275400ac88df4eaa4d9658ae9aa00f492e6521fb650d8e4ec4580c2777e8ee263534f31af87e940f1a9e5c929e5142c79ec61a1215c40d6c07030eec73c7f8628f9ed12d695fd53f416cf79624307a36fc95121090fd096bf7916f87d5c3b621e4162fb90ccab1d10b54782ef6aa4612f14b8003a03b46d544072b0e55ca4d418240cd8dc51e04e326094dd8320ca904c52a982990a4a87934201c428b293b2c2e4c4486637025a090a96e2d23e2c7050506bc7f38d3813be560ca7efb639344a9c3ca031e89f64546b68307211a50b01dad55354e9ce5b4e71b59b661509fcbf91c6dd501fc4dccc5cb466e4568cd49eb32aa43bdb393377c99b7d72b11071236c291967364b5a0d8f204335d3c3b48bfaae5ce469466161f85baa3508d65fd82ce9d63903bd2e79bf93b5cb6747bf8d538e1a3ddbc71033c478471e9840cb026d87da9ef63ea7340075a5ad16bb62d0777d6fc27008e41d20763456ca99c91b7dd246b5d002094c27330905aa39e58178a98cda666deb2b3920892e23c2ca7728e4b02e35812138269ec3a06df71673e84988026aef0a6cf4f26f2b38f93edff66f155ad7845f1ca08f9bfe6b44639725b8f85453b713347064503f3e7adb7e6f7f9b7bff0f33b0f7d4e4e9744da78451074ecc575495ad45171db640a15f4524a8ed4ad8c3af6b6d678d4a6ef443dfcd1eb3c61670fd63efee377586a0d6ef0082304237db1cbe12199145e7ffacca9a13bac942634145ffe4345849a5cd817a667069665e515a10ca669ea5b32392e200fedfb0aa185760b0ebabdb7fb8d2bf23e662a8ab56b5e88ca3bd38ded09781f399e7096f07a464fbf636a9a90dd7108145fdb75bacbd83aa60de57be2bb06d9c89968db5ee4ecce9ab88948c9c38d1a95913c3a75f941103496e42503bb7d9c9050d6f0c42926815660020f31f0f60fa1f1e00bee3213c6d54b332db6808301778252a6d43d933990cf73acd63a4f92048c5ff70c8c87cf254bbe4a0aaf0366fba9e306c637422a7ba418d4865cc9029e49faca687f642229a3e81d0eeb2eea642f8945f57f26c31903fdd21b728a41684eac8717908fad1c175a1f7f1265bc875bd7a4a9972caba08477e1c4a48073b44a269a7b7adad305646fe55a6a756cebb5938c1adc310ab317ca7a272b459c0511ea38c77740cc7954137af1e6cfd645fc29cdc23205066fe54cda9013cc09b5ad032637d96c5a731cafa5e3408856d66af4418bca5182de069b4b797589944d68c54bc2eade182b512cf531af0c7ece734dbd4da240d5822e2af0e52a93eb467fc4b174143070ec37cbb82c3978cd0bc9026e4dc049870c41e4cfcf6e5db77cd492733ba6b0d3d9eb7311f4fdc4e85faaf32eb9b01e90520777eaf18d2d4e79ef02051a48a12e6472738a4bc4d15192b4f8eb7127be8b24dd337c0b0e5210300197cf37cf7820730fc8441b8dce09c6ad7a2dba6ea6d4b11fff07d7560a6f64375cdaefb9047afa37c9426a19b5056079cf7ff55fcc4cbe796e85d9aca504418931de82d1a2a9df59f71ea8140d30d87688fa1f06663443c1be10d9f1eee2da6969db89a3539e1ace6547a749c4f7a659d3374a97c7af9ff7b70c7dfaf6ff5d7cd0d9573cc707fcb851cd84a7958982386366c148f5ecc2d90928826d914ad4e90e03189c3b0b1155ac17fa5d49cd89b716c52bba53efe456d25c959d419d2cd74ebd3a160aef84f1bdd78ac6482640d5bfe15828755b8c53243cd582185a799be56917fac05337463c7ba66f19bd9f40dfc62e30da079e7681a58b41c4835372b0d72d84fe83c6580aea0c8e1fd9a282b87c0cdaf918eff6bc9e8e5b1fd28616a486aa422dcc106f6a09b6dacd0619473e131221d3702f031c5faf332c535f5b4427ff5971e5f096867d6108971923dacf374da994cbbddd3c12813265758f750d908a9ea3824badd13d233fae664eb21e1372a65f041292b039fc37cd7941dcf44ea2156add13ffdd0166f367d2a4f108eba598378a1fb73288f8ca43aa9b6c713aee12056f30e643fb0f4233d7370ea6c0351da2aae06e303c3bc6670f7a9ced4e9e8804c70c83fcb59d1df428082118ca879ba8e8e6103d374d046a858f062172cc363090acb94865dbe1f0d6ddb749230b58d05271523711a63a5a503d640243ea5eb1b63f5a3ebdeef40ec04c55e10ea7670c0ac5bb27da586a358cbe34f5f412bdaed3045308a19c43437f8d79455e36c8d28fd3985a6b86d42936e51b5c586bc35047f2929d58148084bf084846b55fbdd4a6c32402817bb318c71abb9a0706c5ca17db762147904f3c2c130992c80f317364a24aa5b8833d9f02ad9b8cfdcc8721493bebd51a43b14d2df3115ce99e7e6229467275b6be1bf7a95be6cf8bbd584216e406d5ea9d060b1c111456803154465920ff072decfe350e40a0ea207398abcd6955a5d785f0ce0d594dd427e66637a4beb3807aa0840d41a4d8fa70074e93a5a147ddb1eee29deccdf27ce2bbc2130379a5e1dac37d2cc5cfdbca61cf4663e1a81d7a317efff7e41744293e0e3e4e960d01b6c45b30813ba78b131b14a24690fc8382a2a0a08076626e165e1c88093b26289fde33b49dbd0b62d26d59071c19c61013f0caa091b887c4e18a9935caeebe84482899e903d831c92f644a5e31aafede1e1f1f8b9ccb59d327a6d20fdeba0e8814afa2b021b242c7804d0a3d0d83d41c445c835033a859ebbeaf2fa007405c484b844d60049c8937394c43105452bfdcffe6bf45252b842b2e1d355223ffe41029571cf27b8a911eb4e12ee4d691f7022c2a6d9b5473b05ec45cd6c29cce50198fa21f537a0fea4d9c864d51334b948bc4f76e1866b242adb4a0083ed8a36cd3c0d68c229d39593f2d5af4c12153f9cda0f11d075463d466abff7f71e1544fd859a607d5ff7270f492b7c612f55b2a09b753e24f68895cb0559ab6cd8b3ca139cadfb70b361f7c83e0e2845d28b5f47e9e7bc0248b7b745495edc629599d6c0d21ba2b2500cf2c8a08cbd94afc0a48ed32371ca8b9503e12c7d6db5659075626a8767945184b005fc74a5480d2d31d0739a0e2e63faf3b9815b705ecbce12c2e77db30bc8718c3a6341a628fe809e2f9a06004d22f0ce4cffc98fa27c71786c26e7ba9d81c4fe72e2224e2ff69ff661567c9a6492e9e8433d6b422925988dcaccabf57fc9e021f4d5c90e3f80bd8ba3533d3535c816d1137373af4af7a89ce1a32730365c1c2a9022972084a45bcba32be6ddc973eae4dafcf6eaf3b1a5242f0eb9def42059514be971f982b3f5aa9f5bfefa6c5e348c0552c791dfdb7b41eba8467e7ff910d5247305ce94a632c748efba9c244f7f401e966aca49760925bd64961f8fcfa4b573eb665342a1af1aad64ea0ba2319181345c806fa27e1090bffa18d77add450eb413dec7921e7459ae8c95916f9bb7aa916add3c26dbbf90bbce56d5580a33b120e056ebe21f672f1301f428bc2751edda520cd503d6e969e2b124a4918ba50d6142436e73bc2b5f594d17e07369366131ec50424c1b968877ab50a79c80b71561470e0e120262d9521095e0f9ba4f7edddfc7c40fb485820f5b9813357e90aa45a837a5b49023a66cdf0f1b8388145edd72f5ed42c3a39dcd389db604811cfcd0290ee5385cd11647f2b492943c5c5f3e91b6dd224f98f6439a7cf3310d5dd966cdb69da51494c4fd3a1f2804eb1d3bb16f7488bb1fdd000355587dc5f7e41332f445b7dd5fb5a500cc756694d50ceb1f33e35d7157e6ad9f48c4686a9958a1ca60d8e19ff730b12c34383dcd037211130ebe4ba045e988f65b880644d1937fe9a093230eb23a067aa28a591e0fc278fb7fbcb9807bf628022fa3a678c8191a8e6710a185c37b773c0623ef2f268e863adeb0f8d304318dcae0b5ac31f7193c5ea592984f7a4c67fc12b97f0a96737196bdb86cdae01424c0d0c3a0a96b4789e21e85efc28f52b41c155ce535264ddca90e37d9", 0x1000}, {&(0x7f00000023c0)="0890cd539aac9c47868641ffc025e3e2ba04f349d30148ed6a5f3a3c6b380ad0ea9be2f2e834", 0x26}], 0x6, &(0x7f00000025c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r2]}, @rights={0x20, 0x1, 0x1, [r0, r2, r2]}, @rights={0x38, 0x1, 0x1, [r0, r0, r1, r1, r1, r2, r2, r0, r2, r2]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r1, r1]}, @rights={0x20, 0x1, 0x1, [r0, r2, r1]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}], 0xe0, 0x40000}], 0x1, 0x8001) 03:34:00 executing program 4: socket$inet6(0xa, 0x100000003, 0x80000000000006) 03:34:00 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000500)='cgroup.type\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) getegid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) r3 = getuid() fchown(r2, r3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x200, 0x4) socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) r4 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000005c0)={@loopback, 0xe, r5}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8102, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="000b2abd7000fedbdf2507000000180001000c0006006c626c6300000000080006006c63000008000500060000001c0001000800080004000000080004004e200000080002003b000000a7afcad0ed8873347e6fe794f1a7cac213d5bd2da61e570ac6af99598fef430db60ee826def1cb0f5bba1ba8fd71d8c6969710bd7a28883a9d6455eb32f64c9b21faa30efec3969f14d4de15eb64990a3814cea4b8289335"], 0x1}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x24000000, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) connect(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0x2, @mcast1, 0x20000000}}}, 0x80) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[]) [ 304.226051] blk_update_request: I/O error, dev loop0, sector 32 [ 304.232279] blk_update_request: I/O error, dev loop0, sector 40 [ 304.238552] blk_update_request: I/O error, dev loop0, sector 48 [ 304.244873] blk_update_request: I/O error, dev loop0, sector 56 [ 304.251130] blk_update_request: I/O error, dev loop0, sector 64 [ 304.257390] blk_update_request: I/O error, dev loop0, sector 72 03:34:00 executing program 0: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) setpriority(0x0, 0x0, 0x100000000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000001c0)) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000380), 0xe3}], 0x1, 0x0) poll(&(0x7f0000000500)=[{r2, 0x20}, {r1, 0x2}, {0xffffffffffffffff, 0x20}, {r4}], 0x4, 0x8001) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x6) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000280)) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000004c0)) 03:34:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:00 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) socket$inet6(0xa, 0x80006, 0x7) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x8, 0x7fff, 0x2}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3f) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:34:00 executing program 5: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/checkreqprot\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000fa4000)) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) bind$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000140)) r3 = syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x0, 0x82) r4 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000380)) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81806) setpriority(0x0, 0x0, 0x100000000) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000001c0)) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000380), 0xe3}], 0x1, 0x0) poll(&(0x7f0000000500)=[{r2, 0x20}, {r1, 0x2}, {0xffffffffffffffff, 0x20}, {r4}], 0x4, 0x8001) sendfile(r3, r3, &(0x7f0000000000), 0x2000005) ioctl$LOOP_CLR_FD(r3, 0x4c01) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(r3, 0x4c00, r5) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f00000000c0)=0x6) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000280)) ioctl$TIOCGETD(r0, 0x5424, &(0x7f00000004c0)) 03:34:00 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x17fffc) dup3(r4, r1, 0x80000) [ 304.533440] ALSA: seq fatal error: cannot create timer (-19) [ 304.566644] ALSA: seq fatal error: cannot create timer (-19) 03:34:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000001c0)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 304.757416] attempt to access beyond end of device [ 304.768079] loop1: rw=536870912, want=114, limit=112 [ 304.788032] attempt to access beyond end of device 03:34:00 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x17fffc) dup3(r4, r1, 0x80000) 03:34:00 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0xfffffffffffffff8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x800, 0x0) [ 304.803167] loop1: rw=536870912, want=115, limit=112 [ 304.822472] attempt to access beyond end of device 03:34:00 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$KDENABIO(r1, 0x4b36) [ 304.855465] loop1: rw=536870912, want=116, limit=112 [ 304.869294] attempt to access beyond end of device [ 304.875473] loop1: rw=536870912, want=117, limit=112 [ 304.881745] attempt to access beyond end of device [ 304.886972] loop1: rw=536870912, want=130, limit=112 [ 304.893296] attempt to access beyond end of device [ 304.904197] loop1: rw=536870912, want=131, limit=112 [ 304.915660] attempt to access beyond end of device [ 304.923328] loop1: rw=536870912, want=132, limit=112 [ 304.930651] attempt to access beyond end of device [ 304.938380] loop1: rw=536870912, want=133, limit=112 [ 304.955701] attempt to access beyond end of device [ 304.963377] loop1: rw=536870912, want=2174, limit=112 03:34:01 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x17fffc) [ 304.996107] ALSA: seq fatal error: cannot create timer (-19) 03:34:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000007"], 0x5) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20000, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'veth1_to_bridge\x00', &(0x7f0000000080)=@ethtool_dump={0x7e, 0x80000000, 0x0, 0xdf, "ef9ef547a829b5844743b6128f95135b19faeb826c3808d369991d044165de8024c50627df85d7daf7dbb089db608efe6b4c42e9b6c28e477c8b3555f47478c6b046af74e35c378b81fa2ff2de3983574839b9aa06b03ad0758e57eae4425f4b0042112beac6f18e43abc57aa4a0eaa1925a5b4a956718db23a6297516fee6749f4784579f578a16f8cec626b2c2d27947e42f754b6006ad18f7f177bb07ca23ef1b93a8e98cc07d485fd5624bdaa63617f99dc3191cfd5591f8c4fe043965bff844e2b4b41bf13d9543fe4a5ce235396deb6108717030d93db9a4b1758b59"}}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) write$binfmt_elf64(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0xa7, 0x21, 0x0, 0x5, 0x2, 0x2, 0x3, 0x3, 0x153, 0x40, 0x3ad, 0xfffffffff33cae27, 0x6, 0x38, 0x2, 0x3, 0x8, 0x800}, [{0x7, 0xfffffffffffffe00, 0x7, 0xec, 0x101, 0x6, 0x0, 0x7ff}], "4d4ad3db76c6e470a0f4ee1a3bb78f88f09a6af599c2f937b9684a3c3f35e4cf96aaa333960b4541e418cb3790f22a9533a19fb8ba3a76c0b5af6cf14c488c35acd18c0e625f0d39df9be55ee2fa7f525cf6e5d42dd7d5d6298b2c99a835315be5daf1cf4f25d6113e0a39a4c926986dbbc84fea3a9688cfdde39be1b7b438e537277b8cec0c342a4f18e304575483", [[], []]}, 0x307) 03:34:01 executing program 4: getsockname(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000140)=0x80) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e22, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1e}}, 0x2ac0411a}, {0xa, 0x4e20, 0x1ff, @empty, 0x1f}, 0x9, [0x2, 0x8d, 0x2, 0x3, 0xa72, 0x1, 0x1, 0xa11]}, 0xffffffcc) r1 = getpid() r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000300)=""/194) get_robust_list(r1, &(0x7f00000000c0)=&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)}}, &(0x7f0000000100)=0x18) r3 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r3, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 305.246771] ALSA: seq fatal error: cannot create timer (-19) [ 305.428830] ALSA: seq fatal error: cannot create timer (-19) 03:34:01 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000500)='cgroup.type\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) getegid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) r3 = getuid() fchown(r2, r3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x200, 0x4) socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) r4 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000005c0)={@loopback, 0xe, r5}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8102, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="000b2abd7000fedbdf2507000000180001000c0006006c626c6300000000080006006c63000008000500060000001c0001000800080004000000080004004e200000080002003b000000a7afcad0ed8873347e6fe794f1a7cac213d5bd2da61e570ac6af99598fef430db60ee826def1cb0f5bba1ba8fd71d8c6969710bd7a28883a9d6455eb32f64c9b21faa30efec3969f14d4de15eb64990a3814cea4b8289335"], 0x1}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x24000000, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) connect(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0x2, @mcast1, 0x20000000}}}, 0x80) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[]) 03:34:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000380)='\x00', 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) pipe(&(0x7f0000000280)) r2 = open(&(0x7f0000000100)='./file0\x00', 0x80, 0x14) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x4) r3 = fcntl$dupfd(r2, 0x406, r1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000001c0)=[{0x3, 0xffff}, {0x0, 0x150e0}, {0xb, 0x7fff}, {0x3, 0x80000001}, {0x7, 0xffffffff}], 0x5) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000200)) fallocate(r1, 0x10, 0x1, 0x4) 03:34:01 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x17fffc) dup3(r4, r1, 0x80000) 03:34:01 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) 03:34:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000007"], 0x5) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:01 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:01 executing program 4: r0 = socket$inet6(0xa, 0x8000a, 0xfffd) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), 0x4) sendto$inet6(r0, &(0x7f0000000080)="9e6ac95ecde7213e6533bac632322ee08abd3c01d1627f31283d90987be92094e5dbbf8e23631e4cce138d8fd906885b95059fa28e2d4d7c8940d5d63d11e5371319a1f87c89eb4bb7b3cf3c862848", 0x4f, 0x40, &(0x7f0000000180)={0xa, 0x0, 0xfffffffffffffffd, @local}, 0x1c) 03:34:01 executing program 6: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 03:34:01 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r0 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000500)='cgroup.type\x00', 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r0, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) getegid() lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)) r3 = getuid() fchown(r2, r3, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x200, 0x4) socket$inet6(0xa, 0x1000000000002, 0xfffffffffffffffd) r4 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000005c0)={@loopback, 0xe, r5}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x8102, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000440)={&(0x7f0000000200), 0xc, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="000b2abd7000fedbdf2507000000180001000c0006006c626c6300000000080006006c63000008000500060000001c0001000800080004000000080004004e200000080002003b000000a7afcad0ed8873347e6fe794f1a7cac213d5bd2da61e570ac6af99598fef430db60ee826def1cb0f5bba1ba8fd71d8c6969710bd7a28883a9d6455eb32f64c9b21faa30efec3969f14d4de15eb64990a3814cea4b8289335"], 0x1}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x24000000, &(0x7f0000000680), &(0x7f0000000800), &(0x7f0000000640), &(0x7f00000003c0)) connect(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x1, {0xa, 0x4e24, 0x2, @mcast1, 0x20000000}}}, 0x80) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000400)=ANY=[]) 03:34:01 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setpriority(0x0, 0x0, 0x2) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x2, 0xfffffffffffffff9}) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) ptrace$poke(0x4, r2, &(0x7f00000000c0), 0x800) 03:34:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000007"], 0x5) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:01 executing program 1: pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00') syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000240)=0x5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 305.708580] ALSA: seq fatal error: cannot create timer (-19) 03:34:01 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) [ 305.789122] ALSA: seq fatal error: cannot create timer (-19) 03:34:01 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = epoll_create1(0x17fffc) dup3(r4, r1, 0x80000) 03:34:01 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x5, 0x40, 0x96, 0x0, 0x9, 0x9}) 03:34:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000070100"], 0x7) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 306.152947] f2fs_msg: 2 callbacks suppressed [ 306.152957] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 306.161634] ALSA: seq fatal error: cannot create timer (-19) [ 306.220442] ALSA: seq fatal error: cannot create timer (-19) [ 306.290962] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 306.321121] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 306.347392] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 306.373432] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 306.402473] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 306.416945] attempt to access beyond end of device [ 306.416953] loop1: rw=536870912, want=114, limit=112 [ 306.416967] attempt to access beyond end of device [ 306.416973] loop1: rw=536870912, want=115, limit=112 [ 306.416994] attempt to access beyond end of device [ 306.417000] loop1: rw=536870912, want=116, limit=112 [ 306.417013] attempt to access beyond end of device [ 306.417017] loop1: rw=536870912, want=117, limit=112 [ 306.417029] attempt to access beyond end of device [ 306.417034] loop1: rw=536870912, want=130, limit=112 [ 306.417045] attempt to access beyond end of device [ 306.417050] loop1: rw=536870912, want=131, limit=112 [ 306.417071] attempt to access beyond end of device [ 306.417077] loop1: rw=536870912, want=132, limit=112 [ 306.417116] attempt to access beyond end of device 03:34:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x5, 0x40, 0x96, 0x0, 0x9, 0x9}) 03:34:02 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x101000, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00000000c0)=[0x6, 0x7f]) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r1, &(0x7f0000000040)="7f5ac361cfe6881f1dc4cd6796055321f7ea5dc99d681d547df11228649e47de278a4ed59299b243", 0x28, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) socketpair$inet6(0xa, 0x1, 0xff, &(0x7f0000000000)) 03:34:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000070100"], 0x7) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:02 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) 03:34:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x8000) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$KDENABIO(r0, 0x4b36) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:34:02 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_create1(0x17fffc) 03:34:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000003c0)=[0x8, 0xe82]) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000240)=0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={r3, 0x0, 0x80000001, 0x5, 0x7fff}) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0x100000000, 0x3, 0x6, 0x1000000000000000, 0x0, 0x6, 0x2, 0x9, 0xefd3, 0x9, 0x1, 0x4, 0x88fc, 0xffffffff, 0xffff, 0x1, 0x1ff, 0x7f, 0x7f, 0x489, 0x48a, 0x584, 0x3, 0x6, 0xa43, 0x478, 0x0, 0x9, 0x2, 0x7, 0x7, 0x2, 0x1155c715, 0x9, 0x800, 0x7, 0x0, 0xff, 0x5, @perf_bp={&(0x7f0000000100), 0x1}, 0x10400, 0x4, 0x101, 0x2, 0x6, 0x9, 0x4}, r4, 0x1, r2, 0x0) [ 306.417121] loop1: rw=536870912, want=133, limit=112 [ 306.418338] attempt to access beyond end of device [ 306.418345] loop1: rw=536870912, want=2174, limit=112 [ 306.631421] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 306.654003] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 03:34:02 executing program 5: r0 = getpgrp(0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x80000, 0x20000000000004) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) tee(0xffffffffffffffff, r3, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140), 0x28616813) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000680)={'ifb0\x00', 0x7}) futex(&(0x7f000000cffc), 0x0, 0x4000000000001, &(0x7f0000000000)={0x77359400}, &(0x7f0000000200), 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x6000, 0x0) flistxattr(r4, &(0x7f0000000580)=""/249, 0xe4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue1\x00'}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xfffffffffffffffa}) 03:34:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000070100"], 0x7) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:02 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x3, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000100)={0x1, 0x5, 0x1}) r2 = dup3(r0, r1, 0x80000) r3 = getpid() write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x4, {{0x8, 0x2, 0x0, r3}}}, 0x28) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000000c0)="a155c39b64d7f0f058ff") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xfffffffffffffffd, 0x100000000, 0xff, 0x0, 0x0, 0x7, 0x20010, 0x2, 0x7, 0x3, 0x8, 0xfffffffffffffffe, 0xae, 0xfffffffffffff885, 0x32d, 0x349e, 0x800, 0x4cf, 0x3, 0x6, 0x0, 0x800, 0x8, 0x80000001, 0x8000ffffffff, 0xeede, 0x96, 0xffffffff80000001, 0x6, 0x3b3, 0x6, 0x4, 0x6, 0x2, 0x20, 0xfffffffffffffffe, 0x0, 0x5, 0x2, @perf_config_ext={0x2, 0x4}, 0x2, 0x7, 0x6, 0x2, 0x2, 0x81, 0xfa}, r3, 0xc, r2, 0x1) 03:34:02 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:02 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000080)="20eb84fbc38bbac9eb7c408ca6e665c1a8c2c2f67d759a333e858ccdbf3c146b606f2db600000000000000464eb22f4affd8dcb93747a3b575d5cb30ff8006911cc98ec923c1cb51825079e48d66f3d2e0b4a9dbf03d6a9da79274", 0x5b, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x8}}, 0xc) 03:34:02 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:34:02 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x5, 0x40, 0x96, 0x0, 0x9, 0x9}) [ 306.798247] ALSA: seq fatal error: cannot create timer (-19) [ 306.814240] ALSA: seq fatal error: cannot create timer (-19) 03:34:03 executing program 4: r0 = socket$inet6(0xa, 0x7, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x400000000000) 03:34:03 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000080)={0x5, 0x40, 0x96, 0x0, 0x9, 0x9}) 03:34:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000007010015"], 0x8) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@rand_addr, @remote}, &(0x7f00000001c0)=0xc) [ 307.132568] ALSA: seq fatal error: cannot create timer (-19) 03:34:03 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) 03:34:03 executing program 5: r0 = getpgrp(0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x80000, 0x20000000000004) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) tee(0xffffffffffffffff, r3, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140), 0x28616813) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000680)={'ifb0\x00', 0x7}) futex(&(0x7f000000cffc), 0x0, 0x4000000000001, &(0x7f0000000000)={0x77359400}, &(0x7f0000000200), 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x6000, 0x0) flistxattr(r4, &(0x7f0000000580)=""/249, 0xe4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue1\x00'}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xfffffffffffffffa}) 03:34:03 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 307.179779] ALSA: seq fatal error: cannot create timer (-19) 03:34:03 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x49e802, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x109000, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x204040, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="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", @ANYRESHEX=r0, @ANYBLOB=',cache=fscache,\x00']) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:03 executing program 3: r0 = getpgrp(0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x80000, 0x20000000000004) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) tee(0xffffffffffffffff, r3, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140), 0x28616813) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000680)={'ifb0\x00', 0x7}) futex(&(0x7f000000cffc), 0x0, 0x4000000000001, &(0x7f0000000000)={0x77359400}, &(0x7f0000000200), 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x6000, 0x0) flistxattr(r4, &(0x7f0000000580)=""/249, 0xe4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue1\x00'}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xfffffffffffffffa}) 03:34:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000040)={0x2, 0xa3a8, 0x0, 0xe6a, 0x800, 0x7, 0x7, 0x23, 0x3, 0x4}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 307.255941] attempt to access beyond end of device [ 307.261561] loop1: rw=536870912, want=114, limit=112 [ 307.267491] attempt to access beyond end of device [ 307.272470] loop1: rw=536870912, want=115, limit=112 [ 307.277759] attempt to access beyond end of device [ 307.282708] loop1: rw=536870912, want=116, limit=112 [ 307.288696] attempt to access beyond end of device [ 307.293670] loop1: rw=536870912, want=117, limit=112 [ 307.298973] attempt to access beyond end of device [ 307.303928] loop1: rw=536870912, want=130, limit=112 [ 307.309197] attempt to access beyond end of device [ 307.314205] loop1: rw=536870912, want=131, limit=112 [ 307.319466] attempt to access beyond end of device [ 307.325154] loop1: rw=536870912, want=132, limit=112 [ 307.331642] attempt to access beyond end of device [ 307.341106] loop1: rw=536870912, want=133, limit=112 [ 307.349886] attempt to access beyond end of device [ 307.354858] loop1: rw=536870912, want=2174, limit=112 03:34:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000007010015"], 0x8) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:03 executing program 5: r0 = getpgrp(0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x80000, 0x20000000000004) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) tee(0xffffffffffffffff, r3, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140), 0x28616813) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000680)={'ifb0\x00', 0x7}) futex(&(0x7f000000cffc), 0x0, 0x4000000000001, &(0x7f0000000000)={0x77359400}, &(0x7f0000000200), 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x6000, 0x0) flistxattr(r4, &(0x7f0000000580)=""/249, 0xe4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue1\x00'}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xfffffffffffffffa}) 03:34:03 executing program 3: r0 = getpgrp(0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x80000, 0x20000000000004) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) tee(0xffffffffffffffff, r3, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140), 0x28616813) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000680)={'ifb0\x00', 0x7}) futex(&(0x7f000000cffc), 0x0, 0x4000000000001, &(0x7f0000000000)={0x77359400}, &(0x7f0000000200), 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x6000, 0x0) flistxattr(r4, &(0x7f0000000580)=""/249, 0xe4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue1\x00'}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xfffffffffffffffa}) 03:34:03 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) timer_create(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, @thr={&(0x7f0000000540), &(0x7f0000000200)}}, &(0x7f0000000540)) 03:34:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={"76787468305f170c29626ec3b6f365ff", 0x1}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TCSBRKP(r1, 0x5425, 0x5) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000002c0)=0x1e) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10103}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000190002072abd7000fcdbdf25028000cfff03fe060000000008000100ac1414bb877fca85de94df76ad2bd71c407040d582eaa3a26209c25618b5c5d95323e07092b44f32898dea38ec6823a31a362d7ce2a5cab1090ce1ad5f1a3f58f34cb3a8f03e5cb17d5cc5c6f1aec099ac45760fe5539c20bb9cd326f88db4d2baf92e6e997dd925fa302c271063bc0c850126abfae8871fe5561e2ca0d803a0589b3d0854bdd1fae8d9c424b594a6301377633c41"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 03:34:03 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e00000007010015"], 0x8) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:03 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="164e086bcc5c787c353d176af2fb94470be882d953cc46d5ca55058866b2dc7ae5cb45b11f0f8e742d1fc5ec1a0397a73519f18c08d15f4de9bb1f3b978d36304b2ba0ae4a478ea8136e4cafb1c674e36e4ea6dd90821cd5ee0a1d493fe7b91f320af3cec75c4d51158fc640b8d7623815b026826f894602d340d5f96224674bea8158e276f520c91cb25c143bcb43", 0x8f, 0xfffffffffffffffb) r2 = socket(0xa, 0xa8d824263512c0f6, 0x8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000006c0)="2721272900377a0268961a4d208d6f1b47f8829dd85d5ace096ccf76220b247d30e965ef9234ae1ac2556669c4072d9fa76fab09603956cbbefefe5289ac804e16db9018f2370508c53e8e490e9e549a174a8547e32a54b78143b8a320a3efbf81854a60c7f7df8a48b5bb8486b01555bf55c54341463f2053f4e3673d2bd82e043471752fbe689af3eee92dceb6aa3dc12f3df43a45691b41c129d52a71d832a743374ac27196be5f0788d0e8b2cc9a42883ee48de6eb1f6692e79099ae25034616a30f7e1d9e176167f07d8bbc3668bc9cc4d9", r3) r5 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)='\x00', 0xfffffffffffffff8) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000680)={0x15, 0xaf, &(0x7f00000008c0)="c5c66d1bcef4f36b1334c82610250e7e75022dd15e8ee612e2943440e37dc2fb900558b8a0e504f5d4a6cacb20604117e0ecd19a96aea1cbba640b62f27d672faeaad3bfdb42ad791c9005bf63050e971e62f23fb90ba1281462ed49eb7af843ea5247fcbcb3fe1cc749f7eda0dc712d329e12abb3118fdbadc00455ee376415389efaaec93f953b927b2efb74e922a1cdeb165d337da200906779ea2ad962430b7103ef7d0abbdbc88161091c8ac4"}) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r4, r5}, &(0x7f0000000340)=""/170, 0xaa, &(0x7f00000004c0)={&(0x7f0000000400)={'digest_null-generic\x00'}, &(0x7f0000000440)="4c536fdc766e0317fd83500d61ffa33b4f24ee6cb0ded6d2c039dd6e8aa0fc15e663cc8e4b3f62766361bed793293e8f0ab140c85966bca627808637a646aeb2957e6bbae71eb87373751a1f6f8866111830646e65069a4bded1c61d89536f877974540c5c61c21e00d8a66566ee9b60b23aa9d19083", 0x76}) socketpair(0x0, 0x0, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) epoll_wait(r7, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x5, 0x6) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f0000000980)={0x4, 0xe5c, 0x1}) 03:34:03 executing program 5: r0 = getpgrp(0x0) r1 = gettid() r2 = socket$inet6(0xa, 0x80000, 0x20000000000004) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) flistxattr(0xffffffffffffffff, &(0x7f0000000480)=""/197, 0xc5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'}) tee(0xffffffffffffffff, r3, 0x0, 0x0) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000140), 0x28616813) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000700)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000680)={'ifb0\x00', 0x7}) futex(&(0x7f000000cffc), 0x0, 0x4000000000001, &(0x7f0000000000)={0x77359400}, &(0x7f0000000200), 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x6000, 0x0) flistxattr(r4, &(0x7f0000000580)=""/249, 0xe4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue1\x00'}) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000500)={0x0, 0x0, 0xfffffffffffffffa}) 03:34:03 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@rand_addr, @remote}, &(0x7f00000001c0)=0xc) 03:34:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0x123) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000d80)=0xe8) recvmmsg(0xffffffffffffff9c, &(0x7f0000003bc0)=[{{&(0x7f00000015c0)=@generic, 0x80, &(0x7f00000028c0)=[{&(0x7f0000001640)=""/202, 0xca}, {&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/55, 0x37}, {&(0x7f0000002780)=""/3, 0x3}, {&(0x7f00000027c0)=""/194, 0xc2}], 0x5, &(0x7f0000002940)=""/149, 0x95, 0xd23}, 0xda}, {{&(0x7f0000002a00)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002a80)=""/90, 0x5a}, {&(0x7f0000002b00)=""/224, 0xe0}, {&(0x7f0000002c00)=""/250, 0xfa}, {&(0x7f0000002d00)=""/239, 0xef}, {&(0x7f0000002e00)=""/10, 0xa}, {&(0x7f0000002e40)=""/196, 0xc4}, {&(0x7f0000002f40)=""/126, 0x7e}, {&(0x7f0000002fc0)=""/29, 0x1d}, {&(0x7f0000003000)=""/199, 0xc7}, {&(0x7f0000003100)=""/41, 0x29}], 0xa, &(0x7f0000003200)=""/123, 0x7b, 0x8}, 0x4}, {{&(0x7f0000003280)=@nfc, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003300)=""/215, 0xd7}, {&(0x7f0000003400)=""/153, 0x99}], 0x2, &(0x7f0000003500)=""/225, 0xe1, 0x100}, 0x8}, {{&(0x7f0000003600)=@alg, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/132, 0x84}, {&(0x7f0000003740)=""/163, 0xa3}], 0x2, &(0x7f0000003840)=""/23, 0x17, 0xb3e}, 0x25}, {{&(0x7f0000003880)=@alg, 0x80, &(0x7f0000003940)=[{&(0x7f0000003900)=""/20, 0x14}], 0x1, &(0x7f0000003980)=""/178, 0xb2, 0x5}, 0x2}, {{&(0x7f0000003a40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003ac0)=""/183, 0xb7}], 0x1, 0x0, 0x0, 0x6}, 0x9}], 0x6, 0x10020, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000003d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003d80)=0x14) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000003dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003e00)=0x14, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000003fc0)={@mcast2, 0x0}, &(0x7f0000004000)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000004100)={@broadcast, @broadcast, 0x0}, &(0x7f0000004140)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000004180)={@rand_addr, @loopback, 0x0}, &(0x7f00000041c0)=0xc) accept$packet(r6, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0xfecf) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004280)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000004380)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f00000043c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004400)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004440)={0x0, @multicast2, @multicast1}, &(0x7f0000004480)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000004640)={'lo\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004840)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004880)={{{@in=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6}}, &(0x7f0000004980)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f00000049c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004a00)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004a40)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000004b40)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000004b80)={'team0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000004bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004c00)=0x14, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000004d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004d40)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000004d80)={{{@in=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000004e80)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004f00)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000005000)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005100)={{{@in=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000005200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000005240)={{{@in6=@ipv4={[], [], @loopback}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000005340)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005440)={'team0\x00', 0x0}) r28 = accept(0xffffffffffffffff, &(0x7f0000005480)=@can={0x1d, 0x0}, &(0x7f0000005500)=0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000005540)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000005640)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r28, 0x29, 0x22, &(0x7f0000005680)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000057c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000005900)={0x0, @dev, @broadcast}, &(0x7f0000005940)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000006500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f00000064c0)={&(0x7f0000005980)={0xb40, r1, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x184, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7f8}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x381f, 0x6, 0x4, 0xb74b}, {0x8, 0x800, 0x0, 0x5}, {0x100, 0x74ab1f6a, 0x4e, 0x8}]}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r5}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xf4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xaa}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r10}, {0x1b8, 0x2, [{0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x9, 0x7, 0x0, 0x9}, {0x10001, 0x800, 0x4, 0x929}, {0x2, 0x4, 0x7ff, 0x7ff}, {0x4, 0x2bbd, 0x8, 0x401}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffff8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x4, 0x6, 0x200, 0x6}, {0x9, 0x5, 0x9, 0x2}, {0x3, 0x8, 0x6, 0x1}, {0x101, 0x4, 0xbd6, 0x35}, {0x4a, 0x8764, 0x5, 0x2}, {0x9, 0x4}, {0x4, 0x0, 0x1, 0x7}, {0x3, 0x7, 0x400, 0x8}]}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0x84, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0x7, 0x3, 0x9}, {0x6, 0x6, 0x3, 0x9}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r15}, {0x21c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x3aa}}, {0x8, 0x6, r18}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0x9, 0x8, 0xd70, 0xffffffff}, {0x3, 0x2, 0x1, 0xd68}, {0x7, 0x2, 0x405c7354, 0x8}, {0x1, 0x1000, 0x6, 0xffffffff}, {0xd8, 0x7fffffff, 0x2, 0x6}, {0x1, 0x7f, 0x80000000, 0x200}, {0x5, 0x7fff, 0x8, 0x7}, {0x8, 0x3fee, 0x2c, 0x1}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0xc0, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r22}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r26}}, {0x8}}}]}}, {{0x8, 0x1, r27}, {0x254, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r29}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r30}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r31}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x1, 0x5, 0x5, 0x4}, {0x7fffffff, 0xffffffffffffffff, 0x43, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r32}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r33}}}]}}]}, 0xb40}, 0x1, 0x0, 0x0, 0x4004000}, 0x993f69377f3d117a) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r34 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r34) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:03 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f00000000c0), 0x8) [ 307.850181] attempt to access beyond end of device [ 307.855161] loop1: rw=536870912, want=130, limit=112 [ 307.875661] attempt to access beyond end of device [ 307.894778] loop1: rw=536870912, want=131, limit=112 03:34:03 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) mknod(&(0x7f0000000740)='./file0/file0\x00', 0x100, 0x3) [ 307.902527] attempt to access beyond end of device [ 307.906128] ALSA: seq fatal error: cannot create timer (-19) [ 307.913997] loop1: rw=536870912, want=132, limit=112 [ 307.919857] attempt to access beyond end of device [ 307.928624] loop1: rw=536870912, want=133, limit=112 [ 307.934038] attempt to access beyond end of device [ 307.939288] loop1: rw=536870912, want=142, limit=112 [ 307.944523] attempt to access beyond end of device 03:34:04 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000003c0)=[0x8, 0xe82]) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000240)=0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={r3, 0x0, 0x80000001, 0x5, 0x7fff}) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0x100000000, 0x3, 0x6, 0x1000000000000000, 0x0, 0x6, 0x2, 0x9, 0xefd3, 0x9, 0x1, 0x4, 0x88fc, 0xffffffff, 0xffff, 0x1, 0x1ff, 0x7f, 0x7f, 0x489, 0x48a, 0x584, 0x3, 0x6, 0xa43, 0x478, 0x0, 0x9, 0x2, 0x7, 0x7, 0x2, 0x1155c715, 0x9, 0x800, 0x7, 0x0, 0xff, 0x5, @perf_bp={&(0x7f0000000100), 0x1}, 0x10400, 0x4, 0x101, 0x2, 0x6, 0x9, 0x4}, r4, 0x1, r2, 0x0) [ 307.949770] loop1: rw=536870912, want=143, limit=112 [ 307.961373] attempt to access beyond end of device [ 307.978553] loop1: rw=536870912, want=144, limit=112 03:34:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:04 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000003c0)=[0x8, 0xe82]) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000240)=0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000340)={r3, 0x0, 0x80000001, 0x5, 0x7fff}) perf_event_open(&(0x7f00000001c0)={0x7, 0x70, 0x100000000, 0x3, 0x6, 0x1000000000000000, 0x0, 0x6, 0x2, 0x9, 0xefd3, 0x9, 0x1, 0x4, 0x88fc, 0xffffffff, 0xffff, 0x1, 0x1ff, 0x7f, 0x7f, 0x489, 0x48a, 0x584, 0x3, 0x6, 0xa43, 0x478, 0x0, 0x9, 0x2, 0x7, 0x7, 0x2, 0x1155c715, 0x9, 0x800, 0x7, 0x0, 0xff, 0x5, @perf_bp={&(0x7f0000000100), 0x1}, 0x10400, 0x4, 0x101, 0x2, 0x6, 0x9, 0x4}, r4, 0x1, r2, 0x0) 03:34:04 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sync_file_range(r0, 0x1f, 0xf10, 0x1) [ 308.011403] attempt to access beyond end of device [ 308.026468] loop1: rw=536870912, want=145, limit=112 [ 308.044637] attempt to access beyond end of device [ 308.050576] loop1: rw=536870912, want=2178, limit=112 03:34:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 308.081654] ALSA: seq fatal error: cannot create timer (-19) 03:34:04 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:04 executing program 3: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="164e086bcc5c787c353d176af2fb94470be882d953cc46d5ca55058866b2dc7ae5cb45b11f0f8e742d1fc5ec1a0397a73519f18c08d15f4de9bb1f3b978d36304b2ba0ae4a478ea8136e4cafb1c674e36e4ea6dd90821cd5ee0a1d493fe7b91f320af3cec75c4d51158fc640b8d7623815b026826f894602d340d5f96224674bea8158e276f520c91cb25c143bcb43", 0x8f, 0xfffffffffffffffb) r2 = socket(0xa, 0xa8d824263512c0f6, 0x8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@local}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000640)=0xe8) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r3 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r4 = request_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000006c0)="2721272900377a0268961a4d208d6f1b47f8829dd85d5ace096ccf76220b247d30e965ef9234ae1ac2556669c4072d9fa76fab09603956cbbefefe5289ac804e16db9018f2370508c53e8e490e9e549a174a8547e32a54b78143b8a320a3efbf81854a60c7f7df8a48b5bb8486b01555bf55c54341463f2053f4e3673d2bd82e043471752fbe689af3eee92dceb6aa3dc12f3df43a45691b41c129d52a71d832a743374ac27196be5f0788d0e8b2cc9a42883ee48de6eb1f6692e79099ae25034616a30f7e1d9e176167f07d8bbc3668bc9cc4d9", r3) r5 = request_key(&(0x7f0000000240)='.dead\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)='\x00', 0xfffffffffffffff8) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$EVIOCGMASK(r6, 0x80104592, &(0x7f0000000680)={0x15, 0xaf, &(0x7f00000008c0)="c5c66d1bcef4f36b1334c82610250e7e75022dd15e8ee612e2943440e37dc2fb900558b8a0e504f5d4a6cacb20604117e0ecd19a96aea1cbba640b62f27d672faeaad3bfdb42ad791c9005bf63050e971e62f23fb90ba1281462ed49eb7af843ea5247fcbcb3fe1cc749f7eda0dc712d329e12abb3118fdbadc00455ee376415389efaaec93f953b927b2efb74e922a1cdeb165d337da200906779ea2ad962430b7103ef7d0abbdbc88161091c8ac4"}) keyctl$dh_compute(0x17, &(0x7f0000000300)={r1, r4, r5}, &(0x7f0000000340)=""/170, 0xaa, &(0x7f00000004c0)={&(0x7f0000000400)={'digest_null-generic\x00'}, &(0x7f0000000440)="4c536fdc766e0317fd83500d61ffa33b4f24ee6cb0ded6d2c039dd6e8aa0fc15e663cc8e4b3f62766361bed793293e8f0ab140c85966bca627808637a646aeb2957e6bbae71eb87373751a1f6f8866111830646e65069a4bded1c61d89536f877974540c5c61c21e00d8a66566ee9b60b23aa9d19083", 0x76}) socketpair(0x0, 0x0, 0x9, &(0x7f0000000500)={0xffffffffffffffff}) epoll_wait(r7, &(0x7f0000000540)=[{}, {}, {}, {}, {}], 0x5, 0x6) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) ioctl$IOC_PR_RESERVE(r6, 0x401070c9, &(0x7f0000000980)={0x4, 0xe5c, 0x1}) 03:34:04 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x2, r1, 0x4) 03:34:04 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000140)) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RMKDIR(r2, &(0x7f0000000080)={0x14, 0x49, 0x2, {0x80, 0x1}}, 0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)) 03:34:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 308.262959] ALSA: seq fatal error: cannot create timer (-19) [ 308.285069] 9pnet: p9_errstr2errno: server reported unknown error  03:34:04 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) sendfile(r1, r2, &(0x7f00000001c0), 0x8) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r1, 0x1, 0x80, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) 03:34:04 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:04 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) write$selinux_create(r0, &(0x7f0000000040)=@access={'system_u:object_r:udev_helper_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0xc0}, 0x54) r1 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:04 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000100)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8c43, 0x4, &(0x7f0000001480)=[{&(0x7f0000000340)="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", 0x1000, 0x7}, {&(0x7f0000000200)="3b54a85cb6a5d816f974aa948b4c3908c4d3eb6e57c6fbd59ca68f989c2afce3b83ef975495d3e9f562858920062acbf1688dda2bb5b458b5c0e3cc051d9f6224275477f9780d24b34f80c6684ccf1f7ef1a95a5c6fa3f9ff0d45cc41962733e9b3e93eb0b7038c718fe9bfaaaed39f02a7349fef32c1fa1", 0x78, 0x101}, {&(0x7f0000001340)="17a7b530deb1584f2396e04f2ddd07bf4576d62f0093e3a644deb1300bba55a9394c9496772c26823ac4db54c7e4f39f2a42073da87ff2eb55fb92fca0b2c224728bcde3f31687104109ab9402a4c1e1eae336174dc15587280e7d827f425f71cad8999fa761a532b04fb802cda6d17011a60eed9236aa9e3cc15a12faecd795aa526b933beed5b9ee4914cd1ba50921d75a5b8c5ead958186c028caa4d1e3323ee06d727da26d333813e347b97df1074ec4f797f53dbe00bf0a04fd00dc331be500864379cf645b60", 0xc9, 0xff}, {&(0x7f0000001440)="3ffd774b42f3f2fd118714", 0xb, 0x70b1}], 0x810, &(0x7f0000001500)={[{@device={'device', 0x3d, './file0'}}, {@flushoncommit='flushoncommit'}, {@subvol={'subvol', 0x3d, 'vfat\x00'}}, {@device={'device', 0x3d, './file0'}}, {@fragment_all='fragment=all'}, {@clear_cache='clear_cache'}, {@datasum='datasum'}]}) fcntl$notify(r0, 0x402, 0x80000000) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 308.500499] ALSA: seq fatal error: cannot create timer (-19) 03:34:04 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) clock_gettime(0x3, &(0x7f0000000100)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xe0f2, 0x9, 0x8000, 0x0, 0x800000, 0x80000000000, 0x7, 0x1, 0x8001, 0x236c, 0x1, 0xbc0d}) [ 308.579330] 9pnet: p9_errstr2errno: server reported unknown error  03:34:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:04 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:04 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {r2, r3/1000+30000}}, 0x0) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000080), 0x0, 0x0, r4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000200)) keyctl$chown(0x4, r5, r6, r7) keyctl$chown(0x11, r5, 0xffffffffffffffff, r7) [ 308.636193] attempt to access beyond end of device [ 308.641550] loop1: rw=536870912, want=114, limit=112 [ 308.650012] ALSA: seq fatal error: cannot create timer (-19) [ 308.663564] buffer_io_error: 160 callbacks suppressed [ 308.663572] Buffer I/O error on dev loop1, logical block 113, lost async page write [ 308.679173] attempt to access beyond end of device 03:34:04 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="27ee7974554c3060a38148a4e5c1778a495b41f66d56e0c1b98c1a6998709ec463c01a19a9043ca7c07b531cdb8c7fc1038d91599e5051e0", 0x38, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0x5}, 0x1c) sendfile(r1, r2, &(0x7f00000001c0), 0x8) removexattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000100)=@random={'osx.', 'security.capability\x00'}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000000000007f0000005b72beee85f6902915edd76e1bc34a0f5e59b4451c3bf442df3b1c5ed839dad561e9f638bffdaa6b37f5e99dbe16b2efeee2e3e4ed1df86c8d1e6e2b983700000000000000005bb4a81302e818a365fd6d75e94295dc5e4378512a8ea9477161092e1bc85638e27e9f7db41ea3d8f0b3b1ef2245bda93d32cd644d5560a853d75917bcb4c63f613825bdcb6775d625439b63af582e5d3d837b3651dfddb8afa14ee18f8c"]) fallocate(r1, 0x1, 0x80, 0x1000f4) r3 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r1, r3, &(0x7f0000d83ff8), 0x8000fffffffe) pkey_free(0xffffffffffffffff) open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) readlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000380)=""/64, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000200)={0x2, 0x7, 0xfffffffffffeffff}, 0x10) [ 308.684900] loop1: rw=536870912, want=115, limit=112 [ 308.690855] Buffer I/O error on dev loop1, logical block 114, lost async page write [ 308.699326] attempt to access beyond end of device [ 308.704312] loop1: rw=536870912, want=116, limit=112 [ 308.709477] Buffer I/O error on dev loop1, logical block 115, lost async page write [ 308.717755] attempt to access beyond end of device [ 308.722765] loop1: rw=536870912, want=117, limit=112 03:34:04 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0x4c9eb0ab23cfe70b, 0x0, &(0x7f0000000180)={0xa, 0xfffffffffffffffd, 0x0, @mcast1}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40000, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000040)=0x66a0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000100)=0xfffffffffffffff8) [ 308.732032] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 308.741116] attempt to access beyond end of device [ 308.746554] loop1: rw=536870912, want=130, limit=112 [ 308.751778] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 308.759917] attempt to access beyond end of device [ 308.764866] loop1: rw=536870912, want=131, limit=112 [ 308.770197] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 308.779373] attempt to access beyond end of device [ 308.785315] loop1: rw=536870912, want=132, limit=112 [ 308.790540] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 308.798450] attempt to access beyond end of device [ 308.803477] loop1: rw=536870912, want=133, limit=112 [ 308.809492] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 308.818335] attempt to access beyond end of device [ 308.823346] loop1: rw=536870912, want=2174, limit=112 03:34:04 executing program 6: r0 = creat(&(0x7f0000000340)='./file0\x00', 0x20) ioctl$KDSETMODE(r0, 0x4b3a, 0x5e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x803, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="08010000", @ANYRES16=r4, @ANYBLOB="0c0026bd7000fddbdf2503bd5a507c000000a04e461b446ebe1c3af18f7f8e3a55fb8c6f7f4d3d86defeb1620100c1bda73a1d97844eb334c7907e861691ba005e8416b0551e81bc598e50f5c061419c3d570a61244d4b0d5432979c5d15982977107e06bb23943d270666ffdfc55a4f981655de29aa4a2e0df439d49b770783a7860d666f4466048046817840ce1cf947eee6155def64827b825e7efa2b5650b4909d5d8a1c0f85d487d2e04babd866346eca9bf647d4757fffe0cb76b35ffce43a1387e647f6367ad7f598807ab8c9434ea7d68bafc7e68224a39bed5579f048354d93847ebda077e1734f", @ANYRES32=r5, @ANYBLOB="ec00020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004009dffffff080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000080000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000010000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040007000000"], 0x108}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) [ 308.836600] attempt to access beyond end of device [ 308.841554] loop5: rw=536870912, want=114, limit=112 [ 308.848658] Buffer I/O error on dev loop5, logical block 113, lost async page write [ 308.856515] attempt to access beyond end of device [ 308.861502] loop5: rw=536870912, want=115, limit=112 [ 308.866870] Buffer I/O error on dev loop5, logical block 114, lost async page write [ 308.874782] attempt to access beyond end of device [ 308.879826] loop5: rw=536870912, want=116, limit=112 [ 308.884993] attempt to access beyond end of device [ 308.889951] loop5: rw=536870912, want=117, limit=112 [ 308.895115] attempt to access beyond end of device [ 308.900095] loop5: rw=536870912, want=130, limit=112 [ 308.905198] attempt to access beyond end of device [ 308.910178] loop5: rw=536870912, want=131, limit=112 [ 308.915388] attempt to access beyond end of device [ 308.923935] loop5: rw=536870912, want=132, limit=112 03:34:05 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 308.928956] ALSA: seq fatal error: cannot create timer (-19) [ 308.939299] attempt to access beyond end of device [ 308.944363] loop5: rw=536870912, want=133, limit=112 [ 308.956946] attempt to access beyond end of device [ 308.962041] loop5: rw=536870912, want=2174, limit=112 03:34:05 executing program 4: socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000040)) r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x8000, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000000c0)={0x6c, @empty, 0x4e23, 0x0, 'lblcr\x00', 0x0, 0x3, 0x48}, 0x2c) sendto$inet6(r0, &(0x7f0000000000)="1acb536377", 0x5, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 309.058358] 9pnet: p9_errstr2errno: server reported unknown error  03:34:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025c3f0a00145f8f764070") setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000002000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000cf0ae24ac9b4cecbdd0926915fb3049d632d4045807667debafa662e22ea98e6766571047f1f833ee151c08603ac4f2d00d944065fb71c2593a1906c27c7c4e68fb4be424cbb04df66f4c94df7bfe76c0bf6db09d5a4d5ec735a947ce1e9e45bd4a4eefcd2463ad502dced2240e31e490c47868492c8bd92e585b5bcd83efcf636287e34646542369c297f5423104f8eccff0131688b160e2ab5ea8700710dc0501616ad36df9de7915ec1e7d6"], 0x1) kexec_load(0x0, 0x7, &(0x7f00000005c0), 0x0) 03:34:05 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) 03:34:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0xfffffffffffffffc, 0x0, 0x1, 0x2, 0x20000000000000, 0x4}, &(0x7f00000002c0)=0x20) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000300)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) flock(r4, 0x5) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r5 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000a80)="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") getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r5, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000380)=""/115) syz_open_pts(r1, 0x10203) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000004c0)) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000200)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r5, r8, &(0x7f0000000080), 0x80000003) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) 03:34:05 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) pwrite64(r0, &(0x7f0000000000)="0ffc7625959160a73ca2386a720b3a3823cd3b65c39f6de9c85b19c52bc16315a64dcf6409ed47790d30ae585d1fc9c3addf67e680b180e663d746d5", 0x3c, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) sendto$inet6(r0, &(0x7f0000000040), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x10) 03:34:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000200)='sessionid\x00') open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x6, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:05 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:05 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2000, 0x0) fstat(r0, &(0x7f0000000280)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x80000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @loopback}, {0x0, @dev}, 0xfffffffffffffffe, {0x2, 0x0, @rand_addr}, "00000000000010000000000000000004"}) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 309.311652] ALSA: seq fatal error: cannot create timer (-19) [ 309.327555] 9pnet: p9_errstr2errno: server reported unknown error  03:34:05 executing program 6: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xc) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)) [ 309.386653] attempt to access beyond end of device [ 309.393289] loop1: rw=536870912, want=130, limit=112 [ 309.399586] attempt to access beyond end of device [ 309.404600] loop1: rw=536870912, want=131, limit=112 [ 309.410194] attempt to access beyond end of device [ 309.415232] loop1: rw=536870912, want=132, limit=112 [ 309.420727] attempt to access beyond end of device [ 309.425811] loop1: rw=536870912, want=133, limit=112 [ 309.430955] attempt to access beyond end of device [ 309.437613] loop1: rw=536870912, want=142, limit=112 [ 309.443209] attempt to access beyond end of device [ 309.449148] loop1: rw=536870912, want=143, limit=112 [ 309.454579] attempt to access beyond end of device [ 309.459990] loop1: rw=536870912, want=144, limit=112 [ 309.469875] attempt to access beyond end of device [ 309.475517] loop1: rw=536870912, want=145, limit=112 03:34:05 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0xee, {{0xa, 0x4e20, 0x0, @mcast2, 0x8000}}}, 0x88) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:05 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 309.490622] attempt to access beyond end of device [ 309.499156] loop1: rw=536870912, want=2178, limit=112 03:34:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0xfffffffffffffffc, 0x0, 0x1, 0x2, 0x20000000000000, 0x4}, &(0x7f00000002c0)=0x20) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000300)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) flock(r4, 0x5) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r5 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000a80)="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") getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r5, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000380)=""/115) syz_open_pts(r1, 0x10203) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000004c0)) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000200)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r5, r8, &(0x7f0000000080), 0x80000003) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) 03:34:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0xfffffffffffffffc, 0x0, 0x1, 0x2, 0x20000000000000, 0x4}, &(0x7f00000002c0)=0x20) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000300)={0x1, 0x7, 0xbd9, 0x39be, 0x67, 0x200}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000a40)) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@local}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = dup2(r3, r2) flock(r4, 0x5) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x54) r5 = socket$inet(0x2, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000a80)="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") getitimer(0x2, &(0x7f00000001c0)) sendto$inet(r5, &(0x7f0000000280), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000380)=""/115) syz_open_pts(r1, 0x10203) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000040)=0x3, 0x4) request_key(&(0x7f0000000240)='trusted\x00', &(0x7f0000000280), &(0x7f0000000300)='$user{\x00', 0xfffffffffffffff8) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000004c0)) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000200)=0x0) r8 = syz_open_procfs(r7, &(0x7f0000000400)="6e65742f74637000cd5771e92a073467075e90b6e46b4832802f88b6bbeb60b84023837448aea4791d5c5d9393b565d9d4b8412320c82a73d0673e16ab4d7f6f4bec1766b97811bfab16c5cb94ff1ca001b3491cb9ccbbbe9cd02113e1bc2efa473385e02c") sendfile(r5, r8, &(0x7f0000000080), 0x80000003) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000480)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) [ 309.659052] 9pnet: p9_errstr2errno: server reported unknown error  03:34:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:05 executing program 4: r0 = socket$inet6(0xa, 0x80000, 0x11180) fcntl$notify(r0, 0x402, 0x8000000c) sendto$inet6(r0, &(0x7f0000000280)="c4a8a5cc018660c072d2a814c252566c6481f4157d61feae75b7a44ac848e27f787635843cac6dfa59c35e72f1b156fbb22568bcd8043bc63998d128457a9247cec6c9cd1f8b73ddc1212375abc0", 0x4e, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x80000001, @loopback={0x0, 0x8}}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000140), 0x4) sendto$inet6(r0, &(0x7f0000000000)="9b701047cefdfaf2b162c34f5fc18bcff9281fbc0e232eed8ab57806e995dd084f9526b9fcdb5144332f6c546571c7b5a4a758a245f41f6f31eb0f55a561f82f104b8efe2b5f05340ff6a9e526e83da064f010c06ac3eb47143c5af015f514eb4f9c6fe029311dd730d3648e8a632bc315be8e813c4ad0bf9710de0318506122cb91c27c28263af351875fbbb05f34427680f6116fdb49484116c28447be452f056d0701aa55464495f1df595d856fd5cb5421bd340947bed7832e900e123bd26bcaeca51a691e3f2c23ba8d9b", 0xcd, 0x10, &(0x7f0000000100)={0xa, 0x4e22, 0x8, @local}, 0x1c) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x2400) accept$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x14) [ 309.709401] ALSA: seq fatal error: cannot create timer (-19) 03:34:05 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:05 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x448000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000180)={0x8, 0x0, 0xfffffffffffffffa, 'queue1\x00', 0x4}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x80) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x366366086c144a7b, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000080)) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000100)='/dev/pktcdvd/control\x00', 0x4080, 0x0) getsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x2000002) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000300)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2100010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x29}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xc}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) 03:34:05 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:05 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:05 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f0000000200)='sessionid\x00') open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x6, 0x4) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:05 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 309.926467] attempt to access beyond end of device [ 309.935852] loop1: rw=536870912, want=130, limit=112 [ 309.944480] attempt to access beyond end of device [ 309.953802] loop1: rw=536870912, want=131, limit=112 [ 309.960836] 9pnet: p9_errstr2errno: server reported unknown error  03:34:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:06 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x8, {{0xa, 0x4e24, 0x7, @mcast1, 0x3}}}, 0x88) [ 309.972934] attempt to access beyond end of device [ 309.981142] loop1: rw=536870912, want=132, limit=112 [ 309.986583] attempt to access beyond end of device [ 309.991807] loop1: rw=536870912, want=133, limit=112 [ 309.997231] attempt to access beyond end of device [ 310.006133] loop1: rw=536870912, want=142, limit=112 [ 310.011464] attempt to access beyond end of device [ 310.016733] loop1: rw=536870912, want=143, limit=112 [ 310.021911] attempt to access beyond end of device 03:34:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) unlink(&(0x7f0000000080)='./file0\x00') r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) open$dir(&(0x7f0000000040)='./file0\x00', 0x100, 0x20) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) [ 310.026995] loop1: rw=536870912, want=144, limit=112 [ 310.032190] attempt to access beyond end of device [ 310.037248] loop1: rw=536870912, want=145, limit=112 [ 310.044188] attempt to access beyond end of device [ 310.050525] loop1: rw=536870912, want=2178, limit=112 [ 310.089391] ALSA: seq fatal error: cannot create timer (-19) 03:34:06 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:06 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:06 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x93) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:06 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:34:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 310.264365] ALSA: seq fatal error: cannot create timer (-19) [ 310.295993] 9pnet: p9_errstr2errno: server reported unknown error  03:34:06 executing program 5: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x8, {{0xa, 0x4e24, 0x7, @mcast1, 0x3}}}, 0x88) 03:34:06 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) accept$inet6(r1, &(0x7f0000000a80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000ac0)=0x1c) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, r3, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:06 executing program 4: r0 = dup(0xffffffffffffffff) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x280e00, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/125) r2 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r2, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 310.446887] attempt to access beyond end of device [ 310.474922] loop5: rw=536870912, want=114, limit=112 [ 310.483868] attempt to access beyond end of device [ 310.498245] loop5: rw=536870912, want=115, limit=112 [ 310.512404] ALSA: seq fatal error: cannot create timer (-19) [ 310.527024] attempt to access beyond end of device [ 310.532596] loop5: rw=536870912, want=116, limit=112 [ 310.538879] attempt to access beyond end of device [ 310.544356] loop5: rw=536870912, want=117, limit=112 [ 310.558576] attempt to access beyond end of device [ 310.564071] loop5: rw=536870912, want=130, limit=112 [ 310.570027] attempt to access beyond end of device 03:34:06 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x9, @mcast2, 0x401}}, 0x4, 0x83b, 0x6, "beb2b5361c1b755796cdcc3125aa255a51fd14037420bbc48ba5b644195e1a4ebd9bbd30ae7718ad1326e2fbf92dad53f5af20cc98bd200cace1700de5382e7f254fcfe20294b295f085a06cb740789f"}, 0xd8) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:06 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) 03:34:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 310.577431] loop5: rw=536870912, want=131, limit=112 [ 310.583064] attempt to access beyond end of device [ 310.590904] loop5: rw=536870912, want=132, limit=112 [ 310.597607] attempt to access beyond end of device [ 310.603465] loop5: rw=536870912, want=133, limit=112 [ 310.611292] attempt to access beyond end of device [ 310.616857] loop5: rw=536870912, want=2174, limit=112 03:34:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 310.672003] 9pnet: p9_errstr2errno: server reported unknown error  03:34:06 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xdd2549f0cbfa70c5) 03:34:06 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 310.716214] attempt to access beyond end of device [ 310.721296] loop1: rw=536870912, want=114, limit=112 [ 310.728758] ALSA: seq fatal error: cannot create timer (-19) [ 310.742368] attempt to access beyond end of device [ 310.747464] loop1: rw=536870912, want=115, limit=112 [ 310.752602] attempt to access beyond end of device [ 310.758271] loop1: rw=536870912, want=116, limit=112 [ 310.763443] attempt to access beyond end of device [ 310.768481] loop1: rw=536870912, want=117, limit=112 [ 310.773597] attempt to access beyond end of device [ 310.780561] loop1: rw=536870912, want=130, limit=112 [ 310.792284] attempt to access beyond end of device [ 310.797282] loop1: rw=536870912, want=131, limit=112 [ 310.804444] attempt to access beyond end of device [ 310.809644] loop1: rw=536870912, want=132, limit=112 [ 310.814828] attempt to access beyond end of device [ 310.819999] loop1: rw=536870912, want=133, limit=112 [ 310.826543] attempt to access beyond end of device [ 310.831590] loop1: rw=536870912, want=2174, limit=112 03:34:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r1 = eventfd(0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000000)=0x7) 03:34:06 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000700)=""/242, 0xf2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000400)=0x0) fcntl$getflags(0xffffffffffffffff, 0x401) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x7003, &(0x7f0000000040)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x1ff) signalfd4(r2, &(0x7f0000000180), 0x8, 0x0) r5 = getuid() ioprio_get$uid(0x1, r5) fcntl$notify(r1, 0x402, 0x20080000013) r6 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RWSTAT(r4, &(0x7f00000001c0)={0x7, 0x7f, 0x1}, 0x7) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000440)={0x1, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e21, @local}, 0x0, 0x8, 0x80000001, 0xa0d6, 0x2, &(0x7f00000000c0)='veth0\x00', 0x5, 0x80, 0x8}) sendmsg$nl_generic(r6, &(0x7f0000000340)={&(0x7f0000000080), 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x42, 0x105}, 0x14}}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200), &(0x7f0000000280), 0x8) r7 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r7, 0x40086602, &(0x7f0000000640)=ANY=[@ANYRES64=r3]) ioctl$KDDISABIO(r2, 0x4b37) creat(&(0x7f0000000540)='./file0\x00', 0x40) fchown(r8, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x200200, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) close(r4) 03:34:06 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:34:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 310.990828] 9pnet: p9_errstr2errno: server reported unknown error  03:34:07 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000080)="484c21b8b45680fa6904268db64148ec761f6c1313aae30fad31781b0db9e5f6ca4354fd5ee5c35911e8e75700000000000010001aa4f392be0ca536f3d156db1c03a936a6074ae1346d4f3da69ac6e8", 0x50, 0x20007fff, &(0x7f0000000180)={0xa, 0x0, 0x5c11, @loopback={0x0, 0x8}, 0x1f}, 0x1c) 03:34:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:07 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:07 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 311.068588] ALSA: seq fatal error: cannot create timer (-19) [ 311.100941] ALSA: seq fatal error: cannot create timer (-19) 03:34:07 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000040)={0x5, 0x0, 0xa4d, 0x5, 0xf}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) finit_module(r0, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2) 03:34:07 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:07 executing program 1: sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000002c0)='./file0\x00', 0x220400, 0x100008000) fchdir(r0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) renameat(r1, &(0x7f0000000100)='./file0\x00', r0, &(0x7f0000000140)='./file0\x00') truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:07 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x8}, 0x20}, 0x1c) 03:34:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 311.242734] 9pnet: Insufficient options for proto=fd [ 311.306707] attempt to access beyond end of device [ 311.311935] loop1: rw=536870912, want=4229, limit=112 [ 311.319982] attempt to access beyond end of device [ 311.325456] loop1: rw=536870912, want=4230, limit=112 03:34:07 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x9, @mcast2, 0x401}}, 0x4, 0x83b, 0x6, "beb2b5361c1b755796cdcc3125aa255a51fd14037420bbc48ba5b644195e1a4ebd9bbd30ae7718ad1326e2fbf92dad53f5af20cc98bd200cace1700de5382e7f254fcfe20294b295f085a06cb740789f"}, 0xd8) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:07 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) pwrite64(r1, &(0x7f0000000100)="f8394637f8a1b3f2bef9a76aa5a1d48392f92975f5fd1207fa541fe95aab931c5ec6686b09458ced9941d71ea1bca470b6d4216fa3c5e4114742f41a0b5c1ea0d71b6e9ca7fd52ae8b10371457cd76d19d995383a7988522c8205f8b874a3ed70da1102a9306abfa44742bf279bd631ba14f490fdfaa2a924cb01aa253378fbaa7aa0f56", 0xfffffeeb, 0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) [ 311.386536] 9pnet: p9_errstr2errno: server reported unknown error  03:34:07 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x400, 0x4) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:07 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 311.454897] ALSA: seq fatal error: cannot create timer (-19) [ 311.499781] 9pnet: Insufficient options for proto=fd 03:34:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x4, 0x1, &(0x7f0000000200)=[{&(0x7f0000000340)="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", 0x1000, 0x8}], 0x80060, &(0x7f0000000240)={[{@fat=@dos1xfloppy='dos1xfloppy'}, {@fat=@nfs_nostale_ro='nfs=nostale_ro'}, {@dots='dots'}, {@dots='dots'}, {@fat=@flush='flush'}]}) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:07 executing program 3: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RLINK(r2, &(0x7f00000007c0)={0x7, 0x47, 0x1}, 0x7) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440)='/dev/zero\x00', 0x8000, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r3, 0x2287, &(0x7f0000000700)=0x4) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x2, &(0x7f00000002c0)='./file0/file0\x00', r4, &(0x7f0000000400)="e281093b03236cada73743d964903082bddc15f850f4a46c529f9375da9c408348b87bd2c6f1bdc3ca991ea82579043662bef953dc82eb") write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000800)=@generic={0x2, 0x1, 0x3}) fcntl$getownex(r0, 0x10, &(0x7f0000000840)={0x0, 0x0}) ptrace$cont(0x1f, r5, 0xff, 0x6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x240000, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose='loose'}, {@loose='loose'}, {@cache_loose='cache=loose'}, {@dfltuid={'dfltuid', 0x3d, r4}}, {@cache_none='cache=none'}, {@cache_mmap='cache=mmap'}, {@cachetag={'cachetag', 0x3d, 'noextend'}}]}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) chdir(&(0x7f0000000740)='./file0\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) umount2(&(0x7f0000000780)='./file0/file0\x00', 0x4) 03:34:07 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 311.556206] ALSA: seq fatal error: cannot create timer (-19) 03:34:07 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0xe) socketpair$inet(0x2, 0x5, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000080)="a3cdb94a7e3d00ac564756216590fc31b1ba4f19ae089cef44122365880f738d5399951952b344e5c28774bf5d3d0a14c2fe83b928b29915442934791e9abdf49cb8da277c655c855d6999bd95d708d8b45ddc2a073a375e3537043a696c40794c6337a2da92398508260ae6a8ffc37aad3d596d3312243cf259b6719dfe82a80fd22985ce36656effd221cac58031e304127a196108e98ce2546e125db653113445ba31d3922a23678e1094f59fa47b17c7a6727f", 0xb5) recvmmsg(r2, &(0x7f0000000200)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, 0x0, 0x0, 0xea}, 0x525}], 0x1, 0x40, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:34:07 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0xc001, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x80000000, 0x4) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="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", 0x7d1}], 0x1, &(0x7f00000036c0)}, 0x0) 03:34:07 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) socket$inet6(0xa, 0x1, 0x5) 03:34:07 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 311.738692] ALSA: seq fatal error: cannot create timer (-19) 03:34:07 executing program 2: r0 = add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000003c0)="50f1220b7c85bd98ba65081bbc67cdccb6df72f10c80198346f7fc0a26418bf434890c528311fbbfbb3347014e56574bbff28b20bf377ce3ea5527270d17a9519ca4238a77e4ddb8e07cebd06f227cdb", 0x50, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000700)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, r1) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c6e6f107874656e642c00"]) write$P9_RREADDIR(r4, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r4, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r4, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r4, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r4, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) syz_open_dev$evdev(&(0x7f0000000740)='/dev/input/event#\x00', 0x9, 0x100) write$P9_RLERROR(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:07 executing program 5: [ 311.792999] FAT-fs (loop1): Unrecognized mount option "Èõ»w´åã9”StdQwà^p¿ù"o¤#NË^-HHô@þ©È+HÛKUõ`ôe^µ©¼ïoLbênëe¡ŒvöH{09Êl°lêD%¡`ÂÀ"kÚéÙÁ÷û)\“(ÌüÀä]Üø=ZÄõJ‚#ÇÄ!K×uo ÑXÒKœç¿ï®`¾ž† gÅÅÚ›Oñy|¬ï²fzøf7e‚±Þ’¿ÅèÔQ–avñï'è?ŽÁbÇÉ:ev3ª†Bδ]ùßtx¤Pt Ùnåúa@ûb²¤ß­rJäDµÞ·SœmjL" or missing value 03:34:07 executing program 3: 03:34:07 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x9) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x400000, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000240)={0x4, 0x0, 0x8, 0x400, 0x0, 0x4, 0x1, 0x3ff, 0x6, 0x8}) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000140)={0x7fffffff, 0x0, 0x856, 0x8, 0x1, 0x0, 0x200, 0x4, 0x8, 0x4}) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x800, 0x3f, 0x7, 0x10000, 0x0, 0x2, 0x200, 0x0, 0x5, 0x2, 0xffffffff, 0x4, 0x800, 0x20, 0x8000, 0x1, 0x80000000, 0x80000000000, 0x7, 0x7, 0x4, 0x80, 0x3, 0x7, 0x7, 0x7fff, 0x200, 0xfff, 0x7f, 0xffffffffffff0001, 0x6, 0x7ff, 0x8, 0x9, 0x3, 0xa070, 0x0, 0x0, 0x3, @perf_config_ext={0x80000001, 0x3ff}, 0x4, 0xfffffffffffff800, 0x4dc4, 0x7, 0x0, 0x2000000000000, 0x5}, r2, 0x2, r3, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0xe) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 03:34:07 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) pipe(&(0x7f0000000000)) [ 311.869086] FAT-fs (loop1): Unrecognized mount option "Èõ»w´åã9”StdQwà^p¿ù"o¤#NË^-HHô@þ©È+HÛKUõ`ôe^µ©¼ïoLbênëe¡ŒvöH{09Êl°lêD%¡`ÂÀ"kÚéÙÁ÷û)\“(ÌüÀä]Üø=ZÄõJ‚#ÇÄ!K×uo ÑXÒKœç¿ï®`¾ž† gÅÅÚ›Oñy|¬ï²fzøf7e‚±Þ’¿ÅèÔQ–avñï'è?ŽÁbÇÉ:ev3ª†Bδ]ùßtx¤Pt Ùnåúa@ûb²¤ß­rJäDµÞ·SœmjL" or missing value 03:34:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000100)) fchdir(r1) r2 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f00000024c0)=[{&(0x7f00000001c0)="90d5a926bfff276a2c23a5327b659041cf8cf11865da9c263d348961759275b70cbc8c89b425bffc56f47faca0370ddbddf837478d8aa6305f850cae4e6349c0c5f1a1cc551f0971c06c640c105f625af1", 0x51}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="a66b89974cf6225cbe1de4a23127fbf66e0eecc9b292502f07b30b2aac5b762ae10ecdd4bcd910a3fc55632abc8c92f4e9e75d65754c6094d3af265ca2dd2997ba52ab473167edc30172d8111c11a5df10f1a5839596ec60dc62ea304873309d9e3a0baaa2b6a6558ad1c779cb0b12f8b877d44bbcc74ec479a20573af92d0db456077848402e1be7c9ca7a7a064589c6717bfac1eeb14adeebdc723d4c23b28d2258ac8", 0xa4}, {&(0x7f0000000240)="9bbfce5df3e90c30", 0x8}, {&(0x7f0000001400)="8dd887e6fb7ac5728d3a3e71432ea2827b6bf94d3f05687c93f99108dfb0e1552acdb145c3263ecea907c8e9eec84f9c640f497ab4beb3f9c5623a856ec5a232b336683379e1466aa9f7b60e", 0x4c}, {&(0x7f0000001480)="f29e62e74bc9d9ca7c719fb89501172830ad", 0x12}, {&(0x7f00000014c0)="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", 0x1000}], 0x7, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 311.956149] attempt to access beyond end of device [ 311.961201] loop5: rw=536870912, want=130, limit=112 [ 311.966511] attempt to access beyond end of device [ 311.971571] loop5: rw=536870912, want=131, limit=112 [ 311.973804] ALSA: seq fatal error: cannot create timer (-19) [ 311.982904] attempt to access beyond end of device [ 311.995801] loop5: rw=536870912, want=132, limit=112 [ 312.003474] attempt to access beyond end of device [ 312.011467] loop5: rw=536870912, want=133, limit=112 [ 312.016652] attempt to access beyond end of device [ 312.021657] loop5: rw=536870912, want=142, limit=112 [ 312.027127] attempt to access beyond end of device [ 312.032087] loop5: rw=536870912, want=143, limit=112 [ 312.037678] attempt to access beyond end of device [ 312.042619] loop5: rw=536870912, want=144, limit=112 [ 312.047786] attempt to access beyond end of device 03:34:08 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 312.052851] loop5: rw=536870912, want=145, limit=112 [ 312.064098] attempt to access beyond end of device [ 312.069220] loop5: rw=536870912, want=2178, limit=112 03:34:08 executing program 3: 03:34:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) listxattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)=""/127, 0x7f) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000400)={'bond_slave_0\x00', 0x3}) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:08 executing program 5: 03:34:08 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180), 0x43) 03:34:08 executing program 6: 03:34:08 executing program 3: 03:34:08 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 312.282796] ALSA: seq fatal error: cannot create timer (-19) 03:34:08 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) mkdir(&(0x7f0000000100)='./file0\x00', 0x16) 03:34:08 executing program 5: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="4c0000001200ff09fffefd956fa283b724a6007900000000000094083540150024001d001fc41179b598bc593afd2068c62b2c192d73a8bfa654a6613b87e658c184510f4d28fcf76aabf35d", 0x4c}], 0x1}, 0x0) 03:34:08 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)={0x2, 0x3, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x80ffffff, 0x2}]}, 0x48}}, 0x0) 03:34:08 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000200000006) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x20000, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) 03:34:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8000000000000) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="164c"]) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 312.410191] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 312.426512] attempt to access beyond end of device [ 312.432150] loop1: rw=536870912, want=114, limit=112 [ 312.440962] attempt to access beyond end of device [ 312.458818] loop1: rw=536870912, want=115, limit=112 [ 312.478733] attempt to access beyond end of device [ 312.483783] loop1: rw=536870912, want=116, limit=112 [ 312.489090] attempt to access beyond end of device [ 312.494432] loop1: rw=536870912, want=117, limit=112 [ 312.499604] attempt to access beyond end of device [ 312.504572] loop1: rw=536870912, want=130, limit=112 03:34:08 executing program 6: [ 312.510135] attempt to access beyond end of device [ 312.515090] loop1: rw=536870912, want=131, limit=112 [ 312.520262] attempt to access beyond end of device [ 312.525194] loop1: rw=536870912, want=132, limit=112 [ 312.530881] attempt to access beyond end of device [ 312.535884] loop1: rw=536870912, want=133, limit=112 [ 312.542194] attempt to access beyond end of device [ 312.547467] loop1: rw=536870912, want=2174, limit=112 03:34:08 executing program 5: 03:34:08 executing program 7: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:08 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:08 executing program 6: 03:34:08 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x294100, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)=ANY=[], 0x0) 03:34:08 executing program 5: 03:34:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={"766574000000000000000000bd6800", 0x43732e5398416f1b}) 03:34:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000700)=0x44) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 312.777497] 9pnet: Insufficient options for proto=fd [ 312.794317] 9pnet: Insufficient options for proto=fd 03:34:08 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x80, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:08 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00002c5fe8)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000e4cfe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000013000)) readv(r2, &(0x7f0000000040)=[{&(0x7f0000ba8ff9)=""/7, 0x7}], 0x1) dup3(r1, r0, 0x0) 03:34:08 executing program 5: mkdir(&(0x7f000002b000)='./file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000080)=0x5) r1 = socket$inet6(0xa, 0x1000000000003, 0x40000) ioctl(r1, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r3 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) write$selinux_create(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='s'], 0x1) sendfile(r2, r3, 0x0, 0x623) 03:34:08 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9}, 0xa000003fe, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 03:34:08 executing program 4: r0 = socket$inet6(0xa, 0x100000003, 0x80000000000006) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) r1 = dup2(r0, r0) openat$cgroup_subtree(r1, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 03:34:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[], 0x1af) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:09 executing program 0: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:09 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f00000036c0), 0x0, 0x0, &(0x7f0000003880)={0x0, 0x989680}) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') fallocate(0xffffffffffffffff, 0x800, 0x0, 0x0) preadv(r0, &(0x7f0000000140), 0x391, 0x51) 03:34:09 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x202, 0x0) write$sndseq(r0, &(0x7f0000000040), 0xfffffffffffffdb3) write$binfmt_elf32(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x38, 0x326, 0x0, 0x0, 0x20, 0x2, 0x0, 0x7}, [{0x60000007, 0x0, 0x8, 0x0, 0xf65000000000}], "", [[], [], []]}, 0x358) 03:34:09 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300021b000000020000000000000005000600000000000a00000000000000000000997f669900000000000000000000000000000000000d000800e0020000b89c0fa2997da12ba71996d8ee000000809ac1ec3d95c9a0af6fa7fe171ac34721f755b088c2a08594e391798e4fd4959ba9b5a7b0588736a57525a30d463ea43084dc1840039649673b733890eb3db522d9e747871a86cc8c8dda870000000002000100000000000000030080ffffff05000500000000000a000000def7bd3e10c077e000000000fe800000200000003692daa992ee1466"], 0xd8}}, 0x0) 03:34:09 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:09 executing program 4: gettid() r0 = socket$inet6(0xa, 0x100000003, 0x2) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x8}}, 0x1c) [ 313.170094] ALSA: seq fatal error: cannot create timer (-19) 03:34:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f00000003c0)={0x7}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290100000000001f13cd6415aa42f28fb48807002e2f66690000000000000000000000000000"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='ip6gretap0\x00', 0x10) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) getresuid(&(0x7f0000000380), &(0x7f0000000400), &(0x7f0000000440)=0x0) getresgid(&(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)=0x0) write$P9_RGETATTR(r2, &(0x7f0000000940)={0xa0, 0x19, 0x2, {0x1001, {0x19, 0x2, 0x3}, 0x1, r3, r4, 0x40, 0x940000000000000, 0x6, 0x1, 0x80000000000000, 0x358, 0xffffffffffffffa2, 0x5, 0xfffffffffffffffb, 0x4, 0x57fe00000, 0x9, 0x3f, 0x5, 0x3}}, 0xa0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x9}}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) syz_open_pts(r0, 0x80) sched_rr_get_interval(r1, &(0x7f0000000240)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000340)={0x57, 0x7d, 0x1, {0x0, 0x50, 0x8, 0xa4, {0xd308343d6f2d1683, 0x2, 0x2}, 0x100000, 0x400, 0x20, 0x40, 0xe, '/dev/snapshot\x00', 0xe, '/dev/snapshot\x00', 0x0, "", 0x1, '-'}}, 0x57) fchdir(r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:09 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x80, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:09 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x1) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) mkdir(&(0x7f0000000100)='./file0\x00', 0x16) 03:34:09 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 313.326417] attempt to access beyond end of device [ 313.332586] loop1: rw=536870912, want=130, limit=112 [ 313.339576] attempt to access beyond end of device [ 313.346512] loop1: rw=536870912, want=131, limit=112 [ 313.355103] attempt to access beyond end of device 03:34:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 313.357278] ALSA: seq fatal error: cannot create timer (-19) [ 313.392510] loop1: rw=536870912, want=132, limit=112 [ 313.398248] attempt to access beyond end of device [ 313.403635] loop1: rw=536870912, want=133, limit=112 [ 313.409143] attempt to access beyond end of device [ 313.414178] loop1: rw=536870912, want=142, limit=112 [ 313.419837] attempt to access beyond end of device [ 313.425009] loop1: rw=536870912, want=143, limit=112 03:34:09 executing program 4: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r0, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:09 executing program 6: syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000064000/0x4000)=nil, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x100, 0x2, 0x90, 'queue1\x00', 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 313.430430] attempt to access beyond end of device [ 313.436930] loop1: rw=536870912, want=144, limit=112 [ 313.444970] attempt to access beyond end of device [ 313.452117] loop1: rw=536870912, want=145, limit=112 [ 313.459789] attempt to access beyond end of device [ 313.464939] loop1: rw=536870912, want=2178, limit=112 03:34:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) socketpair(0x3, 0xa, 0x3, &(0x7f0000000700)) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000002c0)=0xc) write$binfmt_misc(r2, &(0x7f00000003c0)={'syz0', "1273bdd63422625ebda93659357f3391732ae3b5167c574e1e5004f20b9e12eb8016cdaeca2d55a6d2b06b5d6e1378e7ee9d4eb6616b1fe17b24b691d67d58419bce2efd098f4c991c6f0bb0b01e274c63654e1d0c390972758b2f635e2a7df2ca809668093f6e59c31a26b1910ebb167396a6cb524db0bd9f2755021a7beab09ab47243b8231931cfd33c9c44a2157188d38e3efdec6b388785ce6285"}, 0xa1) 03:34:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") unshare(0x2000400) r1 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80006, 0x401) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x5, 0x0, 0x0, 0x0, 0x8, 0x1, 0x100}, &(0x7f00000000c0)=0x20) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000000000), 0x3) 03:34:09 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 313.594726] ALSA: seq fatal error: cannot create timer (-19) 03:34:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"00000000000000ff00", 0x2003}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) dup2(r2, 0xffffffffffffffff) 03:34:09 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000064000/0x4000)=nil, 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x100, 0x2, 0x90, 'queue1\x00', 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) [ 313.773745] ALSA: seq fatal error: cannot create timer (-19) [ 313.808585] ALSA: seq fatal error: cannot create timer (-19) 03:34:09 executing program 5: r0 = socket$nl_generic(0xa, 0x2, 0x11) r1 = socket$nl_generic(0xa, 0x2, 0x11) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f00000005c0)="0a5cc80700315f85714070") sendmsg$nl_generic(r1, &(0x7f0000004fc8)={&(0x7f0000001ff4)={0x2, 0x2}, 0x12dd0582, &(0x7f0000001000)={&(0x7f0000000fd8)={0x4}, 0x14}}, 0x8000) sendmsg$nl_generic(r1, &(0x7f0000007000)={&(0x7f0000004ff4), 0xc, &(0x7f0000004ff0)={&(0x7f0000007fec)={0x14}, 0x14}}, 0x8800) sendmsg$nl_generic(r0, &(0x7f0000004fc8)={&(0x7f0000001ff4)={0x2, 0x2}, 0x12dd0582, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="04000000cd563ba9b208f300000000000000f70000010000000000"], 0x14}}, 0x8000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0xfd89, 0x3ff, 0x3f, 0xdb2, 0x2, 0x7, 0x7fff, 0xe4, 0x46cbc5fd, 0xd73, 0x3, 0x6}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000000c0)=""/16) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000004ff4), 0xc, &(0x7f0000004ff0)={&(0x7f0000005d8c)={0x14}, 0x14}}, 0x0) sendmsg$nl_generic(r1, &(0x7f000000ac37)={&(0x7f000000aff4), 0xc, &(0x7f000000aff0)={&(0x7f000000a000)={0x14}, 0x14}}, 0x0) 03:34:09 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000500)={0x18, 0xfffffffffffffffe, 0x4, {0x2}}, 0x18) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000440)=[&(0x7f00000001c0)='\x00', &(0x7f0000000200)='vfat\x00', &(0x7f0000000240)=':cgroupselinuxnodev:system\x00', &(0x7f0000000340)='mime_type}GPL[*#!^@selinuxsystem:\x00', &(0x7f0000000380)='vfat\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)="5cae7b757365723a2f70707030637075736574296e6f646576212a2a2e6264657663707573657400"], &(0x7f00000004c0)=[&(0x7f0000000480)='}Sselinux*\x00'], 0x400) fchdir(r0) open$dir(&(0x7f00000005c0)='./file0\x00', 0x1, 0xfffffffffffffffd) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x14c01, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000380)={0x7, 0x4d, 0x1}, 0x7) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r3, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r3, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r3, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r3, &(0x7f0000000640)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0xa0) write$P9_RLERROR(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 313.820548] 9pnet: p9_errstr2errno: server reported unknown error 3 03:34:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:09 executing program 6: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) write$FUSE_BMAP(r0, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x9}}, 0x18) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000200)=0x0) syz_open_pts(r0, 0x80) sched_rr_get_interval(r1, &(0x7f0000000240)) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000340)={0x57, 0x7d, 0x1, {0x0, 0x50, 0x8, 0xa4, {0xd308343d6f2d1683, 0x2, 0x2}, 0x100000, 0x400, 0x20, 0x40, 0xe, '/dev/snapshot\x00', 0xe, '/dev/snapshot\x00', 0x0, "", 0x1, '-'}}, 0x57) fchdir(r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:09 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:09 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000001580)='/dev/input/mice\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000015c0)) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000001600)) kexec_load(0x2, 0x9, &(0x7f0000001440)=[{&(0x7f00000000c0)="fe7a2ffaa9e8936bfaa90c171845f19f54ee5eee94e8af34508ad65dad9469e5e5bad14e0c46ebc2e694ee5fc5ff6188d199a55a9ee5ef188cf372a835c4e08d1176e7c2783945f35e2f43a314a1cdc17b1a90636070ab544fe7be3ce92ed1648360a720cdb464f8f8c5b8a7769feb58f7ed5e45c13466d797", 0x79, 0x2, 0x10000000000000}, {&(0x7f0000000140)="7a4da994523aa319192e77d2f01d22d8433ca1a34f338dfd6a910c964e261da89e604edbb6286ec7a9eff861e714c747acdc9af126ab07af162a354b133c9864323978edc288420eb4a9dfcdca6823b67e007ae40f4a24d2602a4c715f4d494298ccffc23ad9ca18fa2ac8327d91e28cfa54eee84068a12740d2c652ce12b573d6ce4040b3636508b1e743d730ad7954ec612b5336d94aad8101bd2fb5537aa2d7906fd744e0064ad1ded12f3aa40d0e12b0638d2fcf58903b0944d29a4d73267bee16a9eca6764599f121d392ec4fa03233ab218019dc898b073ec6fa3a14a242c26bdb52930e69e908156ae217c4466056f56420", 0xf5, 0x84a, 0xa7}, {&(0x7f0000000000)="8fa6b4ba1340d19a954cf49f69d5e125753c1fffeebd1d74a53657f7db1f29c3e33252d6", 0x24, 0x2, 0x7}, {&(0x7f0000000240)="b4f42565fed16d2dc54d", 0xa, 0x80000001, 0x8000}, {&(0x7f0000000280)="b39e52a68fe82300ee3496035ecbbf8d04aa060b48dcc261ba412f65ad5fc775aef0ac934540f9b2e9fd8a91cfeacce885eefc5587c47fd1898e9c5ebc75296cc78e25869bdb1fcc250dd82c95096e4132a2919f27e7e683cc413e418fdc0ea856e47b515150", 0x66, 0x4, 0xb5df}, {&(0x7f0000000300)="27384ee8bcf0913a25ad6e29459021bb0b7c47a10828a29a1513ef9b038d9638339e2d552d9832227b2b5c2d24e9cefc527613f5b1", 0x35, 0x5, 0x3}, {&(0x7f0000000340)="0a31233d895380527cef8d2443409e4748143fb5239737dc799ba152478257c42de45c33", 0x24, 0x80, 0x1}, {&(0x7f0000000380)="c8a2306e10821f1c80a86e34783849e49814861cdac35b6ac45156c85b8b0b0f8b63bb6d43bc633f448c0dd5d4856694cdf3387c763a914daf32d69dafab26834947e9801195483f99f7b9f5169bcb984bf3941bafdb58c53381c84cb4fd4c36a93221b6a67c913db289f1c13ca95ff258bf13c8e255681b8cd675d739aa56590fa0a2cbf6cef1149f6bdc4e6df59f27131e50122b4715", 0x97, 0x7, 0x7}, {&(0x7f0000000440)="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", 0x1000, 0x1, 0x6}], 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)) [ 313.925050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.932652] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.941057] IPv6: ADDRCONF(NETDEV_UP): bond_slave_0: link is not ready [ 313.949031] attempt to access beyond end of device [ 313.949296] IPv6: ADDRCONF(NETDEV_UP): bond_slave_1: link is not ready [ 313.949632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready 03:34:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={"00000000000000ff00", 0x2003}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) dup2(r2, 0xffffffffffffffff) [ 313.950020] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 313.953840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.961780] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 313.962079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.962335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 313.962539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.962771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.963018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.963262] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 313.963529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.048160] loop1: rw=536870912, want=130, limit=112 [ 314.053327] buffer_io_error: 62 callbacks suppressed [ 314.053331] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 314.067058] attempt to access beyond end of device 03:34:10 executing program 5: r0 = socket(0x200000000000011, 0x4000000000080003, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4100, 0x20) ioctl$KDSETMODE(r1, 0x4b3a, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x3b5, 0x9, 0x0, 0x0, 0x2, 0x8}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000340), 0x4) [ 314.072064] loop1: rw=536870912, want=131, limit=112 [ 314.077311] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 314.085198] attempt to access beyond end of device [ 314.090237] loop1: rw=536870912, want=132, limit=112 [ 314.095455] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 314.103569] attempt to access beyond end of device [ 314.108816] loop1: rw=536870912, want=133, limit=112 [ 314.113928] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 314.121801] attempt to access beyond end of device [ 314.126950] loop1: rw=536870912, want=142, limit=112 [ 314.132356] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 314.140697] attempt to access beyond end of device [ 314.145687] loop1: rw=536870912, want=143, limit=112 [ 314.150797] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 314.164326] attempt to access beyond end of device [ 314.169462] loop1: rw=536870912, want=144, limit=112 [ 314.175628] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 314.183684] attempt to access beyond end of device [ 314.188791] loop1: rw=536870912, want=145, limit=112 [ 314.193949] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 314.202792] attempt to access beyond end of device [ 314.207954] loop1: rw=536870912, want=2178, limit=112 03:34:10 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:10 executing program 3: r0 = socket$inet6(0xa, 0x801, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x204100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='\r'], 0x1) socket(0x8, 0x7, 0x400) write(r3, &(0x7f0000000040), 0x3a78c311) read(r2, &(0x7f0000000200)=""/250, 0x50c7e3e3) [ 314.253079] ALSA: seq fatal error: cannot create timer (-19) [ 314.291631] 9pnet: p9_errstr2errno: server reported unknown error 3 03:34:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="2a000000290110000000000000000000000000002f66696c653000000000000000000000000000000000"], 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) write$P9_RMKDIR(r2, &(0x7f00000002c0)={0x14, 0x49, 0x1, {0x19, 0x2, 0x3}}, 0x14) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 314.319577] ALSA: seq fatal error: cannot create timer (-19) [ 314.355977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 03:34:10 executing program 4: r0 = socket(0x18, 0x0, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00009d7000)=[{{&(0x7f0000003000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}, 0x80, &(0x7f0000293000)=[{&(0x7f0000002000)="4c5614c00401a0dbf8a669ebdedd102c4f7a79e606457dfdf09e2ec2ed253b", 0x1f}], 0x1, &(0x7f0000002d30)}}], 0x1, 0x0) connect(r0, &(0x7f0000002000)=@sco={0x1f, {0x1}}, 0x26) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000003ed8bf45204b090e0f8d36fa8b00000000abafbceec38834c219ecd92503cf003312fc2d6f95de175f9c4aabc45cb46432096c22ce1152cfa98b573948360828cfbe0ddf991e01e78972334f4badaeb5e03368133d7390cbeaeead43f6746f9a1afc2e7380f397c8b42477403000c1e506e9c94ea78fc1f6c5b5bb658e9fc3b769aa7908000000fba42cbe9566d62caca55054ed0facd1bf5744e6c638c6dfeb156e", @ANYRES16=r1, @ANYBLOB="0002000a000000040005000400050004000500000000000000000000000016000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendto(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000bdb000)=@generic={0x9, "94aab146a766420f2abfb55bd1f6be25f3575cf40b9ac4aa5e58fea2ad82d9dd0a555024f249d620337df3ae0cd458cd038c7630a4f04708c139e5a52c3d4ad556d84fe7e6cd00b9d549717cbc8f806a7ccb7aec9ccab3f7231be6b563b37fafef4dd230ca74f38b818aeb42385044ec605983104cdb65f996d4029cefda"}, 0x54) ioctl$TCSBRKP(r0, 0x5425, 0xfffdfffffffffffa) 03:34:10 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) r3 = gettid() setpriority(0x0, r3, 0xffe) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) unshare(0x8000000) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000440)={0x3a, @rand_addr=0x4, 0x4e22, 0x2, 'sed\x00', 0xc, 0x3, 0x54}, 0x2c) mq_timedsend(r4, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xff) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x334) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000480)=0x4a) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xc54) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000003c0)={{0x5, 0x10000}, 0x0, 0x8, 0x5, {0x1, 0x1}, 0x3}) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000200)={0x18}, 0x18) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) listxattr(&(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000300)=""/178, 0xb2) [ 314.388687] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 314.425853] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 03:34:10 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{0x5, 0x6, 0x8, 0x9}, {0xffffffffffffffff, 0x0, 0x5e6afde1, 0x7}, {0x9, 0x80000001, 0x702, 0x2}, {0x7, 0x1, 0xffffffff, 0x18e6}, {0x3ff, 0xec, 0x8}, {0x80000000, 0x6, 0xa225, 0x9}]}, 0x10) 03:34:10 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 314.495680] ALSA: seq fatal error: cannot create timer (-19) 03:34:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8244}, 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 314.541803] ALSA: seq fatal error: cannot create timer (-19) 03:34:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0xef) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x101000000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000efd000)=0x62) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fddfff)) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5412, &(0x7f00000004c0)=0x631a) 03:34:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextefd,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000380)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="567bf7c9463c1cc9ffce4e70e5c7db3c49d09858758aec0abe6249905ee59785ffb0b4eaafc0a8c7fd2e484fe223a09ff8ad42e12319f5c2ef48b9749215b90984e3210ee8f57726d28f07715e38ef26d7cdb5"], 0x1) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000440)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) chmod(&(0x7f00000002c0)='./file0\x00', 0x0) 03:34:10 executing program 3: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getnetconf={0x14, 0x52, 0x311}, 0x14}}, 0x0) fstatfs(r0, &(0x7f00000000c0)=""/10) 03:34:10 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x29, &(0x7f0000000000), 0x0) r1 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @broadcast}, &(0x7f0000000100)=0xc) chown(&(0x7f0000000000)='\x00', r1, r2) 03:34:10 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 314.711502] ALSA: seq fatal error: cannot create timer (-19) 03:34:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x808, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:10 executing program 4: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x58400, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) acct(&(0x7f00000000c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000006e80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000006e40)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x309, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKMODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x0) [ 314.756596] ALSA: seq fatal error: cannot create timer (-19) [ 314.806432] attempt to access beyond end of device [ 314.811429] loop6: rw=536870912, want=114, limit=112 [ 314.818212] Buffer I/O error on dev loop6, logical block 113, lost async page write [ 314.826880] attempt to access beyond end of device [ 314.832189] loop6: rw=536870912, want=115, limit=112 03:34:10 executing program 3: r0 = socket$packet(0x11, 0xa, 0x300) write$binfmt_elf32(r0, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000040)='statm\x00') [ 314.860898] Buffer I/O error on dev loop6, logical block 114, lost async page write [ 314.872339] attempt to access beyond end of device [ 314.878365] loop6: rw=536870912, want=116, limit=112 [ 314.883955] attempt to access beyond end of device [ 314.891239] loop6: rw=536870912, want=117, limit=112 [ 314.896903] attempt to access beyond end of device [ 314.902900] loop6: rw=536870912, want=130, limit=112 03:34:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$TCSBRK(r3, 0x5409, 0x40) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000380)={0x16, 0x6f, 0x1, {0x1f8bf82ed2035a0b, [{0x8, 0xffffffffffffffff}]}}, 0xfffffffffffffdfd) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 314.913301] attempt to access beyond end of device [ 314.918603] loop6: rw=536870912, want=131, limit=112 [ 314.924573] attempt to access beyond end of device [ 314.930908] loop6: rw=536870912, want=132, limit=112 [ 314.937434] attempt to access beyond end of device [ 314.954068] loop6: rw=536870912, want=133, limit=112 03:34:10 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x6, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0xfffffffffffffffd) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 314.968064] attempt to access beyond end of device [ 314.973299] ALSA: seq fatal error: cannot create timer (-19) [ 314.987845] loop6: rw=536870912, want=2174, limit=112 03:34:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 315.028846] ALSA: seq fatal error: cannot create timer (-19) [ 315.095959] attempt to access beyond end of device [ 315.100975] loop1: rw=536870912, want=114, limit=112 [ 315.106801] attempt to access beyond end of device [ 315.111758] loop1: rw=536870912, want=115, limit=112 [ 315.120755] attempt to access beyond end of device [ 315.127637] loop1: rw=536870912, want=116, limit=112 [ 315.129372] ALSA: seq fatal error: cannot create timer (-19) 03:34:11 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002780), 0x8000fffffffe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) r3 = gettid() setpriority(0x0, r3, 0xffe) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) unshare(0x8000000) r4 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) mq_timedreceive(r4, &(0x7f0000000000)=""/24, 0x18, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000440)={0x3a, @rand_addr=0x4, 0x4e22, 0x2, 'sed\x00', 0xc, 0x3, 0x54}, 0x2c) mq_timedsend(r4, &(0x7f0000000100), 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xff) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x334) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000480)=0x4a) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="7f454c4600250000050000000000000003003e00060000002c010000000000004000000000000000e1000000000000000500000087003800020002000700ea000200007001000000ea0a000000000000f7ffffffffffffff00000000ffffffff00000000000000000100000001000000010000000000000001000070040000000500000000000000000000000000000005000000000000000100000001000000ff0f00000000000000fcfffffffffffff423273d395b5dfe49a633eb0eb0263328129db30c89d614ca312379424593d1149401363a977a2b10bc8394762bab422771360aa38dc889b26829f721e3098b0f80c2f4ee55bcf0df04911af0a6a16e0ab5b5bb1e2227df0cb7b403be567ea3b9adef738dd4b7efbd9e56dfc0dc488a064d4ad246d477bc8fedb6c1fbcdb1469e544a6ac9afa9987b94c8d1209a41a79416931a8f43bd761418a2c47221a2a4d6bee2592cd6eab8fa3ac582965b48d68fb1dde708c9901874b0f1628c0adf0dc15872d102a327e9f073a52942892de4cc87c25e76cde841dd1e09db3f59955450018b682981af9bf3133a11fbf7915b41105bd663e6f7116777b3cb43f260d25a06d22119ca7674f7d9eeb496cccae5ea73758600072b6f0c2a040000002001cb9377fbc132be60c8b0bf6ac0a892b355685d62cb7077a1e889c359d7bfc544111c6ca232e6c6593a0b8f085567b065536d649fea6d4e202254fc1a0dedba780af208b0457ed33958cfd97c0155f59b06d997423bb3b6f3d5e01c8b74030434cacb0e50dcc661aff03a72021b6011f6ff05f6070f0bcb7d75cbf1668562cd6599dcf1eac792c47370ac83b2730215d9955f6fa81f59d3209fbaf52f41f8c413432d976fe6eb3ae98661de6250e09bcf7b82d0492b349ca022abade27ee2d41aa83ba7d2ed5193dda7e9c78769b1430e5a171e12e0fa1d057e1aef4b856ab0f2dabc8b207f09d78e1f83461ccac0b2558732ea70d369973971d2c6d94081f33308b1e4b27a2ce6f45838809407045aa63b6219d82564c7323f73bfc2260fd95e5e8eeca550b29adcca477de69469764858d7aa3ab8afd99e883c43dacae12ac88e7fea5a99df90755e5caf59185794ed6419a22fe36d9070ed6558b090cb871914491e2a135047b729107896b784bf87c941f7b993033898b993c83b8bcec93aed20e900921e8c8e716321ad5664665e7f89839258d1477a2e8fceaa9280b9c9dc53b5ed4bd907c3942d8fac1eff961bf3040ae0faed3985bccc355506dfcd52907750828fc988e60aec5b577af9769cebc8d6e87a826826f8362c84fe7ec9e6d3cc39c1b6b6b9005eaaf0d9037fa576757018d3f60fbab576284cd7343e70a4b8143dc67e94c1090b7376eec330f5995c4b3a119646b4a953cf0669d6e52264827bbbae2c7565529a68f46f5e1a23137059867d0192caf6b22e2d74f8fbe12a139bc90a0d12b6acc0a106ba4fc2baf87c254bb540835206fc5f63dbc82581cec68813c331af00086cae971610587c4683d5f1b0dd68b8a419f581f0387cc9d1a435e329a0595d73a4489b1ea23c331ca752bfd46de13faee26e7e2e9b11dd7151883ac8112c0ba049070bcf00881cc0a37395f1a102cddda4b0b903b0233461e70254e6a75b9c29c02fce51b630d5cd58867e5f8e5b47fdb2fb53e0b9485f1079ddb39d7b3ef5d8d37be9a08714575e454274581a8ad758ba53da32d2c893e8a40de0febf31f84016558a9db7c53dec27895d69fa1a34e4b5b856f4d0974a9dd4031e28632a245b921a576f1a19f47d7ba08e9ca94a7ae46c89b379d90e0dfdcffb790586d920ea79f94af735aa51695dfe0c9c73a44b277e877b473b43f5c3a960d7c5e22678ab3f7cf46bdf23cbbd31df613827f8e23f7b2c71be25eab7dbd56f7b426b784583ec97db1659afc521a84e709cd879f8e5afe72366ffcd05c29b92ad591e35a19df805a2b89b9b87a13109c19ea941e9b9f6ee1c47708870abfda2debce7eae0f356bc896a5a207f6bc3ed4186117e1ae9b861d3a9a94520a6df99fd700c6fc3b82467a1257c2040dd34b2fb30c032224e6b864900f93168e387edaeeedaebf8b7b40d4caaa97c85229e63770ced3382013fd11010d0ee46333666aaec98aacc511c92be9e55eee400c74ab4614552624ad88f5d63b6f87e85826ee7cf6f15418f9712c6d07f36a54f097d9bc48b3035ae569af4753e7831dc520fe4726d0c96d0cb7b45e5ca5002884d38ed8e8ead8d4a7da76f9bcfd848fd27345bec7dd4356ef7b11a0cd3113bd9d9bd72597daf8e25b987b6a17329b9c581e7e647eddd060553fd6e9194bc07ffc5ca9eb6e9ce36aa545ac0f6e242e381282522481668f05909a69db9c8f417ce2406fb727c11fa8ed3ec6f097fed51414f3286075c414753979f58a70d97539c1215ad15f4f2bdc9cb27e00245bb2291f767d4c581387a63022c727026043c0180a848edd1c3fffff21c3fe0b11c65caca8941959536882277e3dc9e61da52527a24e2d79a497a80b33b24f1ca184d56ad13194867d7a0a424977b5f256a4643460a03007ccf2abb042c6a8f357e8c67298f4ee68fa10d82aeec9c63884f43927692db04bfa6651a630ff1e945d5c2ceb1552d0cd69830f257e5d2b500e4447f03edc78938d82871b7075be875dee546cd23ae617356f51fe8f1fb11417e63a436d7ca0ecd22fab3719ab5b4a4fa0ac2b6a44002fdddb61f7d6fe2beac291455b144cff1da4cb487c430a42cd6dee2b0752536175bdeb3abf2a393823dddf4567d7a6ac785662eb272ea9ea223e0d63a2d027fc3bfa6da9c1537a5c207c9f2495bd45ee28be938ad3dbdadee778875ba641ceb20f3fb23d57269a4e40e0baea56d0b4247f12ebb7cf6ee0e64b0d521c8636ca845287f752adfde004e37bee0451540bcabf455b43233e287e4ce36ebbf2cf0aa8325b72b90c40cc5bdf77f66b07bf5423a80409e1e95424e2d63c09e621354d87d29d28758c290f29746e00e72e1f6ee9fc93841a7a4ec7420c1d78c09f9355b41c5b6a2e94d84218428a4e4e40bcab84f0cdc9a230101146a11e1f36367b4b5f21e76b5e58c31aec27a47e7ce6c22d29c553f03d0515199b541750e92718c53542cb8c0e4202c89b5bc2a4e3cd4fd1e33ba846b2d2d1c94d2e73327b1d327fe80ff1113634e2e94769b97a1088c2f00001fd26ffbf3b4b82036e960a01efd1eecb0e4cff79c5943cb7f3390757f2ebaa20ac131cddf19065dad03237cca7406b5c30228494fe25d9d26631795f3b0a16ac6c8c27e37a75bce127c582beed29fe6137efe5ac28a2a89597db794c570055e318e92f17f36e3fcbc68c8233d2f0c433f9e11b2819ade8026682c9c966d13605ba9cfa66d91f8203260ed06d8c53912b2c25be01165ebda24e3b70c4fa4a99c56470ee400000092272d6ba4a0906d5b8df7039b82bf83378b78ce124aca8b7944fffdd65bfca51e33614282fb1738dd43c6b95f2bc5e9b24605ff3fb5a06ece40c2c4a86b93acdde534777d47c5196e7ef7d65ff45606324b402aa6b81afa463f63f96bc442cd25a033b7b6feed08de0f00bccb16c439813c6c4b1d1733bb55a6245a9180ec71a7f31631613c60af161f5ef64493b859a6c4baa9e3811250984db538169178a4f4cb4141f74e366a28b4fdeef59bb22f6f525c493912a044bd99a3b4b86b2834a4f837d58d4292a22a730b6a2e5ec7bf358c2016326fff4889d5d5e1beec898a3a88d0f4a450d86548a1a9b1cc1bee45e6a4e2c4e09cd69a51d46190755bd42c1e53d4a1f80010da651d6c500a066afa9c98755acf643ff381af66742c6e091746c77e0f14f2583d6d70339ed50e9da34a0aa8820359872132179f087f16cdaf3636688927e39a857a99f911d08406b6addefa9f895f3b29812234eaf4d5a93b9363fa02a4ee9fe8676811004fabc8121f7639e9f92c0d7f796a6355e984d7a85aadc6220847666f8f52c4571516eb1a9fc487e918956411823e1edef555a61ba7d45931457b221bdcc8aaad58e8007497a8846278e0aed68926d3ea9fd96a89ccc89627c86da315c3eb5445bf799df613befe958390660f6c9f7ac02e3187100f18ea3bfacf9662601fc9868329b3524cb8c07850726355bd748f7c51b32e6c4341676cef6af55351e599d196d38d63bf0cd20b85f4bc79a2895b9c5c4d46090b4e1a10394f8ba7201d45d3878dc9b3e7ec3510073424b92a7448f9d8d9c15fff2a1c0e6dde7e6ad83f6243b21c6c14bd1b36e834b9cdc2b09022c0ddad8b5cdedb4a9e401acd96b77825cf6cb459e0c70b310c4d6f7a192c6766e75b4b50e64680b8bbe41065eac33f24c280ae6d89ef5fad05d8a9b635b052176cc3a9c2c9ffd43c0530deafd29079147dd34b5cd866e7feffe95f76695a40c216729ab526140000000000000000"], 0xc54) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000003c0)={{0x5, 0x10000}, 0x0, 0x8, 0x5, {0x1, 0x1}, 0x3}) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000200)={0x18}, 0x18) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) listxattr(&(0x7f0000000180)='./bus/file0\x00', &(0x7f0000000300)=""/178, 0xb2) 03:34:11 executing program 4: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="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", 0x12e) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0x14) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'bond_slave_1\x00', 0xff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x40, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) r1 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x20100) r2 = getpgrp(0xffffffffffffffff) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000040)={[], 0x1, 0xada, 0xfffffffffffff511, 0xbeb, 0xfff, r2}) 03:34:11 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:11 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x36) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) [ 315.144060] attempt to access beyond end of device [ 315.150824] loop1: rw=536870912, want=117, limit=112 [ 315.157014] attempt to access beyond end of device [ 315.162544] loop1: rw=536870912, want=130, limit=112 [ 315.170498] attempt to access beyond end of device [ 315.175675] loop1: rw=536870912, want=131, limit=112 [ 315.180810] attempt to access beyond end of device [ 315.186185] loop1: rw=536870912, want=132, limit=112 [ 315.191468] attempt to access beyond end of device 03:34:11 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") eventfd(0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)="bd7d94b939f51dd2df958c87e003e05bf3d706e6d167ea9dffab9f7949ec15015bcbbfce8881a48959a81c7bf26b190e93e44284b59c240557c15c959c20498f5493fae28c8deef9175cee00f8861655cf7c9649cc909b527b3ea81a6b9eb648d94fa4d6f42ccc", 0xfffffffffffffee9) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x32, @multicast1, 0x4e22, 0x3, 'rr\x00', 0xa, 0x6, 0x3c}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) [ 315.198139] loop1: rw=536870912, want=133, limit=112 [ 315.205113] attempt to access beyond end of device [ 315.211413] loop1: rw=536870912, want=2174, limit=112 03:34:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000002940)=""/4096, 0x1000, 0x10002, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0xffffffffffffff8e) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) sendto(r1, &(0x7f00000001c0)="eef3ee36522887ff9b6dccaba64dcb902b8a8867a6d851e601780ffa2104d83f1573d977e68d812babd3850bb1bb1398cdda1d03a15e1c380ea4709e573bb76f898d5db6fd38a9a2fa24ddf438bea5613b14148edbbdf8d3c27dc307766b08d87eace4407c8bb6f45ef3f52245ecec9013", 0x71, 0x4040004, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000500)=0x6, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r4 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000018c0)="a3be8ede202032c179a0ba7889a4a4316d9e85d76b6ab4168f24f28e08a5673e673f1335ed5a7f3dc0912aa7ffd1c8e1adbb29caa06fef8c5eaac49567fd3a35124ce9772c263748a0cbca9fe1a2ed13e5f146ffc298462316ef99d7d70aa8d849e8650193910b3d0d06d5b1618a0973eee186e91b6ef5d0bbfbe78877a82a", 0x7f, 0xfffffffffffffffd) keyctl$invalidate(0x15, r4) memfd_create(&(0x7f0000000440)='\x00', 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x7b6cc922, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f00000003c0)=0x68) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000001940)=""/4096) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000480)={{0x3, 0x30000000000}, 0x1, 0x2, 0xce, {0x0, 0x1}, 0x2, 0x4}) keyctl$get_security(0x11, r4, &(0x7f0000000340)=""/120, 0x78) [ 315.260716] ALSA: seq fatal error: cannot create timer (-19) 03:34:11 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/checkreqprot\x00', 0x101001, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x4) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 315.341321] ALSA: seq fatal error: cannot create timer (-19) [ 315.353885] 9pnet: p9_errstr2errno: server reported unknown error 3 03:34:11 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") eventfd(0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)="bd7d94b939f51dd2df958c87e003e05bf3d706e6d167ea9dffab9f7949ec15015bcbbfce8881a48959a81c7bf26b190e93e44284b59c240557c15c959c20498f5493fae28c8deef9175cee00f8861655cf7c9649cc909b527b3ea81a6b9eb648d94fa4d6f42ccc", 0xfffffffffffffee9) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x32, @multicast1, 0x4e22, 0x3, 'rr\x00', 0xa, 0x6, 0x3c}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) 03:34:11 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000400)={0x80, 0x7f, 0x4, 0x6b}) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x224800, 0x100) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r2) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000100)=0x0) ptrace$pokeuser(0x6, r3, 0xa2, 0xffffffff) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/uts\x00') 03:34:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x3c}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 315.495293] ALSA: seq fatal error: cannot create timer (-19) 03:34:11 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000002940)=""/4096, 0x1000, 0x10002, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0xffffffffffffff8e) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) sendto(r1, &(0x7f00000001c0)="eef3ee36522887ff9b6dccaba64dcb902b8a8867a6d851e601780ffa2104d83f1573d977e68d812babd3850bb1bb1398cdda1d03a15e1c380ea4709e573bb76f898d5db6fd38a9a2fa24ddf438bea5613b14148edbbdf8d3c27dc307766b08d87eace4407c8bb6f45ef3f52245ecec9013", 0x71, 0x4040004, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000500)=0x6, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r4 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000018c0)="a3be8ede202032c179a0ba7889a4a4316d9e85d76b6ab4168f24f28e08a5673e673f1335ed5a7f3dc0912aa7ffd1c8e1adbb29caa06fef8c5eaac49567fd3a35124ce9772c263748a0cbca9fe1a2ed13e5f146ffc298462316ef99d7d70aa8d849e8650193910b3d0d06d5b1618a0973eee186e91b6ef5d0bbfbe78877a82a", 0x7f, 0xfffffffffffffffd) keyctl$invalidate(0x15, r4) memfd_create(&(0x7f0000000440)='\x00', 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x7b6cc922, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f00000003c0)=0x68) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000001940)=""/4096) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000480)={{0x3, 0x30000000000}, 0x1, 0x2, 0xce, {0x0, 0x1}, 0x2, 0x4}) keyctl$get_security(0x11, r4, &(0x7f0000000340)=""/120, 0x78) 03:34:11 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:11 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") eventfd(0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)="bd7d94b939f51dd2df958c87e003e05bf3d706e6d167ea9dffab9f7949ec15015bcbbfce8881a48959a81c7bf26b190e93e44284b59c240557c15c959c20498f5493fae28c8deef9175cee00f8861655cf7c9649cc909b527b3ea81a6b9eb648d94fa4d6f42ccc", 0xfffffffffffffee9) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x32, @multicast1, 0x4e22, 0x3, 'rr\x00', 0xa, 0x6, 0x3c}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) [ 315.554331] ALSA: seq fatal error: cannot create timer (-19) 03:34:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$inet(r0, &(0x7f0000002940)=""/4096, 0x1000, 0x10002, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0xffffffffffffff8e) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) sendto(r1, &(0x7f00000001c0)="eef3ee36522887ff9b6dccaba64dcb902b8a8867a6d851e601780ffa2104d83f1573d977e68d812babd3850bb1bb1398cdda1d03a15e1c380ea4709e573bb76f898d5db6fd38a9a2fa24ddf438bea5613b14148edbbdf8d3c27dc307766b08d87eace4407c8bb6f45ef3f52245ecec9013", 0x71, 0x4040004, &(0x7f0000000540)=@pptp={0x18, 0x2, {0x3, @multicast2}}, 0x80) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000500)=0x6, 0x4) syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') r4 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000018c0)="a3be8ede202032c179a0ba7889a4a4316d9e85d76b6ab4168f24f28e08a5673e673f1335ed5a7f3dc0912aa7ffd1c8e1adbb29caa06fef8c5eaac49567fd3a35124ce9772c263748a0cbca9fe1a2ed13e5f146ffc298462316ef99d7d70aa8d849e8650193910b3d0d06d5b1618a0973eee186e91b6ef5d0bbfbe78877a82a", 0x7f, 0xfffffffffffffffd) keyctl$invalidate(0x15, r4) memfd_create(&(0x7f0000000440)='\x00', 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x7b6cc922, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000280), &(0x7f00000003c0)=0x68) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000001940)=""/4096) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000480)={{0x3, 0x30000000000}, 0x1, 0x2, 0xce, {0x0, 0x1}, 0x2, 0x4}) keyctl$get_security(0x11, r4, &(0x7f0000000340)=""/120, 0x78) [ 315.627475] attempt to access beyond end of device [ 315.633352] loop1: rw=536870912, want=130, limit=112 [ 315.643116] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 315.657719] attempt to access beyond end of device [ 315.662800] loop1: rw=536870912, want=131, limit=112 [ 315.664830] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 315.682663] attempt to access beyond end of device [ 315.687917] loop1: rw=536870912, want=132, limit=112 [ 315.693191] attempt to access beyond end of device [ 315.698495] loop1: rw=536870912, want=133, limit=112 [ 315.704309] attempt to access beyond end of device [ 315.709573] loop1: rw=536870912, want=142, limit=112 [ 315.714981] attempt to access beyond end of device [ 315.720126] loop1: rw=536870912, want=143, limit=112 [ 315.725434] attempt to access beyond end of device [ 315.730612] loop1: rw=536870912, want=144, limit=112 [ 315.739455] attempt to access beyond end of device [ 315.745040] loop1: rw=536870912, want=145, limit=112 [ 315.753797] ALSA: seq fatal error: cannot create timer (-19) 03:34:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x44004) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:11 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)) stat(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)) r1 = open(&(0x7f0000000240)='./file0\x00', 0x94000, 0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req={0x7, 0x8, 0x2, 0x200}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003b40), &(0x7f0000003b80)=0xc) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000200), &(0x7f0000000180)=""/126}) 03:34:11 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)="2f02726f75702e7374617000", 0x2761, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="007f00000000000000000180"]) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0185879, 0x20000001) 03:34:11 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") eventfd(0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)="bd7d94b939f51dd2df958c87e003e05bf3d706e6d167ea9dffab9f7949ec15015bcbbfce8881a48959a81c7bf26b190e93e44284b59c240557c15c959c20498f5493fae28c8deef9175cee00f8861655cf7c9649cc909b527b3ea81a6b9eb648d94fa4d6f42ccc", 0xfffffffffffffee9) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x32, @multicast1, 0x4e22, 0x3, 'rr\x00', 0xa, 0x6, 0x3c}, 0x2c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x4000}) [ 315.777298] attempt to access beyond end of device [ 315.783496] loop1: rw=536870912, want=2178, limit=112 [ 315.798717] ALSA: seq fatal error: cannot create timer (-19) 03:34:12 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$P9_RWALK(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="710000006f0100080040010000080100000001000000000001002004000000030000000000000000030000000100000000000000000400000000000000000000009c0700000006000000002b26750c01000000020000000000000000010000000000000013da6354bd2bdaa5ddc1dd66966f4d2459f7f2b328a311e392"], 0x71) unshare(0x6000400) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x2, 0x22c01000}, 0xfffffffffffffd63) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x4, 0x4) [ 316.007509] ALSA: seq fatal error: cannot create timer (-19) 03:34:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616ef33d66e6cc31e5e3665d85", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x4000, 0x30) ioctl$TCFLSH(r3, 0x540b, 0x81) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000380), 0x4) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000440)={0x7, &(0x7f0000000400)=[{0x1, 0x3, 0x3, 0x800}, {0x0, 0x9, 0x81, 0x6}, {0x8, 0x8000, 0x3, 0x80000000}, {0xfffffffffffff800, 0x6, 0x0, 0x30e}, {0x20, 0x3, 0x8001, 0x1f}, {0x3, 0x6, 0x10001, 0x7}, {0x25a, 0x9, 0x8, 0x5}]}, 0x10) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000600), &(0x7f0000000700)=0x4) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:12 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)) stat(&(0x7f0000003940)='./file0\x00', &(0x7f0000003980)) r1 = open(&(0x7f0000000240)='./file0\x00', 0x94000, 0x2) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req={0x7, 0x8, 0x2, 0x200}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003b40), &(0x7f0000003b80)=0xc) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f00000002c0), &(0x7f0000000300)=0xc) ioctl$SG_IO(r0, 0x2284, &(0x7f0000000440)={0x2, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000200), &(0x7f0000000180)=""/126}) 03:34:12 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc8070031") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 316.071490] ALSA: seq fatal error: cannot create timer (-19) 03:34:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x1f, 0x13) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:12 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") eventfd(0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)="bd7d94b939f51dd2df958c87e003e05bf3d706e6d167ea9dffab9f7949ec15015bcbbfce8881a48959a81c7bf26b190e93e44284b59c240557c15c959c20498f5493fae28c8deef9175cee00f8861655cf7c9649cc909b527b3ea81a6b9eb648d94fa4d6f42ccc", 0xfffffffffffffee9) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x32, @multicast1, 0x4e22, 0x3, 'rr\x00', 0xa, 0x6, 0x3c}, 0x2c) 03:34:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000d11ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000016ffc)=0x406, 0x4) write(r1, &(0x7f0000435ffb)='\x00', 0x1) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0xa00) r3 = open(&(0x7f0000000000)='./bus\x00', 0x4000, 0x0) lseek(r2, 0x400000, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000001c0)='./bus\x00', 0x0) getsockname(r2, &(0x7f0000000100)=@ethernet={0x0, @local}, &(0x7f0000000200)=0x80) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) recvmsg(r0, &(0x7f000001cfc8)={0x0, 0x0, &(0x7f000001a000), 0x0, &(0x7f000001c000)}, 0x2) readv(r0, &(0x7f00006e4ff8)=[{&(0x7f0000649f35)=""/203, 0xcb}], 0x1) close(r1) [ 316.277835] ALSA: seq fatal error: cannot create timer (-19) [ 316.300285] ALSA: seq fatal error: cannot create timer (-19) [ 316.307461] attempt to access beyond end of device [ 316.307469] loop1: rw=536870912, want=130, limit=112 [ 316.307484] attempt to access beyond end of device [ 316.307490] loop1: rw=536870912, want=131, limit=112 [ 316.307502] attempt to access beyond end of device [ 316.307507] loop1: rw=536870912, want=132, limit=112 [ 316.307519] attempt to access beyond end of device [ 316.307525] loop1: rw=536870912, want=133, limit=112 [ 316.307537] attempt to access beyond end of device [ 316.307542] loop1: rw=536870912, want=142, limit=112 [ 316.307554] attempt to access beyond end of device [ 316.307559] loop1: rw=536870912, want=143, limit=112 [ 316.307570] attempt to access beyond end of device [ 316.307576] loop1: rw=536870912, want=144, limit=112 [ 316.307589] attempt to access beyond end of device [ 316.307594] loop1: rw=536870912, want=145, limit=112 [ 316.308799] attempt to access beyond end of device 03:34:12 executing program 2: r0 = accept$inet(0xffffffffffffff9c, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, &(0x7f0000000380)=0x10) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000003c0)={'veth0_to_bridge\x00', 0x1ff000000000}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") fcntl$getflags(r1, 0x40b) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r3, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r3, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r3, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r3, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r3, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r3, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:12 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000300)='/dev/rfkill\x00', 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x8000) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000440)={0x4, {{0x2, 0x4e20, @rand_addr=0x3}}, {{0x2, 0x4e20, @multicast1}}}, 0x108) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f00000005c0)) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) pwritev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="9f00ad3822d6e450ca12ba9b62bfe94603b4e96342", 0x15}], 0x1, 0x0) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000140)=ANY=[]) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xff01) fcntl$setstatus(r2, 0x4, 0x4000) write$selinux_access(r2, &(0x7f0000000000)={'system_u:object_r:etc_t:s0', 0x20, '/usr/sbin/ntpd'}, 0xfffffeff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)={0x0, 0x0}) inotify_rm_watch(r2, 0x0) ptrace$peekuser(0x3, r3, 0x6) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000180)) 03:34:12 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc8070031") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:12 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") eventfd(0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)="bd7d94b939f51dd2df958c87e003e05bf3d706e6d167ea9dffab9f7949ec15015bcbbfce8881a48959a81c7bf26b190e93e44284b59c240557c15c959c20498f5493fae28c8deef9175cee00f8861655cf7c9649cc909b527b3ea81a6b9eb648d94fa4d6f42ccc", 0xfffffffffffffee9) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) 03:34:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 316.308806] loop1: rw=536870912, want=2178, limit=112 [ 316.444837] ALSA: seq fatal error: cannot create timer (-19) 03:34:12 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc8070031") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:12 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") eventfd(0x9) setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000000140)="bd7d94b939f51dd2df958c87e003e05bf3d706e6d167ea9dffab9f7949ec15015bcbbfce8881a48959a81c7bf26b190e93e44284b59c240557c15c959c20498f5493fae28c8deef9175cee00f8861655cf7c9649cc909b527b3ea81a6b9eb648d94fa4d6f42ccc", 0xfffffffffffffee9) [ 316.573416] ALSA: seq fatal error: cannot create timer (-19) [ 316.599311] 9pnet: p9_errstr2errno: server reported unknown error 3 03:34:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000006, 0x103) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLOCK(r2, &(0x7f00000002c0)={0x8, 0x35, 0x1}, 0x8) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) recvfrom(r0, &(0x7f0000000380)=""/158, 0x9e, 0x2, 0x0, 0x0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) mknod$loop(&(0x7f0000000040)='./file1\x00', 0x2000, 0x1) ioctl(r0, 0x5, &(0x7f0000000140)="8b5862ebbc184673fc5893660bf6b4992ec5f8ddf9e9b85b77302ad5ac850f5230aaff49acb5eebc9fc26c658766698e8af39ecd3368815b3b1ebb0571c531e347a35448fbf39cea92ae9ede221a6e9583127365c94e34c52717a898c3bcbd673aaf6133d26835afc43c51734812bd4069d8fdfd28e8da9848520b0bde4fff96a6d840956a114d2131cf177998ee54") ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") open$dir(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$evdev(r1, &(0x7f0000000080)=[{{}, 0x8, 0x2, 0x4}, {{0x77359400}, 0x5, 0x3f, 0x1ff}], 0x30) 03:34:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 316.688770] ALSA: seq fatal error: cannot create timer (-19) [ 316.709442] ALSA: seq fatal error: cannot create timer (-19) [ 316.761514] ALSA: seq fatal error: cannot create timer (-19) 03:34:12 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) truncate(&(0x7f0000000100)='./file0\x00', 0x30) 03:34:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:12 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:12 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") eventfd(0x9) 03:34:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000800)) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0xc0, 0x0) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000940)={0x5, 0x1000, "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"}) pwritev(r0, &(0x7f00000007c0)=[{&(0x7f0000000380)="5b2a36df57a9a1c7e36015998d19beb80f6daba14bdba73d4490e22800ba7c2ad4f82628c20f492ea58438f3c930ae63cf28dba3331c80a5dee4c0552e99", 0x3e}, {&(0x7f00000003c0)="3e85268159852fd9805d07cf47390d8f445cabef59893d1b530b4e43df40a5c500b95d2bcc7aa5bfe7024e8236a26bc7da9c5860cc1e493a1a74f6ec4f7c0f03871ca0b3f061cbc8780cb847633fd741f6b3e09e8bcba1bcbdac3d732198173e399747556969ed138cb340452dac71cfc62e5acec26cd83a438839706d6f9be95125b5d0d06c60c637", 0x89}, {&(0x7f0000000700)="a858d0ea40ebc4dfc2928ed38df583ddbd4550195e91a135f1496ceb81c086e6f984977c6c65480aaaecc1e4b4e4820965ba873205ffab54d24455aa1fb03b8fa62b4a29cb1b22360b9e8fd5b642f6922c454a2984ae974e46ee45303ac309121c4790136ded2b54a64395b0bd1882350b6bb013194285b5a293787e17704132b5dffb19f372d8e6ac0ae1118a84", 0x8e}], 0x3, 0x0) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 316.944537] ALSA: seq fatal error: cannot create timer (-19) [ 316.983888] ALSA: seq fatal error: cannot create timer (-19) [ 316.999176] ALSA: seq fatal error: cannot create timer (-19) [ 317.016524] attempt to access beyond end of device [ 317.021536] loop1: rw=536870912, want=114, limit=112 [ 317.027091] attempt to access beyond end of device [ 317.032085] loop1: rw=536870912, want=115, limit=112 [ 317.037223] attempt to access beyond end of device [ 317.042735] loop1: rw=536870912, want=116, limit=112 [ 317.047913] attempt to access beyond end of device [ 317.052854] loop1: rw=536870912, want=117, limit=112 [ 317.058192] attempt to access beyond end of device [ 317.063166] loop1: rw=536870912, want=130, limit=112 [ 317.068336] attempt to access beyond end of device [ 317.073327] loop1: rw=536870912, want=131, limit=112 [ 317.078541] attempt to access beyond end of device [ 317.083488] loop1: rw=536870912, want=132, limit=112 [ 317.088627] attempt to access beyond end of device [ 317.093575] loop1: rw=536870912, want=133, limit=112 [ 317.099508] attempt to access beyond end of device [ 317.104500] loop1: rw=536870912, want=2174, limit=112 [ 317.216210] 9pnet: p9_errstr2errno: server reported unknown error 3 03:34:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f00000005c0)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDENABIO(r1, 0x4b36) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x400801) fcntl$notify(r1, 0x402, 0x22) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x4020, &(0x7f0000000680)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8}}, {@blksize={'blksize', 0x3d, 0x1600}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1200}}]}}) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x194) r5 = syz_open_pts(r1, 0x0) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x10000}) 03:34:13 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") 03:34:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 317.363389] ALSA: seq fatal error: cannot create timer (-19) [ 317.394777] 9pnet: p9_errstr2errno: server reported unknown error 3 03:34:13 executing program 5: r0 = socket$inet6(0xa, 0x80803, 0xf800000000000000) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x3248, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@sb={'sb', 0x3d, 0xffffffffffff6eba}}]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) 03:34:13 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 6: ioctl(0xffffffffffffffff, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") [ 317.428886] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 317.435956] ALSA: seq fatal error: cannot create timer (-19) [ 317.454912] ALSA: seq fatal error: cannot create timer (-19) 03:34:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0140000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RUNLINKAT(r2, &(0x7f00000002c0)={0x7, 0x4d, 0x2}, 0x7) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:13 executing program 1: sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x1800058, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@privport='privport'}, {@loose='loose'}]}}) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 317.559707] ALSA: seq fatal error: cannot create timer (-19) 03:34:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f857140") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 6: ioctl(0xffffffffffffffff, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") [ 317.636712] ALSA: seq fatal error: cannot create timer (-19) [ 317.681645] EXT4-fs (loop5): unable to read superblock 03:34:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wndno=', @ANYRESHEX=r2, @ANYBLOB=',noextend,\x00']) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') r2 = dup(r0) openat(r2, &(0x7f0000000340)='./file0\x00', 0x40, 0x80) lstat(&(0x7f0000000a00)='./file1\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000540)='./file0\x00', 0x3, 0x7, &(0x7f0000000940)=[{&(0x7f0000000580)="16c9efa82b865497c2ca6bfea4497d9dafcf7b43172fca672b8c625f48f1120968ca6214b371a346dbc7ec27f3f6040767ab084fa0fd26c3885e49cbe788cd49e6fc54648411aed001047c1d34a2f1f08b0a869971d836", 0x57}, {&(0x7f0000000600)="7415138639ccefce5064537731b2eb", 0xf, 0x101}, {&(0x7f0000000640)="604c17b8d5fde40c31e45e7b1fa917321a5b40d4fb89b715b6d6aa8481ae6ffde1c2871f82a15b7671422b1346bdb70bfc618962c9fdce2ada34d10bde1b3bfdbde18940faaddbc5e6e39fcde78b41f95721a5ea898408101becb8a6e5e9b632095b269b60e27c8a0e8883256f0f2c68431287187da3b5c5016143216d2a7c53", 0x80, 0x8}, {&(0x7f0000000700)="6e7e3220f88113004a19016e5a7a06cc8ecbc3657132177921a0c45b2e1444f070862d75f54a67fd93ffb33917fd4aeebeb6824f4101b268e45b4f6ce7319d9d0928393180d80f6c3f2a5f328acfb128e1469b9f6e7eaf7977", 0x59, 0x2}, {&(0x7f0000000780)="e68db1e6cd0d16b81c1df991aa7ed871da51eaeda3a3b511541e4f34e98c6f28b620d45e13c53213b067c4cff6430cc4b3c89da18c256571e42e29bdc49beee18b76070d3c801406eb4d1f72e8bbd07f0366b27ec32a3b83b503748ed67b8cc8a3dd143fbd826afd1f3394cf80832382980d4ab28f9f243f3990fc5ed1a50de15f64a6a38476d8377016cecb19bfe9d020a92d5d1188ef4ccfb41e835d4e891ea2bc6eca590d65203193df51329c76e918b50c0192d22843fcd0f5eb2b6e3650663168977d1426772ebe06fe080fa0285a19a30329811715ff5487ea0a85ef100efc720cba19af01ced25db80fbc0e14e3", 0xf1, 0x5cb9cc52}, {&(0x7f0000000880)="10cdb0ab997534f39eb2695d27da00cc289ade593c96300a4f969d8859cf4be861bc36e038bacb63f3566e05cac4c6c2950fb079971cac25dcc5bfce82b4ae8e8757558cd7ab3c95e787897ac9f5f5ddf9bfc8180c152d68f7984606ae77c4839aec81f904bb3d752693d7b17550a4d1c4f229f2bd7a8f9bb75d", 0x7a, 0xd1f}, {&(0x7f0000000900)="592066a43f2f100abfce566bab579fa6a09699751b7c4d09f786a66df8915238428a2b971a6f8924ceac04dab0800dc01886eccd97a39b64", 0x38, 0x8}], 0x2, &(0x7f0000000ac0)={[{@uid={'uid', 0x3d, r3}}, {@hide='hide'}, {@map_acorn='map=acorn'}]}) r4 = socket$inet6(0xa, 0x3, 0x3) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r5, 0x227d, &(0x7f00000000c0)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x25}, 0x14}}, 0x0) symlinkat(&(0x7f0000000b00)='./file1\x00', r2, &(0x7f0000000b40)='./file1\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x5ceab1a1715b2997}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x10c, r1, 0x101, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x400000000000000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3cf4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x20}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x33}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xc, 0x36}}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4}, 0x4048081) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x600}, 0xfffffdab, &(0x7f00000006c0)={&(0x7f0000000500)={0x158, r1, 0x10, 0x70bd25, 0x25dfdbfe}, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) [ 317.762789] EXT4-fs (loop5): unable to read superblock [ 317.785054] ALSA: seq fatal error: cannot create timer (-19) 03:34:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00', 0x1400) fchdir(r0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3, 0x5}}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7f, &(0x7f0000000340)=""/220) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) wait4(r1, &(0x7f0000000240), 0x2000000e, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 317.837074] 9pnet: Insufficient options for proto=fd 03:34:13 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f857140") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 6: ioctl(0xffffffffffffffff, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") [ 317.857516] ALSA: seq fatal error: cannot create timer (-19) 03:34:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="020fffe1b6be4b4d73fb7000fbdbdf25020013000400000026bd70000335000002001000000004d6000004d2000000000800120002000300be6b6e000400000006003300ff0200000400000000000000e0000001000000000000000000000000ff01000000000000000000000000000102001000000004d3000004d200000000"], 0x80}}, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000002940)=ANY=[@ANYBLOB="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"]) syz_genetlink_get_family_id$team(&(0x7f0000000580)='team\x00') ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000400)) pwritev(r4, &(0x7f0000000a00)=[{&(0x7f0000000680)}, {&(0x7f00000006c0)="d3790a33d4cb209e8e48d62e430f3f59788b5b5fd064dd59bf18df841466019f54a497db34bbf6a73413dd297dcf29b755759eaccccd6227144e0aa3c6232789ee87961cbfc199dcf84693bbddb2f8dcc1184ed0ed49e61157abd045cb219043350ef2e6433dda48ec83dce4dfff4e9b8db9511313157f3139a6888228c38471e54a3fa0a1d404e8ca2450a5990c215f71f2f2719e3f8922fcd0da4a22b8617ee06ec92715ca1a49de043f3fddb569f01ce893a96308fe141b0b949add5329b94398646112f7f56dbb9f88d49d28f8b7ca33616be73756f771375c606f29ef9898cbdcafadeac56e83ace746a96328b322bf1054b65e3d314e870479207a60", 0xff}, {&(0x7f00000007c0)="f82898d064ed8bb7bea8a8631ca70dcd955bc54c5b9b7e236a1b9edb599266bef9e3a76a294031ab87eefcd199d07321565ce1af260f4fffa4697c5e8cdc094deacbc91e0c733749daeee1b4ad889511012c54ac1c43be655d2928e9e65782e6760e", 0x62}, {&(0x7f0000000840)="2444a6104fa888f113e78e87ae7c3b33fe4f70578e4bd38d613a752571dfbbbc74ac6581ac73fcf930efc4da14f3053c4dbe984ecafaaba7e84eeb", 0x3b}, {&(0x7f0000000880)="46b217ef828b5119c410cde197b097b5f740e055094a9ef384924a13e63befa54c2bf7a7f991c2b5a72f7e774333d543d37a70eacbc5f18c15a886957b01875a77636d075cbeb7de5ec8502a13e6317b4b28700c9e908b4aff3563bd009f6f90fc39d29be4c6fbf6e29de5ffca0cef2d3141d5c23736fcec1406e8b9e0a2944e8117e46d5c5f37c4d308d25a5026906e1c5dbaf0e5afa88dbcc965ac30e8f17f", 0xa0}, {&(0x7f0000000940)="331ddf837831dc6cd744b3adf50324c305549c6c045cf4dbe1f9ac5b0e1c35001fcdbad1073b8c6d37293fd00e42d5df11187d04bef0d4bceff3b23b331e89b0f729a6848435b8c9a2b6198feac41eac891e9cc0b38b503a1f20badd4c7131b3c7d52ab6dee286d85e9fc5100414", 0x6e}, {&(0x7f00000009c0)="fcfd01d937225e8f325e25cdbe8a9b3b7dbb9df6ce7ad8649198ae73f441b9604076d932374b37d0f303e8287e15e3744f74d3", 0x33}], 0x7, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) prlimit64(r6, 0xd, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f00000005c0)) r7 = add_key$user(&(0x7f0000001480)='user\x00', &(0x7f00000014c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000018c0)="a3be8ede202032c179a0ba7889a4a4316d9e85d76b6ab4168f24f28e08a5673e673f1335ed5a7f3dc0912aa7ffd1c8e1adbb29caa06fef8c5eaac49567fd3a35124ce9772c263748a0cbca9fe1a2ed13e5f146ffc298462316ef99d7d70aa8d849e8650193910b3d0d06d5b1618a0973eee186e91b6ef5d0bbfbe78877a82a", 0x7f, 0xfffffffffffffffd) keyctl$invalidate(0x15, r7) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000180)=0x7b6cc922, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue1\x00'}) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0x4) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001940)=""/4096) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000680)=0x1, 0x4) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000480)) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0xfff, &(0x7f0000000280)=""/97) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f00000004c0)={{0x0, @empty, 0x4e20, 0x1, 'wlc\x00', 0x28, 0x8, 0x29}, {@broadcast, 0x4e21, 0x1, 0x7, 0x1, 0x1}}, 0x44) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000a80)={0x9, 0x15, 0x16, 0x4, 0x6, 0xac, 0x0, 0x2d, 0xffffffffffffffff}) 03:34:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 317.960540] ALSA: seq fatal error: cannot create timer (-19) [ 318.025634] ISOFS: Unable to identify CD-ROM format. 03:34:14 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f857140") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") futex(&(0x7f000000cffc)=0x2, 0x0, 0x2000000000, &(0x7f0000edfff0)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0x3, 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x0) [ 318.047626] 9pnet: Insufficient options for proto=fd [ 318.052803] ALSA: seq fatal error: cannot create timer (-19) 03:34:14 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") 03:34:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x200000000000000, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl='posixacl'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 318.120823] 9pnet: Insufficient options for proto=fd 03:34:14 executing program 1: r0 = open(&(0x7f0000000100)='./file0\x00', 0x200000, 0x0) syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000340)=""/223, 0xdf) fchdir(r1) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 318.207981] ALSA: seq fatal error: cannot create timer (-19) [ 318.219110] ALSA: seq fatal error: cannot create timer (-19) [ 318.247943] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 03:34:14 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 318.266908] attempt to access beyond end of device [ 318.272126] loop1: rw=536870912, want=114, limit=112 [ 318.272175] ALSA: seq fatal error: cannot create timer (-19) [ 318.287536] attempt to access beyond end of device [ 318.292724] loop1: rw=536870912, want=115, limit=112 [ 318.298103] attempt to access beyond end of device [ 318.303163] loop1: rw=536870912, want=116, limit=112 03:34:14 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000480)='./file0\x00', 0x1400) fchdir(r0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x3, 0x3, 0x5}}, 0x30) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f00000001c0)=0xc) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x7f, &(0x7f0000000340)=""/220) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) wait4(r1, &(0x7f0000000240), 0x2000000e, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:14 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") [ 318.314094] attempt to access beyond end of device [ 318.321117] loop1: rw=536870912, want=117, limit=112 [ 318.330393] attempt to access beyond end of device [ 318.338895] loop1: rw=536870912, want=130, limit=112 [ 318.346468] attempt to access beyond end of device [ 318.351955] loop1: rw=536870912, want=131, limit=112 [ 318.357370] attempt to access beyond end of device [ 318.362490] loop1: rw=536870912, want=132, limit=112 [ 318.367931] attempt to access beyond end of device [ 318.373881] loop1: rw=536870912, want=133, limit=112 [ 318.381013] attempt to access beyond end of device [ 318.386591] loop1: rw=536870912, want=2174, limit=112 03:34:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x100000000141042, 0x0) unlink(&(0x7f0000000000)='./bus\x00') ioctl(r3, 0x6611, &(0x7f0000000180)) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x0, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 318.497195] ALSA: seq fatal error: cannot create timer (-19) [ 318.613929] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000 03:34:14 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:14 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x8) socketpair$inet(0x2, 0x3, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000480)={0xb506, 0x9, 0x0, 0x8, 0x6, 0x5}) ioctl(r3, 0x8912, &(0x7f0000000280)="025cd93d6d345f8f760070") r4 = inotify_init1(0xfffffffffffffffe) r5 = getpgid(0xffffffffffffffff) openat$sequencer(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/sequencer\x00', 0x400802, 0x0) fcntl$setown(r3, 0x8, r5) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) socketpair(0x0, 0x8080b, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000001c0)={0x0, 0x3, 0x933, 0x9, 0x0, 0x2}) r8 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) r9 = epoll_create(0x20) ioctl$TCSETA(r7, 0x5406, &(0x7f0000000400)={0x400, 0xffffffffffff9263, 0x0, 0x7f, 0x1, 0x7, 0x5, 0x6, 0x7, 0x33}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb0, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8000}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000040}, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') signalfd4(r7, &(0x7f0000000140)={0x4}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)) mq_timedsend(r8, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000e0b000)) ppoll(&(0x7f0000000040)=[{r9, 0x8000}, {r9}, {r8, 0x200}, {r9, 0x24d0}], 0x4, &(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000100)={0x3063}, 0x8) 03:34:14 executing program 6: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(0xffffffffffffffff, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") 03:34:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc8070031") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:14 executing program 5: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/urandom\x00', 0x82, 0x0) r1 = dup(r0) fanotify_mark(r1, 0x30, 0x8000012, r1, &(0x7f0000000040)='./bus\x00') r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) r3 = socket$inet6(0xa, 0x807, 0x5b4a819b) ioctl(r3, 0x80000000, &(0x7f00000005c0)="0a5cc80700315f85714070") r4 = creat(&(0x7f0000000080)='./bus\x00', 0x24) ftruncate(r4, 0x8200) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000000)) syslog(0x4, &(0x7f00000000c0)=""/86, 0x56) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000140)={0x7, {{0xa, 0x4e21, 0x7, @loopback, 0x4}}, {{0xa, 0x4e23, 0x3, @mcast2, 0x200}}}, 0x108) 03:34:14 executing program 4: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 318.730972] ALSA: seq fatal error: cannot create timer (-19) 03:34:14 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:14 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400000000080440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:14 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") 03:34:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffc) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 318.816921] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 318.849977] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 318.897238] attempt to access beyond end of device [ 318.902193] loop5: rw=536870912, want=114, limit=112 [ 318.910453] attempt to access beyond end of device [ 318.915503] loop5: rw=536870912, want=115, limit=112 [ 318.916770] attempt to access beyond end of device [ 318.916778] loop1: rw=536870912, want=114, limit=112 [ 318.916791] attempt to access beyond end of device [ 318.916796] loop1: rw=536870912, want=115, limit=112 03:34:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc8070031") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:14 executing program 3: mprotect(&(0x7f000004a000/0x4000)=nil, 0x4000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000a25ffc), &(0x7f000039f000), &(0x7f0000000040)) r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x4, 0x0, @thr={&(0x7f0000000000)="1a4e65c6cb0ed4e5d4fc75d5ecdc5adfab473001e2c8c33c721a20c10d0c2161e4edd9970394bb8d392de30525827b7253a2f563196240a94d3a83b6fdd5f4701a5dd3f0d1089dc2d42e30073c6273b57abe103733438d5078ce002e0590207fea2d4748a9e2f8064d592670aaf91dabf45d756c45a923643d968ed6e610ebb25bc638222d", &(0x7f00000000c0)="e2a43ca6efb1364a24ee1a90fcb1448444d76072b65f29dc413fb3ed11d82b9ac87282c6efb71a83a30f2cacc217f0206ce64fa42fee01f3b64776525186a857532ffd3356b68bf1d7055a895b092db56a9e79929055685a418e7d4efe9403c5e91478e4aa8adc9ccaa174429afe8630ee5cf2d3c6d5446102fd9c994356551fcb05ebbdf8df51b02a3ee3f11cdf5bf9980380869471ad8fe62fe56751bcc014346e25e1f5ecc4eb04e7bd4b795c1498d0ff6d29e006ffb99dd1e2d45488e620ca4588b73e53f4a36e487fef6c9f45"}}) waitid(0x0, 0x0, &(0x7f0000001ff0), 0xa0000004, 0x0) [ 318.916808] attempt to access beyond end of device [ 318.916812] loop1: rw=536870912, want=116, limit=112 [ 318.916824] attempt to access beyond end of device [ 318.916829] loop1: rw=536870912, want=117, limit=112 [ 318.916840] attempt to access beyond end of device [ 318.916845] loop1: rw=536870912, want=130, limit=112 [ 318.916857] attempt to access beyond end of device [ 318.916867] loop1: rw=536870912, want=131, limit=112 03:34:15 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 4: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 318.916879] attempt to access beyond end of device [ 318.916889] loop1: rw=536870912, want=132, limit=112 [ 318.916901] attempt to access beyond end of device [ 318.916906] loop1: rw=536870912, want=133, limit=112 [ 318.918115] attempt to access beyond end of device [ 318.918122] loop1: rw=536870912, want=2174, limit=112 [ 318.969985] ALSA: seq fatal error: cannot create timer (-19) [ 319.043533] attempt to access beyond end of device 03:34:15 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") [ 319.049697] loop5: rw=536870912, want=116, limit=112 [ 319.054853] attempt to access beyond end of device [ 319.059823] loop5: rw=536870912, want=117, limit=112 [ 319.064921] buffer_io_error: 57 callbacks suppressed [ 319.064926] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 319.078125] attempt to access beyond end of device [ 319.083126] loop5: rw=536870912, want=130, limit=112 [ 319.088319] Buffer I/O error on dev loop5, logical block 129, lost async page write [ 319.096686] attempt to access beyond end of device [ 319.101789] loop5: rw=536870912, want=131, limit=112 [ 319.106944] Buffer I/O error on dev loop5, logical block 130, lost async page write [ 319.114745] attempt to access beyond end of device [ 319.119708] loop5: rw=536870912, want=132, limit=112 [ 319.124882] Buffer I/O error on dev loop5, logical block 131, lost async page write [ 319.132793] attempt to access beyond end of device [ 319.138385] loop5: rw=536870912, want=133, limit=112 [ 319.143557] Buffer I/O error on dev loop5, logical block 132, lost async page write [ 319.152411] attempt to access beyond end of device [ 319.157378] loop5: rw=536870912, want=2174, limit=112 03:34:15 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r2 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000600)={&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f0000000200)="5500000018007f5800fe01b2a4a280930a06000000a84599910000003900090008000c00010000001900150006000000000000dc1338d54400009b84136ef75afb83de44b2ee3b2733c9237f8d621a4559e65517b3", 0x55}], 0x1, &(0x7f0000000640)}, 0x0) [ 319.312797] 9pnet: Insufficient options for proto=fd 03:34:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc8070031") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 4: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 319.337029] ALSA: seq fatal error: cannot create timer (-19) [ 319.347451] 9pnet: Insufficient options for proto=fd 03:34:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x80, 0x0) lstat(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@dev, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@loopback}}, &(0x7f0000000780)=0xe8) getgroups(0x2, &(0x7f00000007c0)=[0xee00, 0x0]) r8 = geteuid() getresgid(&(0x7f0000000800), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000a40)={0x1e8, 0xffffffffffffffda, 0x2, [{{0x1, 0x0, 0x8, 0x7ff, 0x94, 0x10000, {0x3, 0x1, 0xffffffffffffffff, 0x7, 0x9, 0xfff, 0x7, 0x7, 0xfc, 0xfffffffffffffffb, 0xfff, r4, r5, 0x5}}, {0x6, 0x7f, 0x1, 0x1000, '-'}}, {{0x5, 0x3, 0x9, 0x4, 0x3, 0x5, {0x5, 0x7, 0x170, 0x8, 0xb3, 0x1, 0x7fffffff, 0x7, 0x9, 0x1, 0x7ff, r6, r7, 0x9, 0x7fc00000000000}}, {0x0, 0x6, 0x5, 0x6dd, 'rfdno'}}, {{0x5, 0x3, 0x3, 0xd3b, 0x3ff, 0xfffffffffffffffa, {0x4, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x9, 0x0, 0xffffffff, 0x7fffffff, 0x9, 0x0, r8, r9, 0x20, 0x2}}, {0x0, 0x119, 0x0, 0x8}}]}, 0x1e8) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RMKNOD(r3, &(0x7f0000000c80)={0x14, 0x13, 0x1, {0x1, 0x2, 0x8}}, 0x14) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000c40)={0x2a, 0x20, 0x12, 0x1a, 0x2, 0xff, 0x3, 0xf4, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 319.380169] 9pnet: Insufficient options for proto=fd [ 319.390548] 9pnet: Insufficient options for proto=fd 03:34:15 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x0, &(0x7f0000000100)="01000000000000001804000007ff01000000006f00d849832f") 03:34:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x10100, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001480)={0x108, 0x7, 0x4, 0x100, 0x70bd2b, 0x25dfdbff, {0x5, 0x0, 0x5}, [@typed={0xc0, 0x2e, @binary="e62057a1991da98fd9756c365caf955079cd37f8d87d624f2087025cf604da75b909a667cb8ecb697d08cde559f0410cd825eb8c55318a19e19a874519b02e3cefdb71bdbf7ce9ac91899fb32e13f30eaf69cf3f38502ea417aad48d08cd6eb4d21364f8feae9fb9998187cf13adcb5635e86ccafa6f56042ab36e4b1275ba21f1c6dfb1cba8497febcd56ce3f7199d979e8380c9b9d5a76981b9d031088a7575fcc63452772836704a9b64b3af827813e5bb1ee57034bffb869"}, @generic="08ab48d1e60a9e1e5cd3723fa0364d94f65eefd9f59f5d3491ce3a7c67dbc2af00d71f8e7e1a64999f284741cc5e8222a1"]}, 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) mincore(&(0x7f0000003000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/4096) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/35, 0x23}], 0x1) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) [ 319.508458] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.515011] IPv6: NLM_F_CREATE should be set when creating new route [ 319.521668] IPv6: NLM_F_CREATE should be set when creating new route [ 319.529885] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.536465] IPv6: NLM_F_CREATE should be set when creating new route 03:34:15 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)={{0xcc, 0x80000000000, 0x2, 0x1c9, 0x2e6, 0x7, 0xdb, 0x8}, "1c33cfa651eae2555c0687916297dcc2c7f53b2cd9959c2daa1532d96fa7de4635a1d82fe64e681eeca9c244b702c52d64ec5833817e16437eafa0740a5f2c9bca3d83f4f62c6506061e8308e2e39b7c9cf4024328b54957a25a017c7243da1da7ec0535d8d77eb33843c5f5c37ec9f710b440a6dd595eb68074582311b2d9aa574361c152e737bcc1", [[], [], [], [], [], []]}, 0x6a9) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) r2 = getpgrp(0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x8000, 0x3, 0x6213}) mq_notify(r0, &(0x7f0000000100)={0x0, 0x29, 0x1, @tid=r2}) 03:34:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)) [ 319.559927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.570743] ALSA: seq fatal error: cannot create timer (-19) [ 319.580710] ALSA: seq fatal error: cannot create timer (-22) 03:34:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) socket(0x7, 0x7, 0x2000000000005) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 319.665830] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 319.681092] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 319.695960] attempt to access beyond end of device [ 319.701067] loop1: rw=536870912, want=130, limit=112 [ 319.706677] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 319.714574] attempt to access beyond end of device [ 319.719633] loop1: rw=536870912, want=131, limit=112 [ 319.724999] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 319.732964] attempt to access beyond end of device [ 319.738379] loop1: rw=536870912, want=132, limit=112 [ 319.743581] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 319.751576] attempt to access beyond end of device [ 319.757111] loop1: rw=536870912, want=133, limit=112 [ 319.762853] Buffer I/O error on dev loop1, logical block 132, lost async page write [ 319.774695] attempt to access beyond end of device [ 319.779764] loop1: rw=536870912, want=142, limit=112 [ 319.784954] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 319.795767] attempt to access beyond end of device [ 319.800845] loop1: rw=536870912, want=143, limit=112 [ 319.806392] attempt to access beyond end of device [ 319.813039] loop1: rw=536870912, want=144, limit=112 [ 319.819066] attempt to access beyond end of device [ 319.827666] loop1: rw=536870912, want=145, limit=112 [ 319.834125] attempt to access beyond end of device [ 319.834621] binder: 26858:26861 ERROR: BC_REGISTER_LOOPER called without request [ 319.837287] binder: 26858:26861 unknown command 4743953 [ 319.837759] binder: 26858:26861 ioctl c0306201 20000080 returned -22 [ 319.875905] loop1: rw=536870912, want=2178, limit=112 03:34:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1}}) [ 319.908699] ALSA: seq fatal error: cannot create timer (-19) 03:34:15 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)) 03:34:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 320.113285] ALSA: seq fatal error: cannot create timer (-22) 03:34:16 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1}}) 03:34:16 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f00000001c0)='./file0\x00', 0x400000000080440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 320.198596] ALSA: seq fatal error: cannot create timer (-19) [ 320.337933] binder: BINDER_SET_CONTEXT_MGR already set [ 320.343454] binder: 26858:26915 ioctl 40046207 0 returned -16 [ 320.373904] binder_alloc: 26858: binder_alloc_buf, no vma [ 320.379874] binder: 26858:26915 transaction failed 29189/-3, size 24-8 line 3136 [ 320.388245] binder: 26858:26861 ERROR: BC_REGISTER_LOOPER called without request [ 320.403026] binder: 26858:26915 unknown command 4743953 [ 320.408449] binder: 26858:26915 ioctl c0306201 20000080 returned -22 [ 320.416142] attempt to access beyond end of device [ 320.418068] binder: release 26858:26861 transaction 9 in, still active [ 320.418079] binder: send failed reply for transaction 9 to 26858:26861 03:34:16 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)) 03:34:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getresgid(&(0x7f00000002c0), &(0x7f0000000380), &(0x7f00000003c0)) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x10001}}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000400)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 03:34:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f8571") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:16 executing program 3: open$dir(&(0x7f0000000000)='./file0\x00', 0x8000, 0x48) r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000003c0)={'filter\x00'}, &(0x7f0000000100)=0x54) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) sendto(r0, &(0x7f00000001c0)="a40b4397a4536f5fe6b1baa814bcb5dd4a9d36ecc8f12dbc9385ca4eb64bf474fe752f20353488ff3f8bd2db05556a766816cfd94aef75d9a7f48208c1a16e4d2344946e090e756d75fc393079a0cdce7c", 0x51, 0x20000050, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x2, @empty, 'bridge0\x00'}}, 0x80) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000440)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000280)='./file0\x00', 0x100007) 03:34:16 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1}}) 03:34:16 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x10100, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001480)={0x108, 0x7, 0x4, 0x100, 0x70bd2b, 0x25dfdbff, {0x5, 0x0, 0x5}, [@typed={0xc0, 0x2e, @binary="e62057a1991da98fd9756c365caf955079cd37f8d87d624f2087025cf604da75b909a667cb8ecb697d08cde559f0410cd825eb8c55318a19e19a874519b02e3cefdb71bdbf7ce9ac91899fb32e13f30eaf69cf3f38502ea417aad48d08cd6eb4d21364f8feae9fb9998187cf13adcb5635e86ccafa6f56042ab36e4b1275ba21f1c6dfb1cba8497febcd56ce3f7199d979e8380c9b9d5a76981b9d031088a7575fcc63452772836704a9b64b3af827813e5bb1ee57034bffb869"}, @generic="08ab48d1e60a9e1e5cd3723fa0364d94f65eefd9f59f5d3491ce3a7c67dbc2af00d71f8e7e1a64999f284741cc5e8222a1"]}, 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) mincore(&(0x7f0000003000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/4096) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/35, 0x23}], 0x1) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) [ 320.421108] binder: undelivered TRANSACTION_COMPLETE [ 320.421116] binder: undelivered TRANSACTION_ERROR: 29189 [ 320.446056] binder: undelivered TRANSACTION_ERROR: 29189 [ 320.472603] loop1: rw=536870912, want=114, limit=112 [ 320.485982] attempt to access beyond end of device [ 320.493485] loop1: rw=536870912, want=115, limit=112 [ 320.498907] attempt to access beyond end of device [ 320.504680] loop1: rw=536870912, want=116, limit=112 [ 320.510822] attempt to access beyond end of device [ 320.515946] loop1: rw=536870912, want=117, limit=112 [ 320.521805] attempt to access beyond end of device [ 320.527168] loop1: rw=536870912, want=130, limit=112 [ 320.532458] attempt to access beyond end of device [ 320.538476] loop1: rw=536870912, want=131, limit=112 [ 320.543976] attempt to access beyond end of device [ 320.549122] loop1: rw=536870912, want=132, limit=112 [ 320.556290] attempt to access beyond end of device [ 320.561523] loop1: rw=536870912, want=133, limit=112 [ 320.568463] attempt to access beyond end of device [ 320.582014] loop1: rw=536870912, want=2174, limit=112 03:34:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f857140") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:16 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007") 03:34:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f00000000c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 320.605040] 9pnet: p9_errstr2errno: server reported unknown error 3 [ 320.621984] ALSA: seq fatal error: cannot create timer (-19) 03:34:16 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1}}) 03:34:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="0a5cc80700315f85714070") pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r2, &(0x7f0000000480)={0x2a, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x2a) write$P9_RGETATTR(r2, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r2, &(0x7f0000000080)={0x16, 0x6f, 0x1, {0x1, [{}]}}, 0x16) write$P9_RGETATTR(r2, &(0x7f0000000540)={0x222, 0x19, 0x1, {0x0, {0x0, 0x4}}}, 0xa0) write$P9_RGETATTR(r2, &(0x7f0000000640)={0xa0, 0x19, 0x1}, 0xa0) r3 = getpgid(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) setpgid(r3, r4) write$P9_RLERROR(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1e0000000701001500"], 0x9) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='3'], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) utimes(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}, {0x0, 0x7530}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 320.671269] 9pnet: p9_errstr2errno: server reported unknown error 3 03:34:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0xff, &(0x7f0000000000)="84b017c8515e6e6f820241b400e28e8bb798248e565d848bada3e0b2") select(0x40, &(0x7f0000000040)={0x1, 0x5, 0x5, 0x5, 0x7, 0x0, 0x4, 0x9f}, &(0x7f0000000080)={0x9, 0x20, 0x1db5, 0xf94, 0x8, 0x8, 0x9}, &(0x7f00000000c0)={0x602, 0x7, 0x3f, 0x3f, 0x4, 0x72, 0x3, 0x8}, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) waitid(0x1, r2, 0x0, 0x80000000, &(0x7f00000001c0)) 03:34:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f857140") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 320.817731] autofs4:pid:26966:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 320.846168] ALSA: seq fatal error: cannot create timer (-19) 03:34:16 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007") 03:34:16 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007") 03:34:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x10100, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001480)={0x108, 0x7, 0x4, 0x100, 0x70bd2b, 0x25dfdbff, {0x5, 0x0, 0x5}, [@typed={0xc0, 0x2e, @binary="e62057a1991da98fd9756c365caf955079cd37f8d87d624f2087025cf604da75b909a667cb8ecb697d08cde559f0410cd825eb8c55318a19e19a874519b02e3cefdb71bdbf7ce9ac91899fb32e13f30eaf69cf3f38502ea417aad48d08cd6eb4d21364f8feae9fb9998187cf13adcb5635e86ccafa6f56042ab36e4b1275ba21f1c6dfb1cba8497febcd56ce3f7199d979e8380c9b9d5a76981b9d031088a7575fcc63452772836704a9b64b3af827813e5bb1ee57034bffb869"}, @generic="08ab48d1e60a9e1e5cd3723fa0364d94f65eefd9f59f5d3491ce3a7c67dbc2af00d71f8e7e1a64999f284741cc5e8222a1"]}, 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) mincore(&(0x7f0000003000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/4096) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/35, 0x23}], 0x1) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) 03:34:16 executing program 1: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) sched_setaffinity(0x0, 0x4, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) open$dir(&(0x7f0000000180)='./file0\x00', 0x80440, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000100)='./file0\x00') truncate(&(0x7f0000000280)='./file0\x00', 0x100007) [ 320.926520] binder: 26949:26961 ERROR: BC_REGISTER_LOOPER called without request [ 320.940512] binder: 26949:26961 unknown command 4743953 [ 320.946927] binder: 26949:26961 ioctl c0306201 20000080 returned -22 03:34:17 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007") [ 321.108200] attempt to access beyond end of device [ 321.113219] loop4: rw=536870912, want=114, limit=112 [ 321.116551] attempt to access beyond end of device [ 321.116558] loop1: rw=536870912, want=114, limit=112 03:34:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f857140") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:17 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007") 03:34:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000040)='net/ptype\x00') ioctl$sock_ifreq(r1, 0x8932, &(0x7f0000000000)={'ifb0\x00', @ifru_ivalue=0x9ced}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) [ 321.116575] attempt to access beyond end of device [ 321.116581] loop1: rw=536870912, want=115, limit=112 [ 321.116593] attempt to access beyond end of device [ 321.116597] loop1: rw=536870912, want=116, limit=112 [ 321.116609] attempt to access beyond end of device [ 321.116614] loop1: rw=536870912, want=117, limit=112 [ 321.116631] attempt to access beyond end of device [ 321.116636] loop1: rw=536870912, want=130, limit=112 [ 321.116649] attempt to access beyond end of device [ 321.116654] loop1: rw=536870912, want=131, limit=112 [ 321.116666] attempt to access beyond end of device [ 321.116671] loop1: rw=536870912, want=132, limit=112 [ 321.116683] attempt to access beyond end of device [ 321.116687] loop1: rw=536870912, want=133, limit=112 [ 321.117989] attempt to access beyond end of device [ 321.117995] loop1: rw=536870912, want=2174, limit=112 [ 321.140526] autofs4:pid:26985:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 321.156082] autofs4:pid:26991:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 321.168420] ALSA: seq fatal error: cannot create timer (-19) [ 321.347605] attempt to access beyond end of device [ 321.353449] autofs4:pid:27007:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 321.404935] loop4: rw=536870912, want=115, limit=112 [ 321.412017] ALSA: seq fatal error: cannot create timer (-19) [ 321.447774] attempt to access beyond end of device [ 321.454417] autofs4:pid:27015:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 321.528407] loop4: rw=536870912, want=116, limit=112 03:34:17 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000280)='/dev/pktcdvd/control\x00', 0x10100, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000015c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000001480)={0x108, 0x7, 0x4, 0x100, 0x70bd2b, 0x25dfdbff, {0x5, 0x0, 0x5}, [@typed={0xc0, 0x2e, @binary="e62057a1991da98fd9756c365caf955079cd37f8d87d624f2087025cf604da75b909a667cb8ecb697d08cde559f0410cd825eb8c55318a19e19a874519b02e3cefdb71bdbf7ce9ac91899fb32e13f30eaf69cf3f38502ea417aad48d08cd6eb4d21364f8feae9fb9998187cf13adcb5635e86ccafa6f56042ab36e4b1275ba21f1c6dfb1cba8497febcd56ce3f7199d979e8380c9b9d5a76981b9d031088a7575fcc63452772836704a9b64b3af827813e5bb1ee57034bffb869"}, @generic="08ab48d1e60a9e1e5cd3723fa0364d94f65eefd9f59f5d3491ce3a7c67dbc2af00d71f8e7e1a64999f284741cc5e8222a1"]}, 0x108}, 0x1, 0x0, 0x0, 0x801}, 0x20000001) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) unlink(&(0x7f0000000000)='./file0\x00') r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) mincore(&(0x7f0000003000/0x3000)=nil, 0x3000, &(0x7f0000000480)=""/4096) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x3, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, &(0x7f0000000480)}) readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/35, 0x23}], 0x1) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) 03:34:17 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007") 03:34:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000580), 0xc, &(0x7f00000009c0)={&(0x7f0000000600)={0x14}, 0x14}}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="0a5cc80700315f85714070") ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000340)={0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x4000000080000001}}) 03:34:17 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0x800100000000937e, &(0x7f0000000100)="01000000000000001804000007ff0100000000") 03:34:17 executing program 3: syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x10, 0xfffffffffffffbfe) ioctl(r1, 0x8912, &(0x7f0000000040)="9fcf07d1e98e493a8cb17a8b4ee9a84c7bfa7130a5743ebda418d865202419867e357909b94ac3d0d00e81bbf497cd737cdaef07858a13fef3057363ab33794901ae4bebd3ba34f94e039ed667b291858bba790c27ec4fcb53fd4b6a35727ccaea2604b5188441f47801017d17acff947950625d7ff86690429e91b07529b9d08eeb4598d6b0a2326113cd72b306dff580c926457a6751f27b87ccf6f79e667299ae") [ 321.556827] attempt to access beyond end of device [ 321.561839] loop4: rw=536870912, want=117, limit=112 [ 321.567359] attempt to access beyond end of device [ 321.572353] loop4: rw=536870912, want=130, limit=112 [ 321.578002] attempt to access beyond end of device [ 321.582969] loop4: rw=536870912, want=131, limit=112 [ 321.583399] binder: release 26949:26961 transaction 14 out, still active [ 321.583404] binder: unexpected work type, 4, not freed [ 321.583407] binder: undelivered TRANSACTION_COMPLETE [ 321.583708] binder: release 26949:26961 transaction 14 in, still active [ 321.583713] binder: send failed reply for transaction 14, target dead [ 321.619865] attempt to access beyond end of device [ 321.624889] loop4: rw=536870912, want=132, limit=112 [ 321.630521] attempt to access beyond end of device [ 321.635940] loop4: rw=536870912, want=133, limit=112 [ 321.642151] attempt to access beyond end of device [ 321.647194] loop4: rw=536870912, want=2174, limit=112 [ 321.674804] autofs4:pid:27031:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 321.675500] autofs4:pid:27032:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e) [ 321.708653] attempt to access beyond end of device [ 321.713617] loop1: rw=536870912, want=130, limit=112 [ 321.719288] attempt to access beyond end of device [ 321.724387] loop1: rw=536870912, want=131, limit=112 [ 321.729948] attempt to access beyond end of device [ 321.735005] loop1: rw=536870912, want=132, limit=112 [ 321.740610] attempt to access beyond end of device [ 321.745650] loop1: rw=536870912, want=133, limit=112 [ 321.750847] attempt to access beyond end of device [ 321.756282] loop1: rw=536870912, want=142, limit=112 [ 321.761383] attempt to access beyond end of device [ 321.766389] loop1: rw=536870912, want=143, limit=112 [ 321.771579] attempt to access beyond end of device [ 321.776549] loop1: rw=536870912, want=144, limit=112 [ 321.781663] attempt to access beyond end of device [ 321.786761] loop1: rw=536870912, want=145, limit=112 [ 321.793072] attempt to access beyond end of device [ 321.798119] loop1: rw=536870912, want=2178, limit=112 [ 321.941488] binder: 27044:27050 ERROR: BC_REGISTER_LOOPER called without request [ 321.949568] binder: BINDER_SET_CONTEXT_MGR already set [ 321.954971] binder: 27039:27041 ioctl 40046207 0 returned -16 [ 321.967400] binder: 27044:27050 unknown command 4743953 [ 321.974291] binder: 27044:27050 ioctl c0306201 20000080 returned -22 [ 321.984720] binder: 27039:27041 ERROR: BC_REGISTER_LOOPER called without request [ 322.036529] binder: 27039:27053 unknown command 4743953 [ 322.041905] binder: 27039:27053 ioctl c0306201 20000080 returned -22 [ 322.170703] binder: release 27044:27050 transaction 18 out, still active [ 322.177910] binder: unexpected work type, 4, not freed [ 322.183657] binder: undelivered TRANSACTION_COMPLETE [ 322.191814] binder: release 27044:27050 transaction 18 in, still active [ 322.198801] binder: send failed reply for transaction 18, target dead [ 322.205501] binder: send failed reply for transaction 21 to 27039:27041 [ 322.695756] binder: undelivered TRANSACTION_COMPLETE [ 322.700902] binder: undelivered TRANSACTION_ERROR: 29189 INIT: Id "3" respawning too fast: disabled for 5 minutes INIT: Id "6" respawning too fast: disabled for 5 minutes INIT: Id "4" respawning too fast: disabled for 5 minutes INIT: Id "2" respawning too fast: disabled for 5 minutes INIT: Id "1" respawning too fast: disabled for 5 minutes INIT: Id "5" respawning too fast: disabled for 5 minutes [ 572.585761] INFO: task syz-executor2:26988 blocked for more than 140 seconds. [ 572.593281] Not tainted 4.9.119-g9dc978d #23 [ 572.598260] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.606651] syz-executor2 D28656 26988 3884 0x00000004 [ 572.612508] ffff88019dfd8000 ffff8801d3208a80 ffff8801d3208a80 ffff8801d4d66000 [ 572.620544] ffff8801db321c18 ffff8801d086f690 ffffffff839ebdcd ffffffff81235627 [ 572.628584] 0000000000000000 ffff88019dfd88c0 0000000600000007 ffff8801db3224e8 [ 572.636701] Call Trace: [ 572.639361] [] ? __schedule+0x64d/0x1bd0 [ 572.645132] [] ? mark_held_locks+0xc7/0x130 [ 572.651229] [] ? rwsem_down_read_failed+0x1df/0x320 [ 572.657972] [] schedule+0x7f/0x1b0 [ 572.663230] [] rwsem_down_read_failed+0x1e4/0x320 [ 572.670011] [] ? rt_mutex_futex_unlock+0x10/0x10 [ 572.676518] [] ? HARDIRQ_verbose+0x10/0x10 [ 572.682656] [] call_rwsem_down_read_failed+0x18/0x30 [ 572.690957] [] down_read+0x52/0xb0 [ 572.696189] [] ? lookup_slow+0x141/0x470 [ 572.701974] [] lookup_slow+0x141/0x470 [ 572.707598] [] ? page_put_link+0xd0/0xd0 [ 572.713376] [] walk_component+0x716/0x1bb0 [ 572.719316] [] ? __inode_permission2+0x9b/0x2d0 [ 572.725756] [] ? path_init+0x1580/0x1580 [ 572.731541] [] ? link_path_walk+0x8a7/0x1200 [ 572.737695] [] ? walk_component+0x1bb0/0x1bb0 [ 572.743937] [] path_lookupat.isra.41+0x186/0x410 [ 572.750444] [] filename_lookup.part.55+0x177/0x370 [ 572.757110] [] ? filename_parentat.isra.53.part.54+0x3d0/0x3d0 [ 572.785026] [] ? strncpy_from_user+0x20d/0x2d0 [ 572.791359] [] ? getname_flags+0x23a/0x580 [ 572.797365] [] user_path_at_empty+0x53/0x70 [ 572.803385] [] do_utimes+0x17f/0x2c0 [ 572.808930] [] ? utimes_common.isra.1+0x5e0/0x5e0 [ 572.815507] [] ? __might_fault+0x114/0x1d0 [ 572.821852] [] SyS_utimes+0x13d/0x1b0 [ 572.827433] [] ? SyS_futimesat+0x1b0/0x1b0 [ 572.833356] [] ? do_syscall_64+0x48/0x490 [ 572.839230] [] ? SyS_futimesat+0x1b0/0x1b0 [ 572.845269] [] do_syscall_64+0x1a6/0x490 [ 572.851076] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 572.858196] [ 572.858196] Showing all locks held in the system: [ 572.864572] 2 locks held by khungtaskd/519: [ 572.868961] #0: (rcu_read_lock){......}, at: [] watchdog+0x11c/0xa20 [ 572.877768] #1: (tasklist_lock){.+.+..}, at: [] debug_show_all_locks+0x79/0x218 [ 572.887551] 2 locks held by rs:main Q:Reg/3678: [ 572.892203] #0: (&f->f_pos_lock){+.+.+.}, at: [] __fdget_pos+0xac/0xd0 [ 572.901110] #1: (sb_writers#3){.+.+.+}, at: [] vfs_write+0x3ae/0x530 [ 572.909994] 2 locks held by getty/3776: [ 572.913945] #0: (&tty->ldisc_sem){++++++}, at: [] ldsem_down_read+0x32/0x40 [ 572.923364] #1: (&ldata->atomic_read_lock){+.+.+.}, at: [] n_tty_read+0x202/0x16e0 [ 572.933358] 1 lock held by syz-executor2/26977: [ 572.938145] #0: (&sb->s_type->i_mutex_key#15){++++++}, at: [] lookup_slow+0x141/0x470 [ 572.948508] 1 lock held by syz-executor2/26988: [ 572.953153] #0: (&sb->s_type->i_mutex_key#15){++++++}, at: [] lookup_slow+0x141/0x470 [ 572.963507] 1 lock held by syz-executor2/27042: [ 572.968287] #0: (&sb->s_type->i_mutex_key#15){++++++}, at: [] lock_mount+0x8c/0x2c0 [ 572.978481] [ 572.980088] ============================================= [ 572.980088] [ 572.987284] NMI backtrace for cpu 1 [ 572.990963] CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.119-g9dc978d #23 [ 572.998215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.007548] ffff8801d8bffd08 ffffffff81eb4be9 0000000000000000 0000000000000001 [ 573.015624] 0000000000000001 0000000000000001 ffffffff810b9bd0 ffff8801d8bffd40 [ 573.023649] ffffffff81ebfee7 0000000000000001 0000000000000000 0000000000000003 [ 573.031740] Call Trace: [ 573.034363] [] dump_stack+0xc1/0x128 [ 573.039707] [] ? irq_force_complete_move+0x320/0x320 [ 573.046480] [] nmi_cpu_backtrace.cold.2+0x48/0x87 [ 573.052970] [] ? irq_force_complete_move+0x320/0x320 [ 573.059702] [] nmi_trigger_cpumask_backtrace+0x12a/0x14f [ 573.066832] [] arch_trigger_cpumask_backtrace+0x14/0x20 [ 573.073838] [] watchdog+0x6b4/0xa20 [ 573.079095] [] ? watchdog+0x11c/0xa20 [ 573.084544] [] kthread+0x26d/0x300 [ 573.089730] [] ? reset_hung_task_detector+0x20/0x20 [ 573.096463] [] ? kthread_park+0xa0/0xa0 [ 573.102067] [] ? kthread_park+0xa0/0xa0 [ 573.107710] [] ? kthread_park+0xa0/0xa0 [ 573.113321] [] ret_from_fork+0x5c/0x70 [ 573.119137] Sending NMI from CPU 1 to CPUs 0: [ 573.123698] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff839fb8d6 [ 573.131124] Kernel panic - not syncing: hung_task: blocked tasks [ 573.137316] CPU: 1 PID: 519 Comm: khungtaskd Not tainted 4.9.119-g9dc978d #23 [ 573.144568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 573.153901] ffff8801d8bffcc8 ffffffff81eb4be9 ffffffff83c8bc20 00000000ffffffff [ 573.161899] 0000000000000000 0000000000000001 dffffc0000000000 ffff8801d8bffd88 [ 573.169885] ffffffff81421c95 0000000041b58ab3 ffffffff843bc020 ffffffff81421ad6 [ 573.177883] Call Trace: [ 573.180447] [] dump_stack+0xc1/0x128 [ 573.185789] [] panic+0x1bf/0x3bc [ 573.190800] [] ? add_taint.cold.6+0x16/0x16 [ 573.196766] [] ? ___preempt_schedule+0x16/0x18 [ 573.203053] [] ? nmi_trigger_cpumask_backtrace+0x100/0x14f [ 573.210309] [] watchdog+0x6c5/0xa20 [ 573.215565] [] ? watchdog+0x11c/0xa20 [ 573.220995] [] kthread+0x26d/0x300 [ 573.226165] [] ? reset_hung_task_detector+0x20/0x20 [ 573.232834] [] ? kthread_park+0xa0/0xa0 [ 573.238440] [] ? kthread_park+0xa0/0xa0 [ 573.244039] [] ? kthread_park+0xa0/0xa0 [ 573.249641] [] ret_from_fork+0x5c/0x70 [ 573.255497] Dumping ftrace buffer: [ 573.259125] (ftrace buffer empty) [ 573.262817] Kernel Offset: disabled [ 573.266432] Rebooting in 86400 seconds..